9f0f370c7a8ff25b3b98d754542806e74a5bbed819e7f8dc4629ac51b3436f5e

Analysis

max time kernel
5s
max time network
129s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20250307-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20250307-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
20/03/2025, 03:43

Target

9f0f370c7a8ff25b3b98d754542806e74a5bbed819e7f8dc4629ac51b3436f5e.elf
Size

78KB
MD5

ef4b68917a7de319438121f481a7d7f6
SHA1

fab96b4db655ab58e3a7280ab80ce8aef527958a
SHA256

9f0f370c7a8ff25b3b98d754542806e74a5bbed819e7f8dc4629ac51b3436f5e
SHA512

68504f145dd5f0e49ef7afebcb70e6a747a9cd3da3d05bbbf83c98a7f6756e432284b71538f20a51acdca2ce857f60414502df118ff56b3f93fd69fa034b5f5b
SSDEEP

1536:7SBF2xSEM2Fj42mkd6TuYEfl0WGa+nVMMWVcBa2fBNHluNbnLAzMOL:7SBUxSUFjlmkd6TuYEfl0WG/WeBa2fBZ

Score

7^/10

rootkit

Loads a kernel module 3 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2503	9f0f370c7a8ff25b3b98d754542806e74a5bbed819e7f8dc4629ac51b3436f5e.elf
2503	9f0f370c7a8ff25b3b98d754542806e74a5bbed819e7f8dc4629ac51b3436f5e.elf
2503	9f0f370c7a8ff25b3b98d754542806e74a5bbed819e7f8dc4629ac51b3436f5e.elf

/tmp/9f0f370c7a8ff25b3b98d754542806e74a5bbed819e7f8dc4629ac51b3436f5e.elf
/tmp/9f0f370c7a8ff25b3b98d754542806e74a5bbed819e7f8dc4629ac51b3436f5e.elf
1⤵
- Loads a kernel module
PID:2503