Analysis
-
max time kernel
147s -
max time network
148s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
26-12-2024 21:23
Behavioral task
behavioral1
Sample
1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
1 signatures
150 seconds
General
-
Target
1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp
-
Size
68KB
-
MD5
9c57bd866c2d81097ff6ade7cd4e87d6
-
SHA1
e90c2599ee013a526e2c6b351958ed772c00caf5
-
SHA256
b3f795b733c885590462d489d714da7d753330c84bc44aab101323e12a41b912
-
SHA512
da68b31cc19699c55e428073f003575a3b4fca2356b8dbd77f843c54d4efacb4e5c135ac8a96eeb4177134a2970f6a7618011d868d3cdb83bac6852b506da6b6
-
SSDEEP
1536:/tWvgqA8qj4PfWjF7lOvZOWsIyq3XkZSQYO:/tDqArj4HWBJOvwfIyq8YO
Score
7/10
Malware Config
Signatures
-
Loads a kernel module 64 IoCs
Loads a Linux kernel module, potentially to achieve persistence
pid Process 2449 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2449 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2449 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2452 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp 2476 1563-1-0x0000000008048000-0x000000000805bc40-memory.dmp