29c446885e16098545c6e32b02bc041df636139f781e749c24e50d7d0686a671

Analysis

max time kernel
0s
max time network
131s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
09/12/2024, 02:08

Target

29c446885e16098545c6e32b02bc041df636139f781e749c24e50d7d0686a671.elf
Size

51KB
MD5

d9ff3d8ec4098dc5d29fe1f5e7a85a8d
SHA1

8b6e2dfdc69fb3ce7f68dd5da1f344d75cc9819b
SHA256

29c446885e16098545c6e32b02bc041df636139f781e749c24e50d7d0686a671
SHA512

4d857f6d8f7c35187c94e2750f08e1915ac356346d40488e25e907d8241e7e780ba1526c8ce294bff3a16566f748573f793b23d88d0bfea86849a613349d67ad
SSDEEP

1536:GByaxeeHQH9Zmc0X5OlQ2Z09LiEt0gaxt:GBys5HQHBI2hA1

Score

7^/10

rootkit

Loads a kernel module 1 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2826	29c446885e16098545c6e32b02bc041df636139f781e749c24e50d7d0686a671.elf

/tmp/29c446885e16098545c6e32b02bc041df636139f781e749c24e50d7d0686a671.elf
/tmp/29c446885e16098545c6e32b02bc041df636139f781e749c24e50d7d0686a671.elf
1⤵
- Loads a kernel module
PID:2826