55845e687ddcd2c133d6e30802be2dcc54f27fb8abb894229f76b0767ce56567

Analysis

max time kernel
120s
max time network
129s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
09-10-2024 17:01

Target

55845e687ddcd2c133d6e30802be2dcc54f27fb8abb894229f76b0767ce56567.elf
Size

4.7MB
MD5

c20200ae3c8acb3aa23a9097b6099739
SHA1

df920c349a310f6a1532ed05f524f400e85603b3
SHA256

55845e687ddcd2c133d6e30802be2dcc54f27fb8abb894229f76b0767ce56567
SHA512

340e157afe4f7b0800009bb220be56dcaffb0b41409935a4730fcfe6f4775960b1aaa0d804d0a0fbcfb47d451cf8c1b2c17cc2211c88046bc38295721c0c5b16
SSDEEP

49152:MRos/AVhzmQymwq+6r0BCU0hVba2j2O7LIyaXn6k6VjfbtvDGG0U:LIuGq+6r0BL0TM37

Score

7^/10

rootkit

Loads a kernel module 8 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2499	55845e687ddcd2c133d6e30802be2dcc54f27fb8abb894229f76b0767ce56567.elf
2499	55845e687ddcd2c133d6e30802be2dcc54f27fb8abb894229f76b0767ce56567.elf
2499	55845e687ddcd2c133d6e30802be2dcc54f27fb8abb894229f76b0767ce56567.elf
2499	55845e687ddcd2c133d6e30802be2dcc54f27fb8abb894229f76b0767ce56567.elf
2499	55845e687ddcd2c133d6e30802be2dcc54f27fb8abb894229f76b0767ce56567.elf
2501	55845e687ddcd2c133d6e30802be2dcc54f27fb8abb894229f76b0767ce56567.elf
2499	55845e687ddcd2c133d6e30802be2dcc54f27fb8abb894229f76b0767ce56567.elf
2502	55845e687ddcd2c133d6e30802be2dcc54f27fb8abb894229f76b0767ce56567.elf

/tmp/55845e687ddcd2c133d6e30802be2dcc54f27fb8abb894229f76b0767ce56567.elf
/tmp/55845e687ddcd2c133d6e30802be2dcc54f27fb8abb894229f76b0767ce56567.elf
1⤵
- Loads a kernel module
PID:2499