Suspicious 85% Download

audit_binfile.so.1

ELF header tampering detected

ELF header tampering (overlap / count mismatch / multi-interp / dup names)
SHA-25622994ca2888056207b7e3d03d4f8c86cfc0f9f451422024c5f35ed7220a3f6a6
MaleculeO(As)Md₂(BiHe)

Evidence

ELF header tampering (overlap / count mismatch / multi-interp / dup names) 0x0–0x40
0x07f454c46010101060100000000000000.ELF............
0x1003000300010000000000000034000000............4...
0x20b44d0000000000003400200004002800.M......4. ...(.
0x3020001e00010000000000000000000000 ...............
0x4000000000622b00 ....b+.
C++ ABI symbols cluster A 0xc85–0xcb5
0xc85636d70006164725f73686f7274005f5fcmp.adr_short.__
0xc956378615f66696e616c697a65005f5052cxa_finalize._PR
0xca54f4345445552455f4c494e4b4147455fOCEDURE_LINKAGE_
0xcb55441424c455f0053554e5770 TABLE_.SUNWp
Write files (write) 0xdbc–0xe4c
0xdbc5f6f70656e005f5f6c6f67706f737400_open.__logpost.
0xdcc7772697465006164725f636861720070write.adr_char.p
0xddc7468726561645f6d757465785f646573thread_mutex_des
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.