214a6fe56b30ccfe7b844e5d41e6dc37d65d3bab0894acf204b356c68d0d6769

Analysis

max time kernel
0s
max time network
128s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
23/08/2024, 01:48

Target

b9e5ee1c677ff99e3ed3abece8db457c_JaffaCakes118
Size

1.1MB
MD5

b9e5ee1c677ff99e3ed3abece8db457c
SHA1

129b6546064afe130e5998657bbc37c95b17a81e
SHA256

214a6fe56b30ccfe7b844e5d41e6dc37d65d3bab0894acf204b356c68d0d6769
SHA512

3fce7738050846d9e8600517055a86dd4fcc7d8574f185c417ca7de72616d13399b20333bc0888704d8848724977d532335d879a76f18cb1630f3b6dd4932f78
SSDEEP

24576:cSlXre0q1r+GsNUV81TSCi1RUd52qwXU+EKE81Lw+ddNQFODf8AHxreU1u:cSNt4rONU6Nn2n8XO04b9+gu

Score

7^/10

rootkit

Loads a kernel module 9 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2478	b9e5ee1c677ff99e3ed3abece8db457c_JaffaCakes118
2480	Process not Found
2478	b9e5ee1c677ff99e3ed3abece8db457c_JaffaCakes118
2478	b9e5ee1c677ff99e3ed3abece8db457c_JaffaCakes118
2484	Process not Found
2485	Process not Found
2486	Process not Found
2484	Process not Found
2478	b9e5ee1c677ff99e3ed3abece8db457c_JaffaCakes118

/tmp/b9e5ee1c677ff99e3ed3abece8db457c_JaffaCakes118
/tmp/b9e5ee1c677ff99e3ed3abece8db457c_JaffaCakes118
1⤵
- Loads a kernel module
PID:2478