Analysis
- max time kernel
26s - max time network
30s - platform
ubuntu-24.04_amd64 - resource
ubuntu2404-amd64-20250619-en - resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20250619-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system - submitted
04/08/2026, 02:22
Behavioral task
behavioral1
Sample
ROOTKITSON.x86
Resource
ubuntu1804-amd64-20260513-en
3 signatures
30 seconds
Behavioral task
behavioral2
Sample
ROOTKITSON.x86
Resource
ubuntu2004-amd64-20260126-en
3 signatures
30 seconds
Behavioral task
behavioral3
Sample
ROOTKITSON.x86
Resource
ubuntu2204-amd64-20260513-en
3 signatures
30 seconds
Behavioral task
behavioral4
Sample
ROOTKITSON.x86
Resource
ubuntu2404-amd64-20250619-en
1 signatures
30 seconds
General
- Target ROOTKITSON.x86
- Size 73KB
- Sample260804-ctme3abe49
- SHA256 184fd0dab236dcb4889b5824ef2577577a34be3057e7d113c1eed7ef515b1e4e
- MD5 5312ef03df1b88f5eaef031b6e4684c4
- SHA1 2e38f615c237870629f8c17e531369465da38a85
- SHA512 c3cced3845528cd82ecffab683a6d2f8eadee6132bded130158de2544a1f96eb24f6594d3dd982d7036b6d6a0facc4ea394439326e3ae85fee9f575eaaa01da0
- SSDEEP 1536:Rcz8Mfl3USRL+r97S3Tl9ffUr9sFC1qs3vLJ7LZaA14B6Kk3u8Lxg:RcICl3USMsTl9HUrS6qs3TJ7LYK4fQLx
- TLSH T1F3730A826A43DEF3E85710F502B7EB365A32FD3A083AC5C6E774FCA15A515C0A5163AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads a kernel module 15 IoCs
Loads a Linux kernel module, potentially to achieve persistence
pid Process 2025 ROOTKITSON.x86 2025 ROOTKITSON.x86 2025 ROOTKITSON.x86 2025 ROOTKITSON.x86 2025 ROOTKITSON.x86 2025 ROOTKITSON.x86 2025 ROOTKITSON.x86 2025 ROOTKITSON.x86 2025 ROOTKITSON.x86 2025 ROOTKITSON.x86 2025 ROOTKITSON.x86 2025 ROOTKITSON.x86 2025 ROOTKITSON.x86 2025 ROOTKITSON.x86 2025 ROOTKITSON.x86