Suspicious 85% download unavailable

sm_scsi.so.1

ELF header tampering detected

ELF header tampering (overlap / count mismatch / multi-interp / dup names)Delete files
SHA-256ede4d3eb1c4eddd7df2ad6f0b7212cda6d16195cff062c87d82ea46b7abc7fd9

Evidence

ELF header tampering (overlap / count mismatch / multi-interp / dup names) 0x0–0x40
0x07f454c46020101060100000000000000.ELF............
0x1003003e00010000000000000000000000..>.............
0x2040000000000000004863000000000000@.......Hc......
0x3000000000400038000400400020001e00[email protected]...@. ...
0x4001000000050000 .......
Write files (write) 0x10be–0x10ee
0x10be6e69005f696e6974005f6d5f7261775fni._init._m_raw_
0x10ce7772697465006d656d736574005f4954write.memset._IT
0x10de4d5f7265676973746572544d436c6f6eM_registerTMClon
0x10ee655461626c eTabl
Delete files 0x124e–0x12de
0x124e6c6f6e655461626c6500696f63746c00loneTable.ioctl.
0x125e756e6c696e6b005f44594e414d494300unlink._DYNAMIC.
0x126e646f6f725f63616c6c005f656e64005fdoor_call._end._
0x127e5f737461636b5f63686b5f6661696c00_stack_chk_fail.
0x128e636c6f73650053554e57707269766174close.SUNWprivat
0x129e655f312e31005f474c4f42414c5f4f46e_1.1._GLOBAL_OF
0x12ae465345545f5441424c455f005f5f6378FSET_TABLE_.__cx
0x12be615f66696e616c697a65005f6d5f6465a_finalize._m_de
0x12ce766963655f74797065005f6d5f676574vice_type._m_get
0x12de5f6d656469615f737461 _media_sta
X11 libSM reference 0x2f08–0x2f58
0x2f080000000000000000554889e5c9c30000........UH......
0x2f182f746d702f6c6962736d656469615f6d/tmp/libsmedia_m
0x2f286d617065645f66696c655f5858585858maped_file_XXXXX
0x2f385800006d6d6170206661696c65640064X..mmap failed.d
0x2f486f6f725f63616c6c0000000000000000oor_call........
0x2f5800 .

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.