MB-2be25f9625a939e66483bcb8111fb72985f126992aa27e2c1994f8ae685109e5
high
📛 Threat Title
Unknown: bot.armv8
Description
File type: elf. Size: 1168918 bytes. Tags: elf. Reporter: abuse_ch. First seen: 2026-09-25 00:12:48.
Indicators of Compromise (3)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
2be25f9625a939e66483bcb8111fb72985f126992aa27e2c1994f8ae685109e5
IOC database
- Type
- hash_sha256
- Value
2be25f9625a939e66483bcb8111fb72985f126992aa27e2c1994f8ae685109e5- First seen
- Last seen
- Attached to this threat
- Appears in
- 2 threats
- Description
- URLhaus payload hash
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
13ba9da34cbf478cfefbdd42b8276001
IOC database
- Type
- hash_md5
- Value
13ba9da34cbf478cfefbdd42b8276001- First seen
- Last seen
- Attached to this threat
- Appears in
- 2 threats
- Description
- URLhaus payload hash
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
4a13a460ebb56044e47c315041fda1b26ebb2247
IOC database
- Type
- hash_sha1
- Value
4a13a460ebb56044e47c315041fda1b26ebb2247- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: elf. Size: 1168918 bytes. Tags: elf. Reporter: abuse_ch. First seen: 2026-09-25 00:12:48.
Remediations (10)
-
web:bunny.net
Discover bot detection and mitigation techniques using advanced techniques like behavioral analysis, fingerprinting, CAPTCHAs, and AI-powered detection. Learn how websites differentiate real users from automated scripts and protect against malicious traffic.
-
web:dl.acm.org
Moreover, unlike many x86-specific mitigations , Switchpoline is compatible with existing orthogonal defenses, such as (hardware) CFI or Spectre-PHT mitigations . Hence, Switchpoline is a practical generic software mitigation on ARMv8.
-
web:github.com
Switchpoline: A Software Mitigation for Spectre-BTB and Spectre-BHB on ARMv8 Reproducability Switchpoline is a C/C++ compiler which protects ARMv8 programs from Spectre-BTB and Spectre-BHB attacks. It is a fork of LLVM 10, including Clang and lld and can be used as a drop-in replacement for gcc or clang in many situations.
-
web:github.com
Trying to build a universal binary with the latest version of Botan on MacOS and I'm getting the following errors: clang++ -fstack-protector -pthread -stdlib=libc++ -force_cpusubtype_ALL -arch x86_...
-
web:ieeexplore.ieee.org
Aiming at the "reboot stuck after power-off following OS crash" issue in ARM v8-based Information and Communications Technology (ICT) Innovation devices (e.g., Phytium FT2000/4, Phytium D2000), this study reveals that the core mechanism is the corruption of the UEFI BIOS Non-Volatile (NV) Variable Region, caused by interrupted log writing of the Linux kernel's Pstore Module. A three-layer ...
-
web:trustedfirmware-m.readthedocs.io
Branch Protection The Branch Protection is an optional feature that can help with mitigation of common exploits through undesired branching in code. The Branch Protection feature leverages the Pointer Authentication and Branch Target Identification extension (PACBTI) which is optional and available in Armv8.1-M architecture.
-
web:www.humansecurity.com
HUMAN Security's bot protection software uses AI and behavior analysis to stop malicious bots, prevent fraud, and protect your site, apps, and APIs.
-
web:www.misc0110.net
More-over, unlike many x86-specific mitigations , Switchpoline is compat-ible with existing orthogonal defenses, such as (hardware) CFI or Spectre-PHT mitigations . Hence, Switchpoline is a practical generic software mitigation on ARMv8.
-
web:www.researchgate.net
PDF | On Jul 1, 2024, Lorenz Hetterich and others published Switchpoline: A Software Mitigation for Spectre-BTB and Spectre-BHB on ARMv8 | Find, read and cite all the research you need on ResearchGate
-
web:www.upguard.com
CVE-2026-85046 is a high-severity (8.8) type confusion vulnerability in Google Chrome's V8 engine being actively exploited for remote code execution.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.