e8ca93ec9f737481e131b64981ebf0212958dd1b43ef36a944869ae0f603e6f1

Analysis

max time kernel
0s
max time network
132s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
08/12/2024, 02:50

Target

e8ca93ec9f737481e131b64981ebf0212958dd1b43ef36a944869ae0f603e6f1.elf
Size

60KB
MD5

c790dde9d4762b3e82c0d9e41df91fb9
SHA1

341070d0148f795a2b6dd1d988e497f4084bebe7
SHA256

e8ca93ec9f737481e131b64981ebf0212958dd1b43ef36a944869ae0f603e6f1
SHA512

ffa49eae4d60f3ff6f1b0fe053c5f8293e6eca3737d2805e464336376ca6f705da949936530c595bc33b4c49b7a80d8672f03414f027421394436b26c471697f
SSDEEP

768:JjiwQ4KFW+Ny+8GbGN1hLZzWMLxJtWOboPLZhgtp7Cya3slMqWvja:Ey+NH8x7hVEObchgTNJWra

Score

7^/10

rootkit

Loads a kernel module 2 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2840	e8ca93ec9f737481e131b64981ebf0212958dd1b43ef36a944869ae0f603e6f1.elf
2840	e8ca93ec9f737481e131b64981ebf0212958dd1b43ef36a944869ae0f603e6f1.elf

/tmp/e8ca93ec9f737481e131b64981ebf0212958dd1b43ef36a944869ae0f603e6f1.elf
/tmp/e8ca93ec9f737481e131b64981ebf0212958dd1b43ef36a944869ae0f603e6f1.elf
1⤵
- Loads a kernel module
PID:2840