f6f6e34e93c4ec191807819bd0a3e18fe91bd390ec6c67fadc970d01c25f517b

Resubmissions

06-12-2024 09:17

27-11-2024 13:44

max time kernel
0s
max time network
4s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
06-12-2024 09:17

Target

a81e88086302f6fe5c8338fe7e264822_JaffaCakes118
Size

4.5MB
MD5

a81e88086302f6fe5c8338fe7e264822
SHA1

d259d1e9af05a2b60ad47376c7bbb77772140486
SHA256

f6f6e34e93c4ec191807819bd0a3e18fe91bd390ec6c67fadc970d01c25f517b
SHA512

a8db98904f88858b2044715ebeb716751c565e6e2f0a5f00776a692f3aa75c117c3e12281b5f55f21de87a6a7afebc2a0d25ac2ae47f5cfb00869d7b11a5516f
SSDEEP

49152:m7aCJZz5RkMzbq4qxjqryOtDwUT2SVD3uv2FgyhrLRkAHw1Gjg+A:mbJZPRbqkyOtDpT/Ck0+A

Score

7^/10

rootkit

Loads a kernel module 8 IoCs

Loads a Linux kernel module, potentially to achieve persistence

/tmp/a81e88086302f6fe5c8338fe7e264822_JaffaCakes118
/tmp/a81e88086302f6fe5c8338fe7e264822_JaffaCakes118
1⤵
- Loads a kernel module
PID:2821