a0ea4d426ed6e804a64518998b09c24dbaab6b61ba6fb3e4dcdf080c258ea8fc

Analysis

max time kernel
0s
max time network
132s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
31-12-2024 02:45

Target

a0ea4d426ed6e804a64518998b09c24dbaab6b61ba6fb3e4dcdf080c258ea8fc.elf
Size

60KB
MD5

3c2a41675e076c76114cc43d3b6a3281
SHA1

2375b82a8cfcdc11c929d8d2f6a6a2f81fd8819a
SHA256

a0ea4d426ed6e804a64518998b09c24dbaab6b61ba6fb3e4dcdf080c258ea8fc
SHA512

07ea2aa38065eac7ccb6082b6924d5e147133a767de395470e7b8df567320fad2688d57bf59be40c19ea5abc551b1b6979d71bc892c0258bd13a715a6b49d9a4
SSDEEP

1536:VMzVhePhrkmetvEuckIzN/hkfgiu5BzZsYmrpY8+3UoBiAGpTLE:VMzVhePlkmetvBcxJhyu5BdyrpE1oAGf

Score

7^/10

rootkit

Loads a kernel module 1 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2840	a0ea4d426ed6e804a64518998b09c24dbaab6b61ba6fb3e4dcdf080c258ea8fc.elf

/tmp/a0ea4d426ed6e804a64518998b09c24dbaab6b61ba6fb3e4dcdf080c258ea8fc.elf
/tmp/a0ea4d426ed6e804a64518998b09c24dbaab6b61ba6fb3e4dcdf080c258ea8fc.elf
1⤵
- Loads a kernel module
PID:2840