324f57878b778a67a8a8fb8bbb651411b54042331bf9b22fb692252f1772ed8f

Analysis

max time kernel
0s
max time network
128s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
02-11-2024 03:43

Target

324f57878b778a67a8a8fb8bbb651411b54042331bf9b22fb692252f1772ed8f.elf
Size

61KB
MD5

f7505a8b058281835546dd4549fe7dbc
SHA1

5725793206d387662d9dbbc6649bd63dea8929bd
SHA256

324f57878b778a67a8a8fb8bbb651411b54042331bf9b22fb692252f1772ed8f
SHA512

f07626f3aa0103d417bc3cb4ef60133066d463ade98ba486bd706c54df0a428f27023f5e737abc5214f79026ce39fd91966a65cafb604b0a342b379c2dc7f8db
SSDEEP

1536:1BGfyT5OGMMt4cesUTeFIv5TzHhS3cgodIjOepn2C:1caT5OGMMtmaATzBS3Ro2Kanr

Score

7^/10

rootkit

Loads a kernel module 1 IoCs

Loads a Linux kernel module, potentially to achieve persistence

Processes:

324f57878b778a67a8a8fb8bbb651411b54042331bf9b22fb692252f1772ed8f.elf

pid	Process
2434	324f57878b778a67a8a8fb8bbb651411b54042331bf9b22fb692252f1772ed8f.elf

/tmp/324f57878b778a67a8a8fb8bbb651411b54042331bf9b22fb692252f1772ed8f.elf
/tmp/324f57878b778a67a8a8fb8bbb651411b54042331bf9b22fb692252f1772ed8f.elf
1⤵
- Loads a kernel module
PID:2434