Analysis
-
max time kernel
130s -
max time network
129s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
-
submitted
07-01-2025 02:08
General
-
Target
247e55175254ac760a09609f86bed47788907d50b5eac3d5905d6ae3b200f46d.elf
-
Size
100KB
-
MD5
235e7ef841686248d24647ff2b60afbd
-
SHA1
bc2e031db47876843d8bd9907e10b6741edb0351
-
SHA256
247e55175254ac760a09609f86bed47788907d50b5eac3d5905d6ae3b200f46d
-
SHA512
7ffd32da39ab9f74f3cb383ff757b72028d0ea8fdccc13b7c12968ebc2499b3293a2f565238220ac2fd82a8fa94e0236e0bc1eec48f82a53687dbca31e898111
-
SSDEEP
1536:AXIh4AIx9uB5OqmKuYBtMVdMLdWFcWJIQ+VHjwLNmKisjiIVWXgw:A4h4zxEO5KuYBt4MqGQ+VHELvVa
Score
7/10
Malware Config
Signatures
-
Loads a kernel module 3 IoCs
Loads a Linux kernel module, potentially to achieve persistence
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/247e55175254ac760a09609f86bed47788907d50b5eac3d5905d6ae3b200f46d.elf/tmp/247e55175254ac760a09609f86bed47788907d50b5eac3d5905d6ae3b200f46d.elf1⤵
- Loads a kernel module
- Writes file to tmp directory