3532755a22f124078e5bc41cb4122c72784e40e98c5286fa59ac8f50c6a72316

Analysis

max time kernel
0s
max time network
133s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
22-08-2024 17:52

Target

b8903a8cddbce6d529f56f0dfa151b30_JaffaCakes118
Size

1.5MB
MD5

b8903a8cddbce6d529f56f0dfa151b30
SHA1

79c3a1f5f734a5c5e570180b4950ecbe9ead539c
SHA256

3532755a22f124078e5bc41cb4122c72784e40e98c5286fa59ac8f50c6a72316
SHA512

d6a6b51d63dbd1435130e26cf863f80785169a329c2cc50eee11bdd2e5eecfa0c7c6dbe7014570a82473c7524c2ed6b4c30c67bb0bc0270b18ba5b6f1a400142
SSDEEP

24576:GA46TrzJBisiOvhlOHdSbQmHyJgf/kgX0Exb2cyaGpIoiMEnnLmYXqSYKKZdTrnD:zRNi6OHdSbQoyJyXpxb2PaGpXiMEnLmB

Score

7^/10

rootkit

Loads a kernel module 1 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2826	b8903a8cddbce6d529f56f0dfa151b30_JaffaCakes118

/tmp/b8903a8cddbce6d529f56f0dfa151b30_JaffaCakes118
/tmp/b8903a8cddbce6d529f56f0dfa151b30_JaffaCakes118
1⤵
- Loads a kernel module
PID:2826