MB-6edbf7cf9096032aced5be03ae2667bc149579f7a5ea45016a1a5a08b1b73ee4
high
📛 Threat Title
Unknown: i686
Description
File type: elf. Size: 25600 bytes. Tags: elf, upx-dec. Reporter: abuse_ch. First seen: 2026-09-23 23:27:46.
Indicators of Compromise (3)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
6edbf7cf9096032aced5be03ae2667bc149579f7a5ea45016a1a5a08b1b73ee4
IOC database
- Type
- hash_sha256
- Value
6edbf7cf9096032aced5be03ae2667bc149579f7a5ea45016a1a5a08b1b73ee4- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Unknown
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
cdb28a65e70b9b686fe21cebf607f2c50360f6c8
IOC database
- Type
- hash_sha1
- Value
cdb28a65e70b9b686fe21cebf607f2c50360f6c8- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
24eb8c05e7e4633390959afb63953195
IOC database
- Type
- hash_md5
- Value
24eb8c05e7e4633390959afb63953195- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: elf. Size: 25600 bytes. Tags: elf, upx-dec. Reporter: abuse_ch. First seen: 2026-09-23 23:27:46.
Remediations (10)
-
web:community.intel.com
Following extensive investigation of the Intel® Core™ 13th and 14th Gen desktop processor Vmin Shift Instability issue, Intel can now confirm the root cause diagnosis for the issue. This post will cover Intel's understanding of the root cause, as well as additional mitigations and next steps for Int...
-
web:github.com
i386-, i686 - and x86_64-elf GCC, GDB and Binutils. Contribute to lordmilko/ i686 -elf-tools development by creating an account on GitHub.
-
web:github.com
The duration between the public weaponization of an in-the-wild zero-day and the availability of tested, signed binary kernel packages from enterprise distributions (Ubuntu HWE, Debian, RHEL) typically spans 7 to 21 days. In production Kubernetes clusters, passively awaiting vendor packages exposes ...
-
web:knowledge.broadcom.com
Host status 'unknown' in vLCM Scenario 1: The ESXi host status is showing as 'unknown' after remediation : ACTIONS ⇓ ? Host status is unknown Info: The host will be rebooted during remediation . Info: Quick Boot is supported on the host. Firmware compliance Scenario 2: Or the ESXi host stops part-way through remediation and produces the error:
-
web:learn.microsoft.com
Learn how to deal with unwanted mitigations in Windows Security, including a process to remove all mitigations and import a baseline configuration file instead.
-
web:learn.microsoft.com
Learn more about Remediations in Microsoft Intune, including what Remediations are and view any prerequisites and licensing requirements. Also, learn how to deploy built-in and custom remediation scripts, and learn how to monitor your scripts.
-
web:panorays.com
Discover the difference between remediation and mitigation in risk management and how each strategy impacts security and resilience.
-
web:support.microsoft.com
More information Both the Exchange Server Emergency Mitigation Service (EMS) and the Microsoft Exchange Flighting Service depend on Office Config Service (OCS) files that are signed with a digital certificate. Exchange Server versions that have not been updated with the June 2026 (or later) updates validate these signatures against a specific expected certificate issuer. Because the ...
-
web:windowsforum.com
Practical mitigation and remediation guidance If you're responsible for a PC, workstation fleet, or enterprise environment, the following prioritized actions will reduce risk quickly.
-
web:www.rescana.com
Given the active exploitation and the high impact potential, urgent remediation is required for all organizations utilizing affected Microsoft Office products. This advisory provides a comprehensive technical breakdown, exploitation context, and actionable mitigation guidance to help organizations defend against this evolving threat.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.