d8cf01ab6075106b887f382007a47a5fc33ec04e3bbf50b91a53e8c9f9de3682

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
22/08/2024, 11:02

Target

d8cf01ab6075106b887f382007a47a5fc33ec04e3bbf50b91a53e8c9f9de3682.elf
Size

100KB
MD5

1d182a485d9c9e14d7e530494a3e8a4c
SHA1

ac4e35a891048b371aa9df8d281d3dad3b98cbe8
SHA256

d8cf01ab6075106b887f382007a47a5fc33ec04e3bbf50b91a53e8c9f9de3682
SHA512

0c771446e2dcb604034bd248dc54969e6f9ddd55f1e49e7d8cfe8827134097696e72b65163ed82794d109b7b3adb13bae26e5b9d973f0a492c038d1320c22787
SSDEEP

3072:WOS+AxMyDXmMWKq0TNORAMdThOdMw+noI:KyAmMA0sSMdT096oI

Score

7^/10

rootkit

Loads a kernel module 1 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2478	d8cf01ab6075106b887f382007a47a5fc33ec04e3bbf50b91a53e8c9f9de3682.elf

/tmp/d8cf01ab6075106b887f382007a47a5fc33ec04e3bbf50b91a53e8c9f9de3682.elf
/tmp/d8cf01ab6075106b887f382007a47a5fc33ec04e3bbf50b91a53e8c9f9de3682.elf
1⤵
- Loads a kernel module
PID:2478