MB-861c6aa2adcea0410ba734b3eb4e3d6c269b8224f84dede039ac4e88dcc81d41
high
📛 Threat Title
Unknown: ooikocqj.x86_64
Description
File type: elf. Size: 174079 bytes. Tags: elf. Reporter: abuse_ch. First seen: 2026-09-23 23:27:16.
Indicators of Compromise (3)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
861c6aa2adcea0410ba734b3eb4e3d6c269b8224f84dede039ac4e88dcc81d41
IOC database
- Type
- hash_sha256
- Value
861c6aa2adcea0410ba734b3eb4e3d6c269b8224f84dede039ac4e88dcc81d41- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Unknown
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
d30bc56b292da8d2393cf6ecb0cf9a1e6e64fdfb
IOC database
- Type
- hash_sha1
- Value
d30bc56b292da8d2393cf6ecb0cf9a1e6e64fdfb- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
365cdc5580619670cef965ce096aa7c8
IOC database
- Type
- hash_md5
- Value
365cdc5580619670cef965ce096aa7c8- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: elf. Size: 174079 bytes. Tags: elf. Reporter: abuse_ch. First seen: 2026-09-23 23:27:16.
Remediations (10)
-
web:github.com
A comprehensive collection of Microsoft Intune remediation scripts and configurations designed for enterprise endpoint management, device compliance enforcement, and automated system fixes. This repository provides production-ready PowerShell scripts that integrate seamlessly with Intune's remediation framework.
-
web:github.com
Mitigation Like MDS, all variants of Processor MMIO Stale Data vulnerabilities have the same mitigation strategy to force the CPU to clear the affected buffers before an attacker can extract the secrets. This is achieved by using the otherwise unused and obsolete VERW instruction in combination with a microcode update.
-
web:learn.microsoft.com
Proved the fix. Microsoft stated that they have re-published the CVE-2013-3900 to inform customers about the availability of EnableCertPaddingCheck. This behavior remains available as an opt-in feature via the registry key setting and is available on all supported editions of Windows released since December 10, 2013. <P> Microsoft recommends that executable authors consider conforming all ...
-
web:learn.microsoft.com
Remediate security weaknesses discovered through security recommendations, and create exceptions if needed, in Defender Vulnerability Management.
-
web:scloud.work
When a proactive remediation script fails to work as expected, it's much faster to test it locally than wait for the next sync from Intune. In this post, I'll show you how I troubleshoot Intune remediation scripts directly on a Windows device. This includes script locations, relevant logs, and registry entries that help verify what happened and why. For some samples and an introduction to ...
-
web:support.microsoft.com
Updates for Windows released on April 9, 2024, and later updates, add the following: Three new mitigation controls that replace the mitigations released in 2023. The new mitigations controls are: A control to deploy the "Windows UEFI CA 2023" certificate to the Secure Boot DB to add trust for Windows boot managers signed by this certificate.
-
web:windowsforum.com
The thread centers on fixing Windows 10/11 Windows Update failures by repairing the component store and system files using DISM (`/RestoreHealth`) follo...
-
web:www.intuneautomation.com
The practical difference between Intune detection scripts and remediation scripts, when to write each, how they pair together in proactive remediations , and the exit-code patterns that keep them reliable in production.
-
web:www.kodemsecurity.com
CVE-2026-31431, the Copy Fail Linux kernel LPE, lets authenticated users gain root. See affected kernels, exploit details, IOCs and patches.
-
web:www.majorgeeks.com
Windows Defender may try to remove a virus, trojan, or other malware and return a message stating Remediation incomplete. Remediation incomplete leads one to assume that a virus, trojan or malware was found, but not removed.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.