Overview

overview

7

Static

static

1

x86_32

ubuntu-18.04-amd64

4

x86_32

ubuntu-20.04-amd64

4

x86_32

ubuntu-22.04-amd64

4

x86_32

ubuntu-24.04-amd64

7

Resubmissions

08/07/2026, 04:01

260708-eldt3aa17m7

08/07/2026, 04:00

260708-ekzedaa16n1

Analysis

  • user interaction
    yes
  • max time kernel
    29s
  • max time network
    21s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20260126-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20260126-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    08/07/2026, 04:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    x86_32
  • Size 132KB
  • Sample260708-eldt3aa17m
  • SHA256 87ec57bd8e639d5f96a17dfb73af5cc63cc528f45d4a3231e70f287e9ad38601
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
rootkit

Malware Config

Signatures

  • Loads a kernel module 5 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

    rootkit

Processes

  • /tmp/x86_32
    /tmp/x86_32
    1⤵
    • Loads a kernel module
    PID:2038

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        .domains
        • Path /var/.domains
        • Size 181B
        • SHA256 248b698d164d3b2167e19b299f1e882a9f4e32c266335314a9942d9a4ebce4af
        • MD5 SHA1 SHA512 TLSH
        Submit Download