Suspicious ^86% Download

be5832f3993ff63a36100b2f7b89c8d385e20dd9d72876700e7ade9fb9e6d4cb

UPX packed, stripped, sectionless

ELF zeroes trailing UPX metadata to block standard unpackingHostile sectionless MIPS UPX profile

SHA-256be5832f3993ff63a36100b2f7b89c8d385e20dd9d72876700e7ade9fb9e6d4cb

URLhttps://mb-api.abuse.ch/api/v1/

Evidence

ELF64 header omits section table 0x0–0x1f0

0x07f454c46020101000000000000000000.ELF............
0x1002003e0001000000803ebd0300000000..>......>......
0x2040000000000000000000000000000000@...............
0x3000000000400038000300000000000000[email protected].........
0x4001000000060000000000000000000000................
0x5000004000000000000000400000000000..@.......@.....
⋯7 more rows
0xd000000000000000000000000000000000................
0xe008000000000000008dbfcbb955505821............UPX!
0xf004140e1600000000a210250120589500..........%. X..
0x10090010000800000000e0000001a03003f...............?
⋯15 more rows

UPX packer banner string 0x5338d2–0x533af2

⋯4 more rows
0x533912395b5dc3681e0000005ae81e000000509[].h....Z.....P
0x533922524f545f455845437c50524f545f5752ROT_EXEC|PROT_WR
0x533932495445206661696c65642e0a005e6a02ITE failed...^j.
0x5339425f6a01580f056a7f5f6a3c580f050a00_j.X..j._j<X....
0x53395224496e666f3a20546869732066696c65$Info: This file
0x533962206973207061636b6564207769746820 is packed with 
0x53397274686520555058206578656375746162the UPX executab
0x5339826c65207061636b657220687474703a2fle packer http:/
0x5339922f7570782e73662e6e657420240a0024/upx.sf.net $..$
0x5339a249643a2055505820342e323220436f70Id: UPX 4.22 Cop
⋯7 more rows
0x533a22514d29c94183c8ff6a22415a525e6a03QM).A...j"AZR^j.
0x533a325a29ff6a09580f054889442410505a53Z).j.X..H.D$.PZS
0x533a425ead504889e14989d5ad50ad41904889^.PH..I...P.A.H.
0x533a52f75effd559488b742418488b7c24106a.^..YH.t$.H.|$.j
0x533a62055a6a0a580f0541ffe55de87effffff.Zj.X..A..].~...
0x533a722f70726f632f73656c662f6578650000/proc/self/exe..
0x533a82010000150c0000ea0700000e0000001a................
⋯7 more rows

UPX header has zeroed control fields 0x5342b1–0x534351

⋯7 more rows
0x5343219e520a77fe7d93a77899ff0000000000.R.w.}..x.......
0x5343315550582100000000000000555058210eUPX!.......UPX!.
0x534341160e0a2720bb3344d72d21a21025013c...' .3D.-!..%.<
0x534351435300a210250100000075f4000000  CS...%....u.... 