dac62134c0c6dc64b948b93139043763f50924a41f65352be35557c1066df5f5

Analysis

max time kernel
149s
max time network
150s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
14-01-2025 13:23

Target

meth1.elf
Size

44KB
MD5

b2ce46e698f84bbbd7e140fc17f0da2a
SHA1

79b4efc7244acbb5f3bf72994db77b7033e639ef
SHA256

dac62134c0c6dc64b948b93139043763f50924a41f65352be35557c1066df5f5
SHA512

cc81dafa315c2e5e33f534687a323bda80dac082cb05ba117f7e22e21006a142d5d2c15aff792e58f0c5b36bbfba446bd9b114fa789b13f07efeaf28a3f5bca0
SSDEEP

768:JDpazul5ouhJSaHWut0mf1Ywcm4l1AEcx9FX59fcjy53bOwYmzs:JDpazul5ouhAhuNff4l1AEqTfcjA36v9

Score

9^/10

discovery rootkit

Contacts a large (113615) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Loads a kernel module 1 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2517	meth1.elf

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact