Analysis

  • max time kernel
    131s
  • max time network
    148s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20250307-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20250307-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    10/03/2025, 02:40

General

  • Target

    9b83ca9b88cb3af4b73c93cacc215d44c81af9a1c11f6f5dea0ee75b3ba04aab.elf

  • Size

    29KB

  • MD5

    799e9d7ec024dfcaf8c554847772e94e

  • SHA1

    f9657b6df0c928ab73562c586493e87283a90a48

  • SHA256

    9b83ca9b88cb3af4b73c93cacc215d44c81af9a1c11f6f5dea0ee75b3ba04aab

  • SHA512

    ae561475210896ca3f57af41f6b473ed5cffe8bc887327e4937480faf5833c224f825e2035c83a915b661ab5f41051c27e58f061c6c28ff22fa13d0cba783da6

  • SSDEEP

    768:9Yh9bRcbP5ZGsz8Y0C0hN9LHgWQJ1NAaAbDDz:9YfbRcbPzH0PTDgdJ12fbL

Score
7/10

Malware Config

Signatures

  • Loads a kernel module 3 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/9b83ca9b88cb3af4b73c93cacc215d44c81af9a1c11f6f5dea0ee75b3ba04aab.elf
    /tmp/9b83ca9b88cb3af4b73c93cacc215d44c81af9a1c11f6f5dea0ee75b3ba04aab.elf
    1⤵
    • Loads a kernel module
    • Writes file to tmp directory
    PID:2483

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads