b7efd9fb8befbecaf856a3dce3eae13e1f02bcd49e3e76e481724b5fa014fdc9

Analysis

max time kernel
149s
max time network
150s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
17-09-2024 15:05

Target

e7167132ed7370b49db5dff07323ad22_JaffaCakes118
Size

151KB
MD5

e7167132ed7370b49db5dff07323ad22
SHA1

ca5627459ce558388adb9365d7c1c863c2ebf83f
SHA256

b7efd9fb8befbecaf856a3dce3eae13e1f02bcd49e3e76e481724b5fa014fdc9
SHA512

db74e7477866055b26d7def1be9951e1f0d1931a3f46d4095315bff196922af866618b2dde33dff4221f702db9fc99fcbfbbfac14d9f0393b1bd3d786bb0e30b
SSDEEP

3072:1DXJDMc40dlqKN+2NR5dhQLUsYX5ntQL5TTAx9flANpTnz:1DSkrNNNR5dPs45ntQL5TTAx9flANpTz

Score

7^/10

rootkit

Loads a kernel module 64 IoCs

Loads a Linux kernel module, potentially to achieve persistence

Processes:

e7167132ed7370b49db5dff07323ad22_JaffaCakes118

/tmp/e7167132ed7370b49db5dff07323ad22_JaffaCakes118
/tmp/e7167132ed7370b49db5dff07323ad22_JaffaCakes118
1⤵
- Loads a kernel module
PID:2527