d4bc44ddc24214d6409a8e0ac6eaa66c47f19c345123498373a81e7b96faed98

Analysis

max time kernel
1s
max time network
131s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
03-11-2024 03:57

Target

d4bc44ddc24214d6409a8e0ac6eaa66c47f19c345123498373a81e7b96faed98.elf
Size

69KB
MD5

5ebf5890d7d2c998b801d48b87667276
SHA1

4888c1c4df5cfc9f76b9dc5094e9b991127e16f5
SHA256

d4bc44ddc24214d6409a8e0ac6eaa66c47f19c345123498373a81e7b96faed98
SHA512

651716eaa2f1fb738361ddc500c428134627a99a98bc8260a90ed4e14a1eb93e37f41d164806e39230e9a71e72cea2f96c2a6f781e27c8c9394eb3d27f0fe24e
SSDEEP

1536:bSKRI7C2wEI5Z5268+I/UCCPyimYJmoV9okwKBTx3Poui7N1OF9Q+1j:bSKRI7C2wEI5nxCCqimYJmoVikwKBTxl

Score

7^/10

rootkit

Loads a kernel module 2 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2826	d4bc44ddc24214d6409a8e0ac6eaa66c47f19c345123498373a81e7b96faed98.elf
2826	d4bc44ddc24214d6409a8e0ac6eaa66c47f19c345123498373a81e7b96faed98.elf

/tmp/d4bc44ddc24214d6409a8e0ac6eaa66c47f19c345123498373a81e7b96faed98.elf
/tmp/d4bc44ddc24214d6409a8e0ac6eaa66c47f19c345123498373a81e7b96faed98.elf
1⤵
- Loads a kernel module
PID:2826