c405ab34a8bf966b3020641fb6427adec5d027cf99fa8777365f221bec5f6453

Analysis

max time kernel
140s
max time network
148s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
06-09-2024 12:44

Target

cf8f34bae736d71112abad84ce64e5c9_JaffaCakes118
Size

163KB
MD5

cf8f34bae736d71112abad84ce64e5c9
SHA1

69eea2eed6369039396f48fbf24a663d88cad03c
SHA256

c405ab34a8bf966b3020641fb6427adec5d027cf99fa8777365f221bec5f6453
SHA512

8547bfb7c093fb6d70ab91aa5619cdd154e07ffdfc319374ee22181f527a57509892cf93b49f704f0501db4c00673b39316e9d40f0f26e0723c74600f062ee8c
SSDEEP

3072:iB3CHhP2YVjLWmtKXxTAFxNTPQS2DwCOBJN6ZUqqF4q4/mpcL4D/PYGlETWHtTS:iehP2YVjLWmInS2UC80qF4Z/mpcL4D/W

Score

7^/10

rootkit

Loads a kernel module 10 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2486	cf8f34bae736d71112abad84ce64e5c9_JaffaCakes118
2486	cf8f34bae736d71112abad84ce64e5c9_JaffaCakes118
2488	Process not Found
2488	Process not Found
2488	Process not Found
2488	Process not Found
2488	Process not Found
2488	Process not Found
2488	Process not Found
2488	Process not Found

/tmp/cf8f34bae736d71112abad84ce64e5c9_JaffaCakes118
/tmp/cf8f34bae736d71112abad84ce64e5c9_JaffaCakes118
1⤵
- Loads a kernel module
PID:2486