Overview

overview

10

Static

static

10

x-3.2-.Sakura.elf

ubuntu-24.04-amd64

7

Analysis

  • max time kernel
    140s
  • max time network
    149s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    15-11-2024 02:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    x-3.2-.Sakura.elf

  • Size

    83KB

  • MD5

    eeb3018299df9e1fab3362f0db62d62e

  • SHA1

    d51eb0fba8597c84599086d3d56022370a7c0daf

  • SHA256

    0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269

  • SHA512

    4a50787da036aa8e0506dc08bc25701e4094f2ead5fb40dd56378183eb2c04a15977688811977953164131aca6aba4db7fc074eb65bd9c5e2830b76132e028b7

  • SSDEEP

    1536:W35b9Vc4N3J6lreu5r4hWj8L4WDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0Y82oRmEwVOz+ucfW7k

Score
7/10
rootkit

Malware Config

Signatures

  • Loads a kernel module 8 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

    rootkit

Processes

  • /tmp/x-3.2-.Sakura.elf
    /tmp/x-3.2-.Sakura.elf
    1⤵
    • Loads a kernel module
    PID:2435

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads