f6c4459e86916915efdbdfeeb794e98073ed34e05a07ed00e8bd1637a127adfa

Analysis

max time kernel
0s
max time network
131s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
10/12/2024, 03:49

Target

f6c4459e86916915efdbdfeeb794e98073ed34e05a07ed00e8bd1637a127adfa.elf
Size

60KB
MD5

f548654588ef9ebcc5fed9264e791fab
SHA1

c6df944390aef3538c92fccf9ec9dc4de99503ce
SHA256

f6c4459e86916915efdbdfeeb794e98073ed34e05a07ed00e8bd1637a127adfa
SHA512

e70e12fda5b0cf7718400540117aeb8a573c5c9c2ee18184e0f875e843e4a0bbcbae1e83839b58e509d27d79ebd1183fe79f91e69c49598f3f61c27200dda636
SSDEEP

768:JjiwQ4KFW+Ny+8GbGN1hLZzRMLxJtWOboPLZhgtp7Cya3slMqWvjW:Ey+NH8x7hVxObchgTNJWrW

Score

7^/10

rootkit

Loads a kernel module 2 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2840	f6c4459e86916915efdbdfeeb794e98073ed34e05a07ed00e8bd1637a127adfa.elf
2840	f6c4459e86916915efdbdfeeb794e98073ed34e05a07ed00e8bd1637a127adfa.elf

/tmp/f6c4459e86916915efdbdfeeb794e98073ed34e05a07ed00e8bd1637a127adfa.elf
/tmp/f6c4459e86916915efdbdfeeb794e98073ed34e05a07ed00e8bd1637a127adfa.elf
1⤵
- Loads a kernel module
PID:2840