d9748509c0799d61ab3dffdc9513657865d41ee8340654c5983f5a71a994d936

Analysis

max time kernel
140s
max time network
148s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
21/02/2025, 04:16

Target

d9748509c0799d61ab3dffdc9513657865d41ee8340654c5983f5a71a994d936.elf
Size

79KB
MD5

cb59acf08eae97467b1ecb66c06c34d6
SHA1

9a6c6a1429a6071addbd00e23c39bc43f2d115f7
SHA256

d9748509c0799d61ab3dffdc9513657865d41ee8340654c5983f5a71a994d936
SHA512

7a9c4c198e50a4315fba54525d8535c0397655f912b98e75a62e013b849aaafa472ec10ad1854d7312cb1243aaa8a5ce901439fe5b353df7930e17516a7b5a35
SSDEEP

1536:Yof4eXCUCUoRLKHnmrTH5bE9ohl/9vrklFmrJHiPJ4mLItVOCjXZRshS:YoFCUCUoR2Hnm3ZbcohZ9jttiPemUtV7

Score

7^/10

rootkit

Loads a kernel module 8 IoCs

Loads a Linux kernel module, potentially to achieve persistence

/tmp/d9748509c0799d61ab3dffdc9513657865d41ee8340654c5983f5a71a994d936.elf
/tmp/d9748509c0799d61ab3dffdc9513657865d41ee8340654c5983f5a71a994d936.elf
1⤵
- Loads a kernel module
PID:2765