Analysis
-
max time kernel
147s -
max time network
147s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
28-11-2024 17:43
Behavioral task
behavioral1
Sample
i586.elf
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
1 signatures
150 seconds
General
-
Target
i586.elf
-
Size
97KB
-
MD5
5886f9a6a8f5858624f53d7ad6321807
-
SHA1
db1735d552646b83858d6e21b2aa56661b5054fc
-
SHA256
b48c8cc859d83ab5534dfd0a06b8e7ff5125246cdc4c36000eaf9bd970be11d8
-
SHA512
28725d177fdbe2520479b336fd2c85aa29e506392099244501b8cc126fbda9183bf7608cc89148d7cf8c23692aa3f93072cf903913a1f8f20d552fd7103d101c
-
SSDEEP
3072:VK1z13U6HzHoXRtmTUhQogTEmmFVcqq0GnDZT:VK7DDeKlogTEmmFVcqq0GnDZT
Score
7/10
Malware Config
Signatures
-
Loads a kernel module 60 IoCs
Loads a Linux kernel module, potentially to achieve persistence
Processes:
i586.elfpid Process 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf 2822 i586.elf