518804d20cc93ad62a563d439839c91989c5166e8cdfe2f3b643fa6abf570bed

Analysis

max time kernel
0s
max time network
132s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
18-12-2024 02:31

Target

518804d20cc93ad62a563d439839c91989c5166e8cdfe2f3b643fa6abf570bed.elf
Size

53KB
MD5

1c175e1463d52e354f3d7fb3156195e9
SHA1

db1773b660a018eb117a3dc74013176a556bb728
SHA256

518804d20cc93ad62a563d439839c91989c5166e8cdfe2f3b643fa6abf570bed
SHA512

82bee9d931bacd78bbb8115b97177c0fe37ba701ff7a184683c0b29818f77ebc9a8660947f319409b9062f044d27495d8bbbfbd9cb9a111689660d2592e540d6
SSDEEP

1536:O13kynNjv6czSEZeLmI37KNCgoTcpoQzWxS2RAfah5HQ:AUyntv6cuEZ437KAgowpoeiSi1D

Score

7^/10

rootkit

Loads a kernel module 1 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2821	518804d20cc93ad62a563d439839c91989c5166e8cdfe2f3b643fa6abf570bed.elf

/tmp/518804d20cc93ad62a563d439839c91989c5166e8cdfe2f3b643fa6abf570bed.elf
/tmp/518804d20cc93ad62a563d439839c91989c5166e8cdfe2f3b643fa6abf570bed.elf
1⤵
- Loads a kernel module
PID:2821