337d43ebc7e0d0ab01c814767a08e0ef698473760a0618deac778c5094b5bf00

Analysis

max time kernel
140s
max time network
148s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
12-11-2024 01:07

Target

ed973f3ce73261807f83a57e914e128261ea38507f17cc3b28910de8b288f574.elf
Size

89KB
MD5

40e12ebf6b877bb31453ff6afab29641
SHA1

ea71b41a708d30f83910a09cabcf923d8d8cbbb0
SHA256

ed973f3ce73261807f83a57e914e128261ea38507f17cc3b28910de8b288f574
SHA512

a1c780cc5848a65973702d048a507ab528213ea9ab37cbdc2c0493e9eb509a298dec2c7424de7fd3b3236f98d954bf573884ff6a3d6fcd5b480c0752d2f2a7a8
SSDEEP

1536:2XwWc3fJOB/R4twwKWwCwyIZWDq1S3u8M5hhuP4JseWshe0QzUzJYQ2Wk:QcsB/R4tTdwyIZWDq1jf5hhuAWUe0QzR

Score

7^/10

rootkit

Loads a kernel module 8 IoCs

Loads a Linux kernel module, potentially to achieve persistence

Processes:

ed973f3ce73261807f83a57e914e128261ea38507f17cc3b28910de8b288f574.elf

/tmp/ed973f3ce73261807f83a57e914e128261ea38507f17cc3b28910de8b288f574.elf
/tmp/ed973f3ce73261807f83a57e914e128261ea38507f17cc3b28910de8b288f574.elf
1⤵
- Loads a kernel module
PID:2477