e16dd4276638d8cc47d260a62abc0e71441331b78885dd98a4e090919d01d598

Analysis

max time kernel
148s
max time network
153s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
27-12-2024 02:47

Target

1569-1-0x0000000008048000-0x000000000805bc08-memory.dmp
Size

76KB
MD5

80ad1d7a688d3abec9bcb0b531b97049
SHA1

61d7131593ee54dbd2712a9d679a453ec3bb8f19
SHA256

e16dd4276638d8cc47d260a62abc0e71441331b78885dd98a4e090919d01d598
SHA512

ef1100200e38edc828d891f97a2ba951c03be2f25d6e0d35884613e9db3a0984d2614ae9c1c71b7f5f9176c58cf3efeb16af73a2279bd0759e95e78f2eb103f7
SSDEEP

1536:FpmO4tlM904j3Kd60nGoQm+6JUt31gRr3VXgPgarm:PJ4g90O3KR16K96ICm

Score

7^/10

rootkit

Loads a kernel module 17 IoCs

Loads a Linux kernel module, potentially to achieve persistence

/tmp/1569-1-0x0000000008048000-0x000000000805bc08-memory.dmp
/tmp/1569-1-0x0000000008048000-0x000000000805bc08-memory.dmp
1⤵
- Loads a kernel module
PID:2860