Analysis
- max time kernel
149s - max time network
128s - platform
ubuntu-24.04_amd64 - resource
ubuntu2404-amd64-20240523-en - resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system - submitted
08/11/2024, 08:37
Behavioral task
behavioral1
Sample
boatnet.x86.elf
Resource
ubuntu2404-amd64-20240523-en
1 signatures
150 seconds
General
- Target boatnet.x86.elf
- Size 20KB
- Sample241108-kh6csszbnj
- SHA256 e871e1187a7f36a3fd5b0d3f87d5e6f84129de35ff456db798e6a79d4d00e9ff
- MD5 e1fa54eeda3e91816e8299f04fb80e1b
- SHA1 9f9e2f1f9376c6f34c7894bace37a381abca18a5
- SHA512 bb3d140855918692bf3e3906206d156ef0727345f895ddde388b4a827db4c7ddcf7dc5d23ea764fa82ab626987904a9adb90e77558cc2d9ef3918e17c2ed8584
- SSDEEP 384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTv:x98o08kxofBE+ZkXaITbp2F2TWul0c5b
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Loads a kernel module 64 IoCs
Loads a Linux kernel module, potentially to achieve persistence
pid Process 2442 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf 2443 boatnet.x86.elf