Resubmissions

02/08/2026, 01:25

260802-bs3j8abl6x10

02/08/2026, 01:23

260802-br8pva1gqg10

Analysis

  • user interaction
    yes
  • max time kernel
    38s
  • max time network
    39s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20260126-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20260126-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    02/08/2026, 01:25

General

  • Target
    52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf
  • Size 98KB
  • Sample260802-bs3j8abl6x
  • SHA256 52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads a kernel module 17 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf
    /tmp/52e0c4974427db87b915d5b81785e6a9a014f5626e7adefee0c4a9710edd626d.elf
    1⤵
    • Loads a kernel module
    • Writes file to tmp directory
    PID:2041

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads