dfc1d15d966f78e084af6259503445bc2836011fd3ce62b16c1a277717b8074d

Analysis

max time kernel
0s
max time network
131s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
31/12/2024, 03:01

Target

dfc1d15d966f78e084af6259503445bc2836011fd3ce62b16c1a277717b8074d.elf
Size

52KB
MD5

f692d1ef6b7b90120c801f0491b71b42
SHA1

6a16e910910bb925488df84171ee2ed7c0f4176f
SHA256

dfc1d15d966f78e084af6259503445bc2836011fd3ce62b16c1a277717b8074d
SHA512

80b4910901539ee5d8ab6ba9858464c90a348ad8085df2ef3a9fb1eca054c367004c9b4727582c7ac37b5d8b38bca470ef6d071763cfe282f476c44c7639500e
SSDEEP

1536:PS+dEczOjRC6qf1dhWphmEB019RMEgnNxg+kC:bOjRC6qf1dhWphmEB01nMEGN+H

Score

7^/10

rootkit

Loads a kernel module 1 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2819	dfc1d15d966f78e084af6259503445bc2836011fd3ce62b16c1a277717b8074d.elf

/tmp/dfc1d15d966f78e084af6259503445bc2836011fd3ce62b16c1a277717b8074d.elf
/tmp/dfc1d15d966f78e084af6259503445bc2836011fd3ce62b16c1a277717b8074d.elf
1⤵
- Loads a kernel module
PID:2819