19385e38460e0a288e81bdcbb75e7ad23f747d5163ba276ec996bc53db3a11d2

Analysis

max time kernel
0s
max time network
131s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
07/12/2024, 02:13

Target

19385e38460e0a288e81bdcbb75e7ad23f747d5163ba276ec996bc53db3a11d2.elf
Size

60KB
MD5

ec9bf54e29277d9028ea800cf3cf7501
SHA1

371485bf2f9f86e25e618fcb98071b3f6c8524a8
SHA256

19385e38460e0a288e81bdcbb75e7ad23f747d5163ba276ec996bc53db3a11d2
SHA512

87e2fd37cead67b3e43a9b18c0c43b702ba6ecee6d1de3be60d7bf778218c872b417a693205172a2c4ad368c9ffdfe5f7dcd6ff6a0868ad946dbe5cc9e727da9
SSDEEP

768:JjiwQ4KFW+Ny+8GbGN1hLZXch1cr2tWyXkPLIhgtp7Cya3slMiWvj0:Ey+NH8x7hJ4ayXJhgTlxWr0

Score

7^/10

rootkit

Loads a kernel module 2 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2818	19385e38460e0a288e81bdcbb75e7ad23f747d5163ba276ec996bc53db3a11d2.elf
2818	19385e38460e0a288e81bdcbb75e7ad23f747d5163ba276ec996bc53db3a11d2.elf

/tmp/19385e38460e0a288e81bdcbb75e7ad23f747d5163ba276ec996bc53db3a11d2.elf
/tmp/19385e38460e0a288e81bdcbb75e7ad23f747d5163ba276ec996bc53db3a11d2.elf
1⤵
- Loads a kernel module
PID:2818