Analysis

  • max time kernel
    145s
  • max time network
    147s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    31/08/2024, 23:50

General

  • Target

    SecuriteInfo.com.Linux.Siggen.9999.12346.8960.elf

  • Size

    36KB

  • MD5

    ba2cb5b8715ba94c39e24e75a34d0ea0

  • SHA1

    7182bf3b0e14e5224e741c15174c6e93f00df444

  • SHA256

    01fad47db364d66c0a9ed9c6c5c558c5a95eb0d015bec4be5f1109d14e15ec33

  • SHA512

    0c26a32066b88dc22aada2ca606639e6717b84501402eac80107f7130fca6c43f6cd40e11e88ae1deda45320a6c726af04bf946818ef3099d84f31e523f9b33d

  • SSDEEP

    768:UvSMkHISYKCJUuLwTTncdkBHjeWNUOkB1U66SKzUwAWV:1MOISYKuUrXLpkBv6h

Score
7/10

Malware Config

Signatures

  • Loads a kernel module 64 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

Processes

  • /tmp/SecuriteInfo.com.Linux.Siggen.9999.12346.8960.elf
    /tmp/SecuriteInfo.com.Linux.Siggen.9999.12346.8960.elf
    1⤵
    • Loads a kernel module
    PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads