8f2353063d7b296a0575c5713cec124a62a91da8247d5686a490c48543c1808d

Analysis

max time kernel
140s
max time network
151s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
12-12-2024 18:14

Target

e7a7ee1ee83c33973aca0412ed01b0f8_JaffaCakes118
Size

83KB
MD5

e7a7ee1ee83c33973aca0412ed01b0f8
SHA1

5f31cf04b86d6faff8fc93bcc5d06e8ce0663fd6
SHA256

8f2353063d7b296a0575c5713cec124a62a91da8247d5686a490c48543c1808d
SHA512

42891837d2de98231acd045ed1c617b07b18750b8146fd5bd570da5e59ec3c2b9d1c0fdfa8c88b89f41163882209b5137cbf98c14bc6a399af3eeaa085887d98
SSDEEP

1536:wBdmZwZVa4FJ3emC8AnzGpWHMvFyTsL8mF+wVOz+sXcfW7k:9ZwZVa4P3emjACcsMvmEwVOz+ucfW7k

Score

7^/10

rootkit

Loads a kernel module 8 IoCs

Loads a Linux kernel module, potentially to achieve persistence

/tmp/e7a7ee1ee83c33973aca0412ed01b0f8_JaffaCakes118
/tmp/e7a7ee1ee83c33973aca0412ed01b0f8_JaffaCakes118
1⤵
- Loads a kernel module
PID:2494