58ae44588d4bc2d3c7d376900403ea0874958641c452fd24d58d7307104e3b4f

Analysis

max time kernel
1s
max time network
128s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
17-12-2024 02:49

Target

58ae44588d4bc2d3c7d376900403ea0874958641c452fd24d58d7307104e3b4f.elf
Size

69KB
MD5

26b5dcf45af8da6946cd105da9278d17
SHA1

192368781bc07ef7656ab5bd473498277e9221d3
SHA256

58ae44588d4bc2d3c7d376900403ea0874958641c452fd24d58d7307104e3b4f
SHA512

3f82f7e284c55ca5e0b6c65ad96fb99152eafc431ca5e35a84c446e7aa3e192b9f6a6eeab399dae9e67b48d8122626ceedfd51c986acbf6af7ff9dc629b8da72
SSDEEP

1536:bSKRI7C2wEI5Z5u68+I/UCCPB4+7EsKoZxogcahTxDPoui7N1OF9Qmjj:bSKRI7C2wEI5fxCCp4+7EsKoZegcahTl

Score

7^/10

rootkit

Loads a kernel module 2 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2489	58ae44588d4bc2d3c7d376900403ea0874958641c452fd24d58d7307104e3b4f.elf
2489	58ae44588d4bc2d3c7d376900403ea0874958641c452fd24d58d7307104e3b4f.elf

/tmp/58ae44588d4bc2d3c7d376900403ea0874958641c452fd24d58d7307104e3b4f.elf
/tmp/58ae44588d4bc2d3c7d376900403ea0874958641c452fd24d58d7307104e3b4f.elf
1⤵
- Loads a kernel module
PID:2489