Overview

overview

10

Static

static

10

fqkjei686.elf

ubuntu-24.04-amd64

7

Analysis

  • max time kernel
    135s
  • max time network
    147s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240729-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    02-01-2025 06:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fqkjei686.elf

  • Size

    118KB

  • MD5

    b1cac6c2a1927bb33619b37f861bb91f

  • SHA1

    65984d2cf510b56444cf27e45f1e373603158fce

  • SHA256

    48aeb716656f78e79aac447a57d21e668159c30adc3fefd790744e253459e8b9

  • SHA512

    c578ff0c523495b3c17edadb51c8f1934da5be9e65c3af54fcfcb3ca03ac3ec123772fdf39c6bb34cb9c2336514950b92ed75775f77244bba70c504e49a2c8df

  • SSDEEP

    3072:yYesPRfgm74E/hSo+ELPQIFnDI42oDATI:yYesPRfgm746hSo0o8TI

Score
7/10
rootkit

Malware Config

Signatures

  • Loads a kernel module 5 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

    rootkit
  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/fqkjei686.elf
    /tmp/fqkjei686.elf
    1⤵
    • Loads a kernel module
    • Writes file to tmp directory
    PID:2508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads