1c849a237a86069cd3bcfdba35de5f42c924956c0a68d1218929c5e842a87eec

Analysis

max time kernel
0s
max time network
134s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
12-11-2024 02:07

Target

1c849a237a86069cd3bcfdba35de5f42c924956c0a68d1218929c5e842a87eec.elf
Size

81KB
MD5

040cca19688a7b2940297a9dfb876476
SHA1

9056ff61db26f22246a16751de5cafc9a9118460
SHA256

1c849a237a86069cd3bcfdba35de5f42c924956c0a68d1218929c5e842a87eec
SHA512

8b9353bf24bab8e0d84a778550299891d22c27f87476574443f7ba5bc1ef5a2dab0d4e252a0bbc851533176f946944b88f48b1fb99190b6ad983dd0eb2996b3a
SSDEEP

1536:9aEdeN92SfR1gbb+XCQ1kL5LTWkNDUyto+sktdj76FlWNh5D50:sEdeN92S5y+XCQqL5LTWkZU+ol6j40NW

Score

7^/10

rootkit

Loads a kernel module 1 IoCs
Loads a Linux kernel module, potentially to achieve persistence
rootkit

Processes:

1c849a237a86069cd3bcfdba35de5f42c924956c0a68d1218929c5e842a87eec.elf

pid process

2514 1c849a237a86069cd3bcfdba35de5f42c924956c0a68d1218929c5e842a87eec.elf

pid	process
2514	1c849a237a86069cd3bcfdba35de5f42c924956c0a68d1218929c5e842a87eec.elf

/tmp/1c849a237a86069cd3bcfdba35de5f42c924956c0a68d1218929c5e842a87eec.elf
/tmp/1c849a237a86069cd3bcfdba35de5f42c924956c0a68d1218929c5e842a87eec.elf
1⤵
- Loads a kernel module
PID:2514