Overview

overview

10

Static

static

10

SwiftSec.x86.elf

ubuntu-24.04-amd64

7

Analysis

  • max time kernel
    0s
  • max time network
    131s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    08/12/2024, 17:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SwiftSec.x86.elf

  • Size

    69KB

  • MD5

    bd500c6444b54dcf28b5cbcbe1ebfd6e

  • SHA1

    df37c11317c13c7e9329fd6e59c79cb2c8a82486

  • SHA256

    5d09c01afd1dbc6a3f4df23b84a643527a656377b582fc7467c74577c7077b07

  • SHA512

    cc920df5e72dd956492b3187b761f8846ebb035c9cb3d936a8938dc9a8dc7972ce06bbb3c0b5138df5e61226853127c84524ed44ae04db9d6af3b39306d02b7f

  • SSDEEP

    1536:SZgjP9uUBZDOPxFE1jQly4gi6o0kU+nszkSiufjh+ft0aSAWS4M:SIP9rBZD2xFfly4f6o0rkmkSRfjkKdA5

Score
7/10
rootkit

Malware Config

Signatures

  • Loads a kernel module 1 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

    rootkit

Processes

  • /tmp/SwiftSec.x86.elf
    /tmp/SwiftSec.x86.elf
    1⤵
    • Loads a kernel module
    PID:2819

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads