6f5c64bd9f154bd4e89de682a82b1062233174f727d1bd3cad6f079478169ad2

Analysis

max time kernel
0s
max time network
1s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
14-12-2024 11:47

Target

6f5c64bd9f154bd4e89de682a82b1062233174f727d1bd3cad6f079478169ad2.elf
Size

80KB
MD5

9b0b477615d2bca202be0f339ed6708f
SHA1

a4e4689d6d5fbe9f4de231ce403cc2faa08e9378
SHA256

6f5c64bd9f154bd4e89de682a82b1062233174f727d1bd3cad6f079478169ad2
SHA512

87838f0f131b43b43dda0c03f30d34d8424f889b1feea6d71f53ff27b9031606944bce1b995b57223b229ee48bc7d337fba2d192062daad12be3ebc090b99ea2
SSDEEP

1536:+YpPzMFPap38QmCwdGKo6UOMir7qDX3+L/Hx8vJTZSYoBCV:Zp7MFPauQ80Ko6UOMs7kX3o/x8FMC

Score

7^/10

rootkit

Loads a kernel module 2 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2484	6f5c64bd9f154bd4e89de682a82b1062233174f727d1bd3cad6f079478169ad2.elf
2488	6f5c64bd9f154bd4e89de682a82b1062233174f727d1bd3cad6f079478169ad2.elf

/tmp/6f5c64bd9f154bd4e89de682a82b1062233174f727d1bd3cad6f079478169ad2.elf
/tmp/6f5c64bd9f154bd4e89de682a82b1062233174f727d1bd3cad6f079478169ad2.elf
1⤵
- Loads a kernel module
PID:2484