Analysis
-
max time kernel
145s -
max time network
142s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
28-11-2024 17:42
Behavioral task
behavioral1
Sample
i686.elf
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
1 signatures
150 seconds
General
-
Target
i686.elf
-
Size
101KB
-
MD5
657733c59bde74283f4c807205ad3982
-
SHA1
ff06b5bdc7f11d97939a737aeaa50c1c31da4954
-
SHA256
8adb6fddafc52fae16ef4a8f3b294d3d01836d98069039801d4e1b9220ea5176
-
SHA512
b176001c9be13421e17dfbbfeb937acc8bab404429e3084bf83492a9c066187aa466ac244a3db46a81a192e5792fae02b7cc64366df915ef51080f2e56c1382b
-
SSDEEP
3072:wW8FUmgujld6Mkxm6AJ+4fPHmmFVcqq0GnDZT:wJFv4Lm6AJ+4fPHmmFVcqq0GnDZT
Score
7/10
Malware Config
Signatures
-
Loads a kernel module 60 IoCs
Loads a Linux kernel module, potentially to achieve persistence
pid Process 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf 2483 i686.elf