6cae9625ea917a34f39d33cc7372ee7d261a29beb7a6a242b2bae7bf3f6c8401

Analysis

max time kernel
0s
max time network
128s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
12-12-2024 02:27

Target

6cae9625ea917a34f39d33cc7372ee7d261a29beb7a6a242b2bae7bf3f6c8401.elf
Size

60KB
MD5

0c9d13b8a66a0d51a37ad36c0a4f85e2
SHA1

869b064cdcb70310b9af9fa25bc92c4a0430af13
SHA256

6cae9625ea917a34f39d33cc7372ee7d261a29beb7a6a242b2bae7bf3f6c8401
SHA512

128da26297725cb918e49fab03b42fdab6c1b8e6c31610eafb86ed056e074b98af33ce0a11a881ae52ba32ffd3e7436c955467716c0e71ce46cc1921a582176b
SSDEEP

768:JjiwQ4KFW+Ny+8GbGN1hLZYRMLxJtWOboPLZhgtp7Cya3slMqWvjW:Ey+NH8x7huxObchgTNJWrW

Score

7^/10

rootkit

Loads a kernel module 2 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2479	6cae9625ea917a34f39d33cc7372ee7d261a29beb7a6a242b2bae7bf3f6c8401.elf
2479	6cae9625ea917a34f39d33cc7372ee7d261a29beb7a6a242b2bae7bf3f6c8401.elf

/tmp/6cae9625ea917a34f39d33cc7372ee7d261a29beb7a6a242b2bae7bf3f6c8401.elf
/tmp/6cae9625ea917a34f39d33cc7372ee7d261a29beb7a6a242b2bae7bf3f6c8401.elf
1⤵
- Loads a kernel module
PID:2479