Analysis

  • max time kernel
    149s
  • max time network
    130s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    09-10-2024 01:12

General

  • Target

    1ca580d99827e0bd5cc2c87f84394120d990b150758cadb8ef31d273f8d91c43.elf

  • Size

    64KB

  • MD5

    be3a87b8703835b14d33b30e41413501

  • SHA1

    d84b7739d5da9513afdf6054a84fdce3f8acbbd9

  • SHA256

    1ca580d99827e0bd5cc2c87f84394120d990b150758cadb8ef31d273f8d91c43

  • SHA512

    e716b20aab103e27e246b731793d3d0342c4c1de17dc33fb59b04c48db22c13a04c46df67ff013c80076e7baed44a7e4a2faf45880d5b40596247b0f20e8c4d4

  • SSDEEP

    768:7DCjHOp1LDZKOR2tEM5XEqVse60eKjWBeYcA+KZ/AhWLzCcfxPPCC1rTqpu:7+SplD1RKEqX2epJhwf/PP71So

Score
7/10

Malware Config

Signatures

  • Loads a kernel module 1 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

  • Unexpected DNS network traffic destination 1 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

  • /tmp/1ca580d99827e0bd5cc2c87f84394120d990b150758cadb8ef31d273f8d91c43.elf
    /tmp/1ca580d99827e0bd5cc2c87f84394120d990b150758cadb8ef31d273f8d91c43.elf
    1⤵
    • Loads a kernel module
    PID:3640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads