Analysis

  • max time kernel
    130s
  • max time network
    142s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    30-12-2024 02:29

General

  • Target

    8a57e91abababa5fbcd0414e068885572aad724585355fce4246ab8bb4a4b5f0.elf

  • Size

    65KB

  • MD5

    5f0ad2307fb3c605bc6228ea56ed6b59

  • SHA1

    6fa8394a35e6cc6dc5c43622d4df5a185b66e2ac

  • SHA256

    8a57e91abababa5fbcd0414e068885572aad724585355fce4246ab8bb4a4b5f0

  • SHA512

    ff17b06c6d359bf01d6a93cec4a48205e6f953b82e0f6e073d663acba851e6c6f4ac1a92bc59aed379d81f78bd622a2b188e7347a8d1a93afbc1fd2a976d104f

  • SSDEEP

    1536:R+XkIsiWIGc8k1KDVmU7tp/HOaLWZsh1RaCrZqfCxCEE3H:R+XvsidGyKDVmU7tpvOVih1RaCl+N

Score
7/10

Malware Config

Signatures

  • Loads a kernel module 1 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/8a57e91abababa5fbcd0414e068885572aad724585355fce4246ab8bb4a4b5f0.elf
    /tmp/8a57e91abababa5fbcd0414e068885572aad724585355fce4246ab8bb4a4b5f0.elf
    1⤵
    • Loads a kernel module
    • Writes file to tmp directory
    PID:2472

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads