7bd7fa6d579aef079a45568cd87f612371f8a64efa0a0e4590eab7c14fb5ceef

Analysis

max time kernel
140s
max time network
150s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
06-12-2024 01:20

Target

13bff4c286061ab0b64b62eb85708a00d51b9fff0622f20c1bb4c8d04cbf266f.elf
Size

94KB
MD5

59b34a1a6b6c6482335c0b36071a23ed
SHA1

4034f9a1edf0994439d9f57e376ed4a4aace1d92
SHA256

13bff4c286061ab0b64b62eb85708a00d51b9fff0622f20c1bb4c8d04cbf266f
SHA512

0d353ffaa7c831e3cc156a36f7cd8ab65ef62fa5b62a595a15448a1ba39bad4c7497f732b81fc138189febc0445a0297e782cceaae5db455f5ea4327f2cf0971
SSDEEP

1536:mlqmFTbw7U+OU0Cf5UI8E8WwP6kHzgk81VwcG2emDGMUNLe5um7WAgcVjmZIcBI:ml72UVUtBUI8GwPfHkk8rxeLesmqAgcr

Score

7^/10

rootkit

Loads a kernel module 8 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2873	13bff4c286061ab0b64b62eb85708a00d51b9fff0622f20c1bb4c8d04cbf266f.elf
2873	13bff4c286061ab0b64b62eb85708a00d51b9fff0622f20c1bb4c8d04cbf266f.elf
2899	13bff4c286061ab0b64b62eb85708a00d51b9fff0622f20c1bb4c8d04cbf266f.elf
2899	13bff4c286061ab0b64b62eb85708a00d51b9fff0622f20c1bb4c8d04cbf266f.elf
2900	13bff4c286061ab0b64b62eb85708a00d51b9fff0622f20c1bb4c8d04cbf266f.elf
2900	13bff4c286061ab0b64b62eb85708a00d51b9fff0622f20c1bb4c8d04cbf266f.elf
2901	13bff4c286061ab0b64b62eb85708a00d51b9fff0622f20c1bb4c8d04cbf266f.elf
2901	13bff4c286061ab0b64b62eb85708a00d51b9fff0622f20c1bb4c8d04cbf266f.elf

/tmp/13bff4c286061ab0b64b62eb85708a00d51b9fff0622f20c1bb4c8d04cbf266f.elf
/tmp/13bff4c286061ab0b64b62eb85708a00d51b9fff0622f20c1bb4c8d04cbf266f.elf
1⤵
- Loads a kernel module
PID:2870