Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    06-11-2024 21:54

General

  • Target

    24d4a9188488b4bcb9e4eb5a0e0c366e887680e37ba4763ced86cffda96eb3d4.elf

  • Size

    168KB

  • MD5

    12ecbdb77f1dd329fd10f6aa952d7910

  • SHA1

    6eb08fe6ef32d20ca1389d2db75845f8b3b30b8e

  • SHA256

    24d4a9188488b4bcb9e4eb5a0e0c366e887680e37ba4763ced86cffda96eb3d4

  • SHA512

    c46652569f02b64399d8d412bf11845bb4ee03387cafa1f07797331a24f2d22fb9196fd42078a0c099e9cf4c09159ebb06bb659e739993c4936f1dc17445b9ee

  • SSDEEP

    3072:10uhqEK9XMbrfGUnldZtIHymbEN73hjLAwvUZChaTF9e:JVK9XMHOYl3uHgp39BUbT/e

Score
9/10

Malware Config

Signatures

  • Contacts a large (46383) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Loads a kernel module 64 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

Processes

  • /tmp/24d4a9188488b4bcb9e4eb5a0e0c366e887680e37ba4763ced86cffda96eb3d4.elf
    /tmp/24d4a9188488b4bcb9e4eb5a0e0c366e887680e37ba4763ced86cffda96eb3d4.elf
    1⤵
    • Loads a kernel module
    PID:3638

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads