874619d177f349b3987c881b016feaa08fec5a16df7cb2ab473d88ea493a4c56

Analysis

max time kernel
120s
max time network
128s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
26/02/2025, 03:53

Target

874619d177f349b3987c881b016feaa08fec5a16df7cb2ab473d88ea493a4c56.elf
Size

116KB
MD5

7f3328ac731e1f5914ddf381df585f6d
SHA1

e60b12d8c77e90bcd3ce00e3d392c7d82ea0fe4b
SHA256

874619d177f349b3987c881b016feaa08fec5a16df7cb2ab473d88ea493a4c56
SHA512

6d1f5c755460da3740ee81362d617e7a52f1908253e6959e1a3d127cd831e88895b01bf47bfb57c7357c8bb5d0f743e700ca7db27e601b7b08adf5f09edd4418
SSDEEP

3072:XDPx3z4BolIIOdDm2etJ8au49QuTs42og5+rPgxAtc4kG7gyqc:Xt1ITdDdetJ8au4lXpgxAtc4n7gyqc

Score

7^/10

rootkit

Loads a kernel module 10 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2494	874619d177f349b3987c881b016feaa08fec5a16df7cb2ab473d88ea493a4c56.elf
2494	874619d177f349b3987c881b016feaa08fec5a16df7cb2ab473d88ea493a4c56.elf
2494	874619d177f349b3987c881b016feaa08fec5a16df7cb2ab473d88ea493a4c56.elf
2494	874619d177f349b3987c881b016feaa08fec5a16df7cb2ab473d88ea493a4c56.elf
2494	874619d177f349b3987c881b016feaa08fec5a16df7cb2ab473d88ea493a4c56.elf
2494	874619d177f349b3987c881b016feaa08fec5a16df7cb2ab473d88ea493a4c56.elf
2494	874619d177f349b3987c881b016feaa08fec5a16df7cb2ab473d88ea493a4c56.elf
2494	874619d177f349b3987c881b016feaa08fec5a16df7cb2ab473d88ea493a4c56.elf
2494	874619d177f349b3987c881b016feaa08fec5a16df7cb2ab473d88ea493a4c56.elf
2494	874619d177f349b3987c881b016feaa08fec5a16df7cb2ab473d88ea493a4c56.elf

/tmp/874619d177f349b3987c881b016feaa08fec5a16df7cb2ab473d88ea493a4c56.elf
/tmp/874619d177f349b3987c881b016feaa08fec5a16df7cb2ab473d88ea493a4c56.elf
1⤵
- Loads a kernel module
PID:2491