Suspicious 80% Download

mpss.so.1.1

LD_PRELOAD usage warrants review

Malformed ELF header or section headers: LD_PRELOAD shell export
SHA-256668c306a90a2704dfde0558cdeb45272d1e7b49e0f775a34b2f9b4f444ea6679
MaleculeO(Er)H(Os)

Evidence

LD_PRELOAD environment variable 0x54c–0x59c
0x54c700a2e696e202b320a2e6e660a5c6642p..in +2..nf.\fB
0x55c4c445f5052454c4f41443d244c445f50LD_PRELOAD=$LD_P
0x56c52454c4f41443a6d7073732e736f2e31RELOAD:mpss.so.1
0x57c5c66520a2e66690a2e696e202d320a2e\fR..fi..in -2..
0x58c73700a0a2e534820454e5649524f4e4dsp...SH ENVIRONM
0x59c454e54 ENT

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.