c36856c4009418529cf7c190b0aa73fb19b61cdacd6cab8d6ccf84d592ce0bcb

Analysis

max time kernel
5s
max time network
131s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
07/03/2025, 01:20

Target

6673c420588bad2bbfa967f1fd4ad37d4de2a6a2870eadfa2d4312b76f2f320f.elf
Size

62KB
MD5

5eaa8cb0b3216983c548636ae6e86855
SHA1

92eff4c74f255f5f79d38b3ca1c53ae62c8e5607
SHA256

6673c420588bad2bbfa967f1fd4ad37d4de2a6a2870eadfa2d4312b76f2f320f
SHA512

271860281ccb96ffa98bc000833a50c0f67aa865a21848695104e2d5564f5d132082784443468cec083411590cce4eb78c0a26a93df18a7e1f78415c029b4ae8
SSDEEP

1536:Rkkiirjwnh3A1HsyjmIdyYWCQtQQxBNSdnLTt:Oyrjwnh3AdsyjDdDW3ZxBGLTt

Score

7^/10

rootkit

Loads a kernel module 3 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2818	6673c420588bad2bbfa967f1fd4ad37d4de2a6a2870eadfa2d4312b76f2f320f.elf
2818	6673c420588bad2bbfa967f1fd4ad37d4de2a6a2870eadfa2d4312b76f2f320f.elf
2818	6673c420588bad2bbfa967f1fd4ad37d4de2a6a2870eadfa2d4312b76f2f320f.elf

/tmp/6673c420588bad2bbfa967f1fd4ad37d4de2a6a2870eadfa2d4312b76f2f320f.elf
/tmp/6673c420588bad2bbfa967f1fd4ad37d4de2a6a2870eadfa2d4312b76f2f320f.elf
1⤵
- Loads a kernel module
PID:2818