Analysis

  • max time kernel
    130s
  • max time network
    144s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    29-12-2024 02:18

General

  • Target

    4cd90a778beaa5bb1c5bc137a35c3f5300552eae9f093a26a637ff710541c084.elf

  • Size

    65KB

  • MD5

    ad5378954ed90c2718e9146d27c9e5a0

  • SHA1

    844d5ff08a90ee3c2562c5d59d2196f48c5ce1c5

  • SHA256

    4cd90a778beaa5bb1c5bc137a35c3f5300552eae9f093a26a637ff710541c084

  • SHA512

    8568c653f343c3ca58c8eca6b239e6ff4e19f7f8f09157367fface175d9aa59ae4299986fa5615822f34561a12cdafc4351d759700978c4d2232529cb21f4c49

  • SSDEEP

    1536:R+XkIsiWIGc8k1KDVmU7tp/HOaLWZsh1RaCrZqfCxCEE7H:R+XvsidGyKDVmU7tpvOVih1RaCl+9

Score
7/10

Malware Config

Signatures

  • Loads a kernel module 1 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/4cd90a778beaa5bb1c5bc137a35c3f5300552eae9f093a26a637ff710541c084.elf
    /tmp/4cd90a778beaa5bb1c5bc137a35c3f5300552eae9f093a26a637ff710541c084.elf
    1⤵
    • Loads a kernel module
    • Writes file to tmp directory
    PID:2821

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads