6c76523f4d779e7fb4c9790bb9f88fe9d9304b41e128cb8b88f49d28ce869e70

Analysis

max time kernel
5s
max time network
131s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20250307-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20250307-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
20/03/2025, 03:10

Target

6c76523f4d779e7fb4c9790bb9f88fe9d9304b41e128cb8b88f49d28ce869e70.elf
Size

82KB
MD5

50705158da515f780cf861a004859667
SHA1

cec3b9e032642b1a0951ec81d1368516913a0e84
SHA256

6c76523f4d779e7fb4c9790bb9f88fe9d9304b41e128cb8b88f49d28ce869e70
SHA512

a27facd05be05efdfb48a935b47865627115f8363e954986e8ddb7f542841181e243da52e6590b5d7002321d1a83640852f1047cb9bcd88c269cf71259bb08d7
SSDEEP

1536:N71N2rV652DYK2vRylkLfyq8hFXgFVTJWJMgDfEhrzxONxeNe6LO:N718rVzDYHvRylkLfyq87XCqHDfEhrzo

Score

7^/10

rootkit

Loads a kernel module 3 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
8460	6c76523f4d779e7fb4c9790bb9f88fe9d9304b41e128cb8b88f49d28ce869e70.elf
8460	6c76523f4d779e7fb4c9790bb9f88fe9d9304b41e128cb8b88f49d28ce869e70.elf
8460	6c76523f4d779e7fb4c9790bb9f88fe9d9304b41e128cb8b88f49d28ce869e70.elf

/tmp/6c76523f4d779e7fb4c9790bb9f88fe9d9304b41e128cb8b88f49d28ce869e70.elf
/tmp/6c76523f4d779e7fb4c9790bb9f88fe9d9304b41e128cb8b88f49d28ce869e70.elf
1⤵
- Loads a kernel module
PID:8460