0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269

Analysis

max time kernel
140s
max time network
151s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
16-11-2024 02:07

Target

0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269.elf
Size

83KB
MD5

eeb3018299df9e1fab3362f0db62d62e
SHA1

d51eb0fba8597c84599086d3d56022370a7c0daf
SHA256

0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269
SHA512

4a50787da036aa8e0506dc08bc25701e4094f2ead5fb40dd56378183eb2c04a15977688811977953164131aca6aba4db7fc074eb65bd9c5e2830b76132e028b7
SSDEEP

1536:W35b9Vc4N3J6lreu5r4hWj8L4WDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0Y82oRmEwVOz+ucfW7k

Score

7^/10

rootkit

Loads a kernel module 8 IoCs

Loads a Linux kernel module, potentially to achieve persistence

Processes:

0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269.elf

pid	Process
2822	0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269.elf
2822	0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269.elf
2822	0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269.elf
2822	0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269.elf
2822	0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269.elf
2822	0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269.elf
2822	0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269.elf
2822	0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269.elf

/tmp/0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269.elf
/tmp/0cb9e2ca0fb7438c886058164936a1fb0c26b290bb5c7581e4fcbc21c568b269.elf
1⤵
- Loads a kernel module
PID:2819