MB-7f97b172329ca98b049ade4ff8d1f25dbe23007b629d2bf8bfb701b456179e36
high
📛 Threat Title
Unknown: x86
Description
File type: elf. Size: 16028 bytes. Tags: elf, upx. Reporter: abuse_ch. First seen: 2026-09-23 23:36:37.
Indicators of Compromise (3)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
7f97b172329ca98b049ade4ff8d1f25dbe23007b629d2bf8bfb701b456179e36
IOC database
- Type
- hash_sha256
- Value
7f97b172329ca98b049ade4ff8d1f25dbe23007b629d2bf8bfb701b456179e36- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Unknown
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
b3d6eefba22199e5f59ecddb693871b716cfdbac
IOC database
- Type
- hash_sha1
- Value
b3d6eefba22199e5f59ecddb693871b716cfdbac- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
7cc8aa35b7cc5e9a7285d223752c4df4
IOC database
- Type
- hash_md5
- Value
7cc8aa35b7cc5e9a7285d223752c4df4- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: elf. Size: 16028 bytes. Tags: elf, upx. Reporter: abuse_ch. First seen: 2026-09-23 23:36:37.
Remediations (10)
-
web:learn.microsoft.com
Learn how to deal with unwanted mitigations in Windows Security, including a process to remove all mitigations and import a baseline configuration file instead.
-
web:learn.microsoft.com
Remediate security weaknesses discovered through security recommendations, and create exceptions if needed, in Defender Vulnerability Management.
-
web:orca.security
Microsoft patches CVE-2026-21509, a high-severity Office zero-day actively exploited in the wild. Learn about the OLE bypass, affected versions, and remediation .
-
web:panorays.com
Discover the difference between remediation and mitigation in risk management and how each strategy impacts security and resilience.
-
web:research.checkpoint.com
Research by: Jiří Vinopal (@vinopaljiri) Abstract What if a trusted security component could be repurposed into an attacker-controlled kernel primitive? What if a signed Microsoft remediation driver could be instructed to execute arbitrary file and registry operations from Ring 0 - without exploits, vulnerabilities, or memory corruption? In this publication, we present the first full […]
-
web:scloud.work
When a proactive remediation script fails to work as expected, it's much faster to test it locally than wait for the next sync from Intune. In this post, I'll show you how I troubleshoot Intune remediation scripts directly on a Windows device. This includes script locations, relevant logs, and registry entries that help verify what happened and why. For some samples and an introduction to ...
-
web:support.microsoft.com
Learn more how to protect your Windows devices against silicon-based microarchitectural and speculative execution side-channel vulnerabilities
-
web:windowsforum.com
Practical mitigation and remediation guidance If you're responsible for a PC, workstation fleet, or enterprise environment, the following prioritized actions will reduce risk quickly.
-
web:www.rescana.com
Given the active exploitation and the high impact potential, urgent remediation is required for all organizations utilizing affected Microsoft Office products. This advisory provides a comprehensive technical breakdown, exploitation context, and actionable mitigation guidance to help organizations defend against this evolving threat.
-
web:www.spinics.net
Command line options which force-enable a mitigation on an unaffected processor provide arguably no security value but do create the potential for problems due to the increased set of mitigation interactions.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.