e56813b987e2bd61add3481cdcbda3dcb82d6ce965bd15de5121b6cc0cc7815c

Analysis

max time kernel
1s
max time network
129s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
02-11-2024 09:09

Target

e56813b987e2bd61add3481cdcbda3dcb82d6ce965bd15de5121b6cc0cc7815c.elf
Size

69KB
MD5

893c23406acbeb9be3d94fa5b7fb08b7
SHA1

419fef832fdb438a61974322187056a8755d6dca
SHA256

e56813b987e2bd61add3481cdcbda3dcb82d6ce965bd15de5121b6cc0cc7815c
SHA512

ec9c32e25688058fd536f2f3bf073ecd06ebb4cf1880c45c91c18d7042282bda38c8e8fb3720dd81ecc33838e08b556fdc4adaaaa7fa960efb3472e6fac62795
SSDEEP

1536:bSKRI7C2wEI5Z5268+I/UCCPyiO+vmoV9okwKBTx3Poui7N1OF9Q+4j:bSKRI7C2wEI5nxCCqiO+vmoVikwKBTxI

Score

7^/10

rootkit

Loads a kernel module 2 IoCs

Loads a Linux kernel module, potentially to achieve persistence

Processes:

e56813b987e2bd61add3481cdcbda3dcb82d6ce965bd15de5121b6cc0cc7815c.elf

pid	process
2514	e56813b987e2bd61add3481cdcbda3dcb82d6ce965bd15de5121b6cc0cc7815c.elf
2514	e56813b987e2bd61add3481cdcbda3dcb82d6ce965bd15de5121b6cc0cc7815c.elf

/tmp/e56813b987e2bd61add3481cdcbda3dcb82d6ce965bd15de5121b6cc0cc7815c.elf
/tmp/e56813b987e2bd61add3481cdcbda3dcb82d6ce965bd15de5121b6cc0cc7815c.elf
1⤵
- Loads a kernel module
PID:2514