Overview
overview
3Static
static
3rooty-mast...KI.pdf
windows7-x64
3rooty-mast...KI.pdf
windows10-2004-x64
3rooty-mast...bi.pdf
windows7-x64
3rooty-mast...bi.pdf
windows10-2004-x64
3rooty-mast.../ioctl
ubuntu-24.04-amd64
rooty-master/ping.py
ubuntu-18.04-amd64
3rooty-master/ping.py
debian-9-armhf
3rooty-master/ping.py
debian-9-mips
3rooty-master/ping.py
debian-9-mipsel
3rooty-master/rooty.ko
ubuntu-24.04-amd64
rooty-mast....mod.o
ubuntu-22.04-amd64
rooty-master/rooty.o
ubuntu-22.04-amd64
rooty-mast...d/sshd
ubuntu-22.04-amd64
rooty-mast...d/vncd
ubuntu-24.04-amd64
Behavioral task
behavioral1
Sample
rooty-master/docs/3_PT1-2_41-s39_CELEBI_SUSKI.pdf
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
rooty-master/docs/3_PT1-2_41-s39_CELEBI_SUSKI.pdf
Resource
win10v2004-20240910-en
Behavioral task
behavioral3
Sample
rooty-master/docs/Praca Inżynierska - Karol Celebi.pdf
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
rooty-master/docs/Praca Inżynierska - Karol Celebi.pdf
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
rooty-master/ioctl/ioctl
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral6
Sample
rooty-master/ping.py
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral7
Sample
rooty-master/ping.py
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral8
Sample
rooty-master/ping.py
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral9
Sample
rooty-master/ping.py
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral10
Sample
rooty-master/rooty.ko
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral11
Sample
rooty-master/rooty.mod.o
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral12
Sample
rooty-master/rooty.o
Resource
ubuntu2204-amd64-20240729-en
Behavioral task
behavioral13
Sample
rooty-master/sshd/sshd
Resource
ubuntu2204-amd64-20240522.1-en
Behavioral task
behavioral14
Sample
rooty-master/vncd/vncd
Resource
ubuntu2404-amd64-20240523-en
General
-
Target
860ce5d96af1f462acead5ee876b1f2f2b5ba4b114dafebcdd752d6feac315e5.zip
-
Size
4.7MB
-
MD5
ad91755a00374361894f754f1b32af98
-
SHA1
bcbe147cf9ebed6a454162211848dc4bc1529428
-
SHA256
860ce5d96af1f462acead5ee876b1f2f2b5ba4b114dafebcdd752d6feac315e5
-
SHA512
03dc11fad3b2045fcaeb60c84a9801fea01892554adeaa73625e5f1cfece23aae01e093df628ea2e33c6764143e8f24b2a22fc00f08bdee67d37225c68154b21
-
SSDEEP
98304:ANVwD9EV5nm0279yvV0Y6IQCjspf4Tu/BbbOZLn+vsXV/C/Wsqcq:zD9+5s79yN2IQ5pfk+BX2Ln+kE3qh
Malware Config
Signatures
Files
-
860ce5d96af1f462acead5ee876b1f2f2b5ba4b114dafebcdd752d6feac315e5.zip.zip
-
rooty-master/LICENSE
-
rooty-master/Makefile
-
rooty-master/README.md
-
rooty-master/art/init.png.png
-
rooty-master/art/ioctl-control.png.png
-
rooty-master/art/keylogger.png.png
-
rooty-master/art/ssh-access.png.png
-
rooty-master/art/ssh-init.png.png
-
rooty-master/art/ssh-init2.png.png
-
rooty-master/art/vncd-init.png.png
-
rooty-master/art/vncd-running.png.png
-
rooty-master/docs/3_PT1-2_41-s39_CELEBI_SUSKI.pdf.pdf
-
rooty-master/docs/Praca Inżynierska - Karol Celebi.pdf.pdf
-
http://en-USinfo.si
-
http://en-USpre_hook.pf
-
http://phrack.org/issues/58/7.html
-
http://r00tkit.me/maK_it-Linux-Rootkit.pdf
-
http://rooty_proc_args.pid
-
http://seq_ops.show
-
http://tur-bochaos.blogspot.com/2013/10/writing-linux-rootkits-201-23.html
-
http://turbochaos.blog-spot.com/2013/09/linux-rootkits-101-1-of-3.html
-
http://turbochaos.blogspot.com/2013/10/writing-linux-rootkits-301_31.html
-
http://volatility-labs.blogspot.com/2012/09/movp-15-kbeast-rootkit-de-tecting-hidden.html
-
http://www.kernel-hacking.com/rodrigo/docs/StMichael/BuntenSlides.pdf
-
http://www.linux-security.com/content/view/154709/171/
-
http://www.linux.it/~ru-bini/docs/ksys/ksys.html
-
http://www.ouah.org/to-byknark.html
-
http://www.rootkitanalytics.com/kernelland/
-
https://onebit-bug.me/2011/03/04/introducing-linux-kernel-symbols/
- Show all
-
-
rooty-master/init
-
rooty-master/ioctl.h
-
rooty-master/ioctl/Makefile
-
rooty-master/ioctl/ioctl.elf linux x86
-
rooty-master/ioctl/ioctl.c
-
rooty-master/keylogger.h
-
rooty-master/keymap.h
-
rooty-master/modules.order
-
rooty-master/ping.py.py .sh linux
-
rooty-master/proc_fs_hide.h
-
rooty-master/rooty.c
-
rooty-master/rooty.ko.elf linux x86
-
rooty-master/rooty.mod.c
-
rooty-master/rooty.mod.o.elf linux x86
-
rooty-master/rooty.o.elf linux x86
-
rooty-master/socket_hide.h
-
rooty-master/ssh.h
-
rooty-master/sshd/Makefile
-
rooty-master/sshd/sshd.elf linux x86
-
rooty-master/sshd/sshd.c
-
rooty-master/syscall_table.h
-
rooty-master/vnc.h
-
rooty-master/vncd/Makefile
-
rooty-master/vncd/vnc-server.c
-
rooty-master/vncd/vncd.elf linux x86