ae0af7bc6be80adce21c8e9a40a993a17193c7bcfabcbda707226edd6cb5bcd1

Analysis

max time kernel
140s
max time network
152s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
14-10-2024 11:59

Target

ae0af7bc6be80adce21c8e9a40a993a17193c7bcfabcbda707226edd6cb5bcd1.elf
Size

21KB
MD5

1474701bef06a492df38e4354f544ec6
SHA1

8d2a2564f1bb70100beffa2522f47aca64e9963c
SHA256

ae0af7bc6be80adce21c8e9a40a993a17193c7bcfabcbda707226edd6cb5bcd1
SHA512

9d1212c2456e09310bbb1cba5da30686c3ae0dc98a4f1a39e2ed74384ea8919ba4ff32724ddaa3e6fc6f7ffcb4c64ea38845ab1cd7b60934415a7e1ccf258016
SSDEEP

384:MeoNufGrQtUovQYGcQh36/Z3ppo/w593u2MH+fi55OP/olRRhKe/:rlfGrQt71J3/l3oW9+2i+fi55OPQnR9/

Score

7^/10

rootkit

Loads a kernel module 8 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2870	ae0af7bc6be80adce21c8e9a40a993a17193c7bcfabcbda707226edd6cb5bcd1.elf
2870	ae0af7bc6be80adce21c8e9a40a993a17193c7bcfabcbda707226edd6cb5bcd1.elf
2870	ae0af7bc6be80adce21c8e9a40a993a17193c7bcfabcbda707226edd6cb5bcd1.elf
2870	ae0af7bc6be80adce21c8e9a40a993a17193c7bcfabcbda707226edd6cb5bcd1.elf
2870	ae0af7bc6be80adce21c8e9a40a993a17193c7bcfabcbda707226edd6cb5bcd1.elf
2870	ae0af7bc6be80adce21c8e9a40a993a17193c7bcfabcbda707226edd6cb5bcd1.elf
2870	ae0af7bc6be80adce21c8e9a40a993a17193c7bcfabcbda707226edd6cb5bcd1.elf
2870	ae0af7bc6be80adce21c8e9a40a993a17193c7bcfabcbda707226edd6cb5bcd1.elf

/tmp/ae0af7bc6be80adce21c8e9a40a993a17193c7bcfabcbda707226edd6cb5bcd1.elf
/tmp/ae0af7bc6be80adce21c8e9a40a993a17193c7bcfabcbda707226edd6cb5bcd1.elf
1⤵
- Loads a kernel module
PID:2867