Suspicious ^86% linux Download

agent_linux_ppc64le

Packed, stripped, sectionless binary

Sectionless packed ELF expands into a large memory imageBinary contains a UPX packing marker

SHA-256bcf0c261299f471ab61e7ac296fb8876088fcfca71529bad5d5b2fdc057bd92c

URLhttps://mb-api.abuse.ch/api/v1/

Evidence

ELF64 header omits section table 0x0–0x130

0x07f454c46020101000000000000000000.ELF............
0x10020015000100000028758e0200000000........(u......
0x2040000000000000000000000000000000@...............
0x3002000000400038000300000000000000[email protected].........
0x4001000000060000000000000000000000................
0x5000000100000000000000010000000000................
⋯14 more rows

UPX packer banner string 0x267694–0x267794

⋯3 more rows
0x2676c46d6d6170206661696c65642e0a000a00mmap failed.....
0x2676d424496e666f3a20546869732066696c65$Info: This file
0x2676e4206973207061636b6564207769746820 is packed with 
0x2676f474686520555058206578656375746162the UPX executab
0x2677046c65207061636b657220687474703a2fle packer http:/
0x2677142f7570782e73662e6e657420240a0024/upx.sf.net $..$
0x26772449643a2055505820342e323220436f70Id: UPX 4.22 Cop
⋯7 more rows

Canonical trailing UPX PackHeader magic 0x268408–0x268468

⋯3 more rows
0x26843800804aff000000005550582100000000..J.....UPX!....
0x268448555058210e270807b3773dbec901cfbeUPX!.'...w=.....
0x268458a200620048842600a2006200000000dd..b.H.&...b.....
0x268468f4000000                        ....            