Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    23-11-2024 02:13

General

  • Target

    2a6d01e851c6a4fbc82ba9bc64174420f163265c0cca2ddda1faf4f496e1d2ec.elf

  • Size

    86KB

  • MD5

    aeeb4c5c390e53262ffe5859a6952ff2

  • SHA1

    7f7ad525b9708ab24ed6e70316acd31136f0145a

  • SHA256

    2a6d01e851c6a4fbc82ba9bc64174420f163265c0cca2ddda1faf4f496e1d2ec

  • SHA512

    c684bf07f3373a331ec1ecb1792b7f18b2ecc25c94d2798dfb88bf612e4aec6e3013cfbe0d9b6d69ae3f6bbca795a0e6ecb4aebc3e5c1980c5f31655eecea58c

  • SSDEEP

    1536:DKMY08UtRtEfNo8qTfg27CVE55f8GXqjSRLDA:DPY08MUNo8qTfj+Enfv6u1A

Score
7/10

Malware Config

Signatures

  • Loads a kernel module 3 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/2a6d01e851c6a4fbc82ba9bc64174420f163265c0cca2ddda1faf4f496e1d2ec.elf
    /tmp/2a6d01e851c6a4fbc82ba9bc64174420f163265c0cca2ddda1faf4f496e1d2ec.elf
    1⤵
    • Loads a kernel module
    • Writes file to tmp directory
    PID:2816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads