edd1c8dab9d8821408e1983365de1b5e804771f22a1bb9644ef5a6ed642754cb

Analysis

max time kernel
130s
max time network
150s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
22-11-2024 03:15

Target

edd1c8dab9d8821408e1983365de1b5e804771f22a1bb9644ef5a6ed642754cb.elf
Size

30KB
MD5

9d685c4a6365fa7c344628e84f6e5ed3
SHA1

41437018ce9d82302d6d78a9cd32f9bf706092a2
SHA256

edd1c8dab9d8821408e1983365de1b5e804771f22a1bb9644ef5a6ed642754cb
SHA512

0658daee289704b83bb1a694aad56c27023b613867811b0d763942d2d12c44da69fc90334ff66d68d3d03117746859094d12a130ff35ed8269feb8e2e44da7be
SSDEEP

768:5OniO7PWJLkZXS1ivXJZnWFZoKtAaSGG:5OnimPW9kJTRZW4KSNGG

Score

7^/10

rootkit

Loads a kernel module 1 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
4068	edd1c8dab9d8821408e1983365de1b5e804771f22a1bb9644ef5a6ed642754cb.elf

/tmp/edd1c8dab9d8821408e1983365de1b5e804771f22a1bb9644ef5a6ed642754cb.elf
/tmp/edd1c8dab9d8821408e1983365de1b5e804771f22a1bb9644ef5a6ed642754cb.elf
1⤵
- Loads a kernel module
PID:4068