6e932ccdb833574dfe5aa1a482d99933baa9fd169f7ab7443b5e1abd2d31be89

Analysis

max time kernel
140s
max time network
151s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
26/02/2025, 03:35

Target

6e932ccdb833574dfe5aa1a482d99933baa9fd169f7ab7443b5e1abd2d31be89.elf
Size

83KB
MD5

4bb2551c924dfe970ebc36cda5f88650
SHA1

da1c8effd45d06dff85c8cbfd9d34b8a5b4cc685
SHA256

6e932ccdb833574dfe5aa1a482d99933baa9fd169f7ab7443b5e1abd2d31be89
SHA512

d6311460b3f48387eb7a1307039c1136be7fbd86af68cf51140b91eab7808d7603e04386b77a30a9c59839575c8169286cf0e2c31ce3a557d4d96345bb012057
SSDEEP

1536:qr5b1ZU4d3J6lreu5r4hWj8LvGDloRmF+wVOz+sXcfW7k:wb1ZU4ZJ6liuq0Y7GoRmEwVOz+ucfW7k

Score

7^/10

rootkit

Loads a kernel module 8 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2821	6e932ccdb833574dfe5aa1a482d99933baa9fd169f7ab7443b5e1abd2d31be89.elf
2821	6e932ccdb833574dfe5aa1a482d99933baa9fd169f7ab7443b5e1abd2d31be89.elf
2821	6e932ccdb833574dfe5aa1a482d99933baa9fd169f7ab7443b5e1abd2d31be89.elf
2821	6e932ccdb833574dfe5aa1a482d99933baa9fd169f7ab7443b5e1abd2d31be89.elf
2821	6e932ccdb833574dfe5aa1a482d99933baa9fd169f7ab7443b5e1abd2d31be89.elf
2821	6e932ccdb833574dfe5aa1a482d99933baa9fd169f7ab7443b5e1abd2d31be89.elf
2821	6e932ccdb833574dfe5aa1a482d99933baa9fd169f7ab7443b5e1abd2d31be89.elf
2821	6e932ccdb833574dfe5aa1a482d99933baa9fd169f7ab7443b5e1abd2d31be89.elf

/tmp/6e932ccdb833574dfe5aa1a482d99933baa9fd169f7ab7443b5e1abd2d31be89.elf
/tmp/6e932ccdb833574dfe5aa1a482d99933baa9fd169f7ab7443b5e1abd2d31be89.elf
1⤵
- Loads a kernel module
PID:2818