Analysis
-
max time kernel
120s -
max time network
131s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
03/03/2025, 03:00
Behavioral task
behavioral1
Sample
f419e1c3058d8eb73c33ed7506430774255e85e4c3766bc10cd7e4c308d93d1a.elf
Resource
ubuntu2404-amd64-20240523-en
1 signatures
150 seconds
General
-
Target
f419e1c3058d8eb73c33ed7506430774255e85e4c3766bc10cd7e4c308d93d1a.elf
-
Size
122KB
-
MD5
609b85c098d864c629b7e78debc5108d
-
SHA1
10c2cb98c6ae0bdb5d52d8d740e765b3e74e5a86
-
SHA256
f419e1c3058d8eb73c33ed7506430774255e85e4c3766bc10cd7e4c308d93d1a
-
SHA512
da4bd24cbd39aafc3682ca7730f3a1f60f4b23d619161805537100aeeb84d7ec4391e4428846591f7c22b2210c7fcaf11ce0d05b1021081670608966701c1ba9
-
SSDEEP
3072:N2ZLKMOPOXMjV99bdrdJ1etJ8add9QzTsctQ7zmlw74V+rXCGcgplK:NGh343jRJ1etJ8addQTtQvmu74V+rXBq
Score
7/10
Malware Config
Signatures
-
Loads a kernel module 10 IoCs
Loads a Linux kernel module, potentially to achieve persistence
pid Process 2821 f419e1c3058d8eb73c33ed7506430774255e85e4c3766bc10cd7e4c308d93d1a.elf 2821 f419e1c3058d8eb73c33ed7506430774255e85e4c3766bc10cd7e4c308d93d1a.elf 2821 f419e1c3058d8eb73c33ed7506430774255e85e4c3766bc10cd7e4c308d93d1a.elf 2821 f419e1c3058d8eb73c33ed7506430774255e85e4c3766bc10cd7e4c308d93d1a.elf 2821 f419e1c3058d8eb73c33ed7506430774255e85e4c3766bc10cd7e4c308d93d1a.elf 2821 f419e1c3058d8eb73c33ed7506430774255e85e4c3766bc10cd7e4c308d93d1a.elf 2821 f419e1c3058d8eb73c33ed7506430774255e85e4c3766bc10cd7e4c308d93d1a.elf 2821 f419e1c3058d8eb73c33ed7506430774255e85e4c3766bc10cd7e4c308d93d1a.elf 2821 f419e1c3058d8eb73c33ed7506430774255e85e4c3766bc10cd7e4c308d93d1a.elf 2821 f419e1c3058d8eb73c33ed7506430774255e85e4c3766bc10cd7e4c308d93d1a.elf