Analysis
-
max time kernel
145s -
max time network
147s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
31/08/2024, 23:50
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Linux.Siggen.9999.12346.8960.elf
Resource
ubuntu2404-amd64-20240523-en
1 signatures
150 seconds
General
-
Target
SecuriteInfo.com.Linux.Siggen.9999.12346.8960.elf
-
Size
36KB
-
MD5
ba2cb5b8715ba94c39e24e75a34d0ea0
-
SHA1
7182bf3b0e14e5224e741c15174c6e93f00df444
-
SHA256
01fad47db364d66c0a9ed9c6c5c558c5a95eb0d015bec4be5f1109d14e15ec33
-
SHA512
0c26a32066b88dc22aada2ca606639e6717b84501402eac80107f7130fca6c43f6cd40e11e88ae1deda45320a6c726af04bf946818ef3099d84f31e523f9b33d
-
SSDEEP
768:UvSMkHISYKCJUuLwTTncdkBHjeWNUOkB1U66SKzUwAWV:1MOISYKuUrXLpkBv6h
Score
7/10
Malware Config
Signatures
-
Loads a kernel module 64 IoCs
Loads a Linux kernel module, potentially to achieve persistence
pid Process 2460 SecuriteInfo.com.Linux.Siggen.9999.12346.8960.elf 2460 SecuriteInfo.com.Linux.Siggen.9999.12346.8960.elf 2460 SecuriteInfo.com.Linux.Siggen.9999.12346.8960.elf 2460 SecuriteInfo.com.Linux.Siggen.9999.12346.8960.elf 2460 SecuriteInfo.com.Linux.Siggen.9999.12346.8960.elf 2460 SecuriteInfo.com.Linux.Siggen.9999.12346.8960.elf 2460 SecuriteInfo.com.Linux.Siggen.9999.12346.8960.elf 2460 SecuriteInfo.com.Linux.Siggen.9999.12346.8960.elf 2461 Process not Found 2461 Process not Found 2461 Process not Found 2462 Process not Found 2463 Process not Found 2464 Process not Found 2461 Process not Found 2461 Process not Found 2487 Process not Found 2461 Process not Found 2461 Process not Found 2488 Process not Found 2461 Process not Found 2461 Process not Found 2489 Process not Found 2461 Process not Found 2461 Process not Found 2490 Process not Found 2461 Process not Found 2461 Process not Found 2491 Process not Found 2461 Process not Found 2461 Process not Found 2495 Process not Found 2461 Process not Found 2461 Process not Found 2496 Process not Found 2461 Process not Found 2461 Process not Found 2497 Process not Found 2461 Process not Found 2461 Process not Found 2498 Process not Found 2461 Process not Found 2461 Process not Found 2499 Process not Found 2461 Process not Found 2461 Process not Found 2500 Process not Found 2461 Process not Found 2461 Process not Found 2501 Process not Found 2461 Process not Found 2461 Process not Found 2502 Process not Found 2461 Process not Found 2461 Process not Found 2503 Process not Found 2461 Process not Found 2461 Process not Found 2504 Process not Found 2461 Process not Found 2461 Process not Found 2505 Process not Found 2461 Process not Found 2461 Process not Found