Analysis
-
max time kernel
139s -
max time network
138s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
-
submitted
05/12/2024, 03:28
General
-
Target
db377226cfb8e4afd5610fe6b8b42d347824f1d81b5f75f9318a14dd6ca4641b.elf
-
Size
120KB
-
MD5
37175a58f80f758776ea056e64ce4bbe
-
SHA1
0ded3a98a6b262f48b97d8017c38e34b61512282
-
SHA256
db377226cfb8e4afd5610fe6b8b42d347824f1d81b5f75f9318a14dd6ca4641b
-
SHA512
65af3245ba600031d31f7f2ba277f534b6653afae637478ce0cc0c697788fd8400391a009729cc9cd7fcf6015776496e62512f1cc419c228e4f2e88a3e6600cd
-
SSDEEP
3072:r2F5V5zk/+yaJQ/0rK6tMNkgt8BiEMbwyUPbmmmmmmmmmmmmmmh4mmmmmmemmomX:r2F5V5zk/+9JQMr5yBUPbmmmmmmmmmmp
Score
7/10
Malware Config
Signatures
-
Loads a kernel module 5 IoCs
Loads a Linux kernel module, potentially to achieve persistence
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/db377226cfb8e4afd5610fe6b8b42d347824f1d81b5f75f9318a14dd6ca4641b.elf/tmp/db377226cfb8e4afd5610fe6b8b42d347824f1d81b5f75f9318a14dd6ca4641b.elf1⤵
- Loads a kernel module
- Writes file to tmp directory