99c933a3a330cc6208aecdcf28cc6f1c5ed66bf9bc5c5e548b04070345b7171f

Analysis

max time kernel
1s
max time network
131s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
31-12-2024 02:43

Target

99c933a3a330cc6208aecdcf28cc6f1c5ed66bf9bc5c5e548b04070345b7171f.elf
Size

69KB
MD5

63652cd0e25a99e3cbe7fd4c45b12fc0
SHA1

771ee871f423f4fe207484b3f1cae62e9adf521e
SHA256

99c933a3a330cc6208aecdcf28cc6f1c5ed66bf9bc5c5e548b04070345b7171f
SHA512

e7389efd9d8f2547c86573540069aa1cea29ad824a9ce4b7fa995c472cce3184aa5420b5aa0b8b44334f96c12f495b59e58eca80877b4cb025afb164f3de3301
SSDEEP

1536:bSKRI7C2wEI5Z5u68+I/UCCPB4+zXNmoV9okwKBTx3Poui7N1OF9QmZj:bSKRI7C2wEI5fxCCp4+zXNmoVikwKBTH

Score

7^/10

rootkit

Loads a kernel module 2 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2821	99c933a3a330cc6208aecdcf28cc6f1c5ed66bf9bc5c5e548b04070345b7171f.elf
2821	99c933a3a330cc6208aecdcf28cc6f1c5ed66bf9bc5c5e548b04070345b7171f.elf

/tmp/99c933a3a330cc6208aecdcf28cc6f1c5ed66bf9bc5c5e548b04070345b7171f.elf
/tmp/99c933a3a330cc6208aecdcf28cc6f1c5ed66bf9bc5c5e548b04070345b7171f.elf
1⤵
- Loads a kernel module
PID:2821