Analysis
-
max time kernel
149s -
max time network
152s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20250307-en -
resource tags
-
submitted
08/03/2025, 13:39
General
-
Target
c247239e9373395f8f485f350d1d38c78656d72c6dcf6bf61551fb32100aad0e.elf
-
Size
110KB
-
MD5
bf3dabf8d477d699f0d1795888d3d6ef
-
SHA1
a6bbecf6eb233b57186b888ed9a48b0ffb71ba1f
-
SHA256
c247239e9373395f8f485f350d1d38c78656d72c6dcf6bf61551fb32100aad0e
-
SHA512
f258c55bf2e000e5bf8f3ec95f5b0225678a9b07c7f9030984df0a97896f03fbe12f3668006aab12bd13513a0cb80f452695d62c02249811bf726a10cb0e9aaf
-
SSDEEP
3072:N1V/PY7b/ZBjOBQOARytwTO5aWmOm+09V:vV/PmbhBjOBQiJbm3T
Score
9/10
Malware Config
Signatures
-
Contacts a large (37114) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Loads a kernel module 5 IoCs
Loads a Linux kernel module, potentially to achieve persistence
-
Writes file to system bin folder 1 IoCs
Processes
-
/tmp/c247239e9373395f8f485f350d1d38c78656d72c6dcf6bf61551fb32100aad0e.elf/tmp/c247239e9373395f8f485f350d1d38c78656d72c6dcf6bf61551fb32100aad0e.elf1⤵
- Loads a kernel module
- Writes file to system bin folder