Overview

overview

7

Static

static

1

123.i686

ubuntu-24.04-amd64

7

Resubmissions

21-01-2025 18:29

250121-w48wlaxjhn 7

20-01-2025 15:39

250120-s3qf3swpfp 7

20-01-2025 15:18

250120-spxcgawjhl 7

Analysis

  • max time kernel
    149s
  • max time network
    147s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    20-01-2025 15:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    123.i686

  • Size

    64KB

  • MD5

    515d44449575fb5f6e1cc10698c09189

  • SHA1

    a27023ffcc67f3ffe6a80f3d8a4b1cca886d363d

  • SHA256

    a262c2a7c581c95058ddfd0bcd30c20e856e036d5170f3c625d76e221db6d882

  • SHA512

    491166e8bc8858c6b83283179e31e12501d19b2c0c80d49a11e5f6b3a6ad5de3b6b66178c91aacbb109e51bfe3719c98e5b0d8f8f8f6db4112c00de04e9b0cd6

  • SSDEEP

    768:JD3UKOqcPkfKmL0XSodeE/fg7BWo0vjwZ2nvP3NtA+Th8HRolbzF12LDm3oRyXsg:FkbkiC4J3n8BWDN3ZSS1uyXskmXsU

Score
7/10
rootkit

Malware Config

Signatures

  • Loads a kernel module 32 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

    rootkit
  • Unexpected DNS network traffic destination 1 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

  • /tmp/123.i686
    /tmp/123.i686 ssh
    1⤵
    • Loads a kernel module
    PID:2449

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads