Analysis
- user interaction
yes - max time kernel
38s - max time network
39s - platform
ubuntu-24.04_amd64 - resource
ubuntu2404-amd64-20260126-en - resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20260126-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system - submitted
02/08/2026, 01:25
Behavioral task
behavioral1
Sample
52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf
Resource
ubuntu2404-amd64-20260126-en
2 signatures
150 seconds
General
- Target 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf
- Size 98KB
- Sample260802-bs3j8abl6x
- SHA256 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d
- MD5 bd87c85a06a65791729a8238a8f7a268
- SHA1 86953bc702ec75bd0c8d0ea32dd21911015155e9
- SHA512 96f194913b92459015b71d5a301de42a515824e58ce9032cf7d16131ab9e50e68f6039ccaf219a4ff9743a5306ef595a7ce4ac1bcb64dc0566b18c9f50f7c49f
- SSDEEP 1536:rMmRqozBnO115B3k7myNqhwN+bYTMIqWBtlgALf5SZ+ZwLjh:wmDg3U7myNq+N+biL5tXD5+Ljh
- TLSH T190A36CD6E283D4F5EC2241303176FF379E72E5BA2128DD83D7A49663BC62A42D406E5C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads a kernel module 17 IoCs
Loads a Linux kernel module, potentially to achieve persistence
pid Process 2041 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf 2043 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf 2041 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf 2041 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf 2055 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf 2043 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf 2043 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf 2055 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf 2055 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf 2043 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf 2043 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf 2055 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf 2055 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf 2043 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf 2043 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf 2055 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf 2055 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/^�� 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf