Edit tour

Linux Analysis Report
x86.elf

Overview

General Information

Sample name:x86.elf
Analysis ID:1646139
MD5:22834e5a7f735f91e6a4287270738076
SHA1:ffeb3c2033ca242b1a0a938e219449ff01a737e3
SHA256:e23ffbd31fb401b2b403a0c2ddf088b3bf51c43ef6666500b344c0b0965a0256
Tags:elfuser-abuse_ch
Infos:

Detection

Mirai
Score:76
Range:0 - 100

Signatures

Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Yara detected Mirai
Connects to many ports of the same IP (likely port scanning)
Sample deletes itself
Sample is packed with UPX
Detected TCP or UDP traffic on non-standard ports
ELF contains segments with high entropy indicating compressed/encrypted content
Sample contains only a LOAD segment without any section mappings
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Yara signature match

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious
Joe Sandbox version:42.0.0 Malachite
Analysis ID:1646139
Start date and time:2025-03-23 12:20:25 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 17s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:x86.elf
Detection:MAL
Classification:mal76.troj.evad.linELF@0/0@0/0
Command:/tmp/x86.elf
PID:5435
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
Obliterate You
Standard Error:
  • system is lnxubuntu20
  • x86.elf (PID: 5435, Parent: 5357, MD5: 22834e5a7f735f91e6a4287270738076) Arguments: /tmp/x86.elf
    • x86.elf New Fork (PID: 5436, Parent: 5435)
      • x86.elf New Fork (PID: 5437, Parent: 5436)
        • x86.elf New Fork (PID: 5438, Parent: 5437)
  • cleanup
NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai
SourceRuleDescriptionAuthorStrings
5435.1.0000000008048000.0000000008054000.r-x.sdmpJoeSecurity_Mirai_9Yara detected MiraiJoe Security
    5435.1.0000000008048000.0000000008054000.r-x.sdmpLinux_Trojan_Mirai_b14f4c5dunknownunknown
    • 0x4150:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
    5435.1.0000000008048000.0000000008054000.r-x.sdmpLinux_Trojan_Mirai_88de437funknownunknown
    • 0x5e12:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
    5435.1.0000000008048000.0000000008054000.r-x.sdmpLinux_Trojan_Mirai_389ee3e9unknownunknown
    • 0x8f85:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
    5435.1.0000000008048000.0000000008054000.r-x.sdmpLinux_Trojan_Mirai_cc93863bunknownunknown
    • 0x77e7:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
    Click to see the 1 entries
    No Suricata rule has matched

    Click to jump to signature section

    Show All Signature Results

    AV Detection

    barindex
    Source: x86.elfVirustotal: Detection: 39%Perma Link
    Source: x86.elfReversingLabs: Detection: 44%

    Networking

    barindex
    Source: global trafficTCP traffic: 198.98.51.68 ports 1,2,3,4,5,23451
    Source: global trafficTCP traffic: 192.168.2.13:38802 -> 198.98.51.68:23451
    Source: global trafficTCP traffic: 192.168.2.13:48202 -> 185.125.190.26:443
    Source: unknownTCP traffic detected without corresponding DNS query: 198.98.51.68
    Source: unknownTCP traffic detected without corresponding DNS query: 198.98.51.68
    Source: unknownTCP traffic detected without corresponding DNS query: 198.98.51.68
    Source: unknownTCP traffic detected without corresponding DNS query: 198.98.51.68
    Source: unknownTCP traffic detected without corresponding DNS query: 198.98.51.68
    Source: unknownTCP traffic detected without corresponding DNS query: 198.98.51.68
    Source: unknownTCP traffic detected without corresponding DNS query: 185.125.190.26
    Source: unknownTCP traffic detected without corresponding DNS query: 198.98.51.68
    Source: unknownTCP traffic detected without corresponding DNS query: 198.98.51.68
    Source: unknownTCP traffic detected without corresponding DNS query: 198.98.51.68
    Source: unknownTCP traffic detected without corresponding DNS query: 198.98.51.68
    Source: unknownTCP traffic detected without corresponding DNS query: 185.125.190.26
    Source: unknownTCP traffic detected without corresponding DNS query: 198.98.51.68
    Source: unknownTCP traffic detected without corresponding DNS query: 198.98.51.68
    Source: unknownTCP traffic detected without corresponding DNS query: 198.98.51.68
    Source: unknownTCP traffic detected without corresponding DNS query: 198.98.51.68
    Source: unknownTCP traffic detected without corresponding DNS query: 198.98.51.68
    Source: unknownTCP traffic detected without corresponding DNS query: 198.98.51.68
    Source: x86.elfString found in binary or memory: http://upx.sf.net
    Source: unknownNetwork traffic detected: HTTP traffic on port 48202 -> 443

    System Summary

    barindex
    Source: 5435.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
    Source: 5435.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_88de437f Author: unknown
    Source: 5435.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
    Source: 5435.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
    Source: 5435.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
    Source: LOAD without section mappingsProgram segment: 0xc01000
    Source: 5435.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
    Source: 5435.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
    Source: 5435.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
    Source: 5435.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
    Source: 5435.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
    Source: classification engineClassification label: mal76.troj.evad.linELF@0/0@0/0

    Data Obfuscation

    barindex
    Source: initial sampleString containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
    Source: initial sampleString containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
    Source: initial sampleString containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $

    Hooking and other Techniques for Hiding and Protection

    barindex
    Source: /tmp/x86.elf (PID: 5435)File: /tmp/x86.elfJump to behavior
    Source: x86.elfSubmission file: segment LOAD with 7.8806 entropy (max. 8.0)

    Stealing of Sensitive Information

    barindex
    Source: Yara matchFile source: 5435.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY

    Remote Access Functionality

    barindex
    Source: Yara matchFile source: 5435.1.0000000008048000.0000000008054000.r-x.sdmp, type: MEMORY
    ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
    Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath Interception11
    Obfuscated Files or Information
    OS Credential DumpingSystem Service DiscoveryRemote ServicesData from Local System1
    Encrypted Channel
    Exfiltration Over Other Network MediumAbuse Accessibility Features
    CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization Scripts1
    File Deletion
    LSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media1
    Non-Standard Port
    Exfiltration Over BluetoothNetwork Denial of Service
    Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
    Application Layer Protocol
    Automated ExfiltrationData Encrypted for Impact
    No configs have been found
    Hide Legend

    Legend:

    • Process
    • Signature
    • Created File
    • DNS/IP Info
    • Is Dropped
    • Number of created Files
    • Is malicious
    • Internet
    behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1646139 Sample: x86.elf Startdate: 23/03/2025 Architecture: LINUX Score: 76 18 198.98.51.68, 23451, 38802 PONYNETUS United States 2->18 20 185.125.190.26, 443 CANONICAL-ASGB United Kingdom 2->20 22 Malicious sample detected (through community Yara rule) 2->22 24 Multi AV Scanner detection for submitted file 2->24 26 Yara detected Mirai 2->26 28 2 other signatures 2->28 9 x86.elf 2->9         started        signatures3 process4 signatures5 30 Sample deletes itself 9->30 12 x86.elf 9->12         started        process6 process7 14 x86.elf 12->14         started        process8 16 x86.elf 14->16         started       
    SourceDetectionScannerLabelLink
    x86.elf39%VirustotalBrowse
    x86.elf44%ReversingLabsLinux.Trojan.Mirai
    No Antivirus matches
    No Antivirus matches
    No Antivirus matches

    Download Network PCAP: filteredfull

    No contacted domains info
    NameSourceMaliciousAntivirus DetectionReputation
    http://upx.sf.netx86.elffalse
      high
      • No. of IPs < 25%
      • 25% < No. of IPs < 50%
      • 50% < No. of IPs < 75%
      • 75% < No. of IPs
      IPDomainCountryFlagASNASN NameMalicious
      185.125.190.26
      unknownUnited Kingdom
      41231CANONICAL-ASGBfalse
      198.98.51.68
      unknownUnited States
      53667PONYNETUStrue
      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
      185.125.190.26arm5.elfGet hashmaliciousUnknownBrowse
        na.elfGet hashmaliciousPrometeiBrowse
          boatnet.arm6.elfGet hashmaliciousMiraiBrowse
            arm.elfGet hashmaliciousMiraiBrowse
              tftp.elfGet hashmaliciousGafgyt, MiraiBrowse
                wget.elfGet hashmaliciousGafgyt, MiraiBrowse
                  galt.arm7.elfGet hashmaliciousUnknownBrowse
                    na.elfGet hashmaliciousPrometeiBrowse
                      wget.elfGet hashmaliciousGafgytBrowse
                        x.rar.elfGet hashmaliciousXmrigBrowse
                          198.98.51.68mpsl.elfGet hashmaliciousMiraiBrowse
                            mips.elfGet hashmaliciousMiraiBrowse
                              i486.elfGet hashmaliciousUnknownBrowse
                                arm7.elfGet hashmaliciousMiraiBrowse
                                  x86_64.elfGet hashmaliciousMiraiBrowse
                                    No context
                                    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                    CANONICAL-ASGBmpsl.elfGet hashmaliciousMiraiBrowse
                                    • 91.189.91.42
                                    arm5.elfGet hashmaliciousUnknownBrowse
                                    • 185.125.190.26
                                    na.elfGet hashmaliciousPrometeiBrowse
                                    • 91.189.91.42
                                    na.elfGet hashmaliciousPrometeiBrowse
                                    • 91.189.91.42
                                    na.elfGet hashmaliciousPrometeiBrowse
                                    • 185.125.190.26
                                    sshd.elfGet hashmaliciousUnknownBrowse
                                    • 91.189.91.42
                                    na.elfGet hashmaliciousPrometeiBrowse
                                    • 91.189.91.42
                                    i.elfGet hashmaliciousUnknownBrowse
                                    • 91.189.91.42
                                    na.elfGet hashmaliciousPrometeiBrowse
                                    • 91.189.91.42
                                    efefa7.elfGet hashmaliciousMiraiBrowse
                                    • 91.189.91.42
                                    PONYNETUSmpsl.elfGet hashmaliciousMiraiBrowse
                                    • 198.98.51.68
                                    mips.elfGet hashmaliciousMiraiBrowse
                                    • 198.98.51.68
                                    i486.elfGet hashmaliciousUnknownBrowse
                                    • 198.98.51.68
                                    arm7.elfGet hashmaliciousMiraiBrowse
                                    • 198.98.51.68
                                    x86_64.elfGet hashmaliciousMiraiBrowse
                                    • 198.98.51.68
                                    boatnet.ppc.elfGet hashmaliciousMiraiBrowse
                                    • 209.141.40.172
                                    boatnet.m68k.elfGet hashmaliciousMiraiBrowse
                                    • 209.141.40.172
                                    boatnet.arm7.elfGet hashmaliciousMiraiBrowse
                                    • 209.141.40.172
                                    boatnet.mips.elfGet hashmaliciousMiraiBrowse
                                    • 209.141.40.172
                                    boatnet.x86.elfGet hashmaliciousMiraiBrowse
                                    • 209.141.40.172
                                    No context
                                    No context
                                    No created / dropped files found
                                    File type:ELF 32-bit LSB executable, Intel 80386, version 1 (GNU/Linux), statically linked, no section header
                                    Entropy (8bit):7.8756568227243555
                                    TrID:
                                    • ELF Executable and Linkable format (Linux) (4029/14) 50.16%
                                    • ELF Executable and Linkable format (generic) (4004/1) 49.84%
                                    File name:x86.elf
                                    File size:26'404 bytes
                                    MD5:22834e5a7f735f91e6a4287270738076
                                    SHA1:ffeb3c2033ca242b1a0a938e219449ff01a737e3
                                    SHA256:e23ffbd31fb401b2b403a0c2ddf088b3bf51c43ef6666500b344c0b0965a0256
                                    SHA512:3d3c0cf3225e3cefdc99d921d7e5954dd9a01916f8c43e93842bf8044d91c8aed4dbe3c5f6a1b663aab9812797f5f1b013b7e6f7ef7efc22173d229b321107ef
                                    SSDEEP:768:fYYdmCv+1xlRd6lX5XdXbJ+4oehjEN5kIES8Wt:fNdme+XlRd6lVdLFoEA5k6
                                    TLSH:81C2E135298F471EEF15733BE26F459553FA3A810B12DB89FA0C4E8E5C51622067E2CE
                                    File Content Preview:.ELF....................8n..4...........4. ...(......................f...f..............@...@m..@m..................Q.td................................UPX!........L...L.......Z........?d..ELF.......d.......4....4. (.......k.-.#.<..............@..|..-d..l

                                    ELF header

                                    Class:ELF32
                                    Data:2's complement, little endian
                                    Version:1 (current)
                                    Machine:Intel 80386
                                    Version Number:0x1
                                    Type:EXEC (Executable file)
                                    OS/ABI:UNIX - Linux
                                    ABI Version:0
                                    Entry Point Address:0xc06e38
                                    Flags:0x0
                                    ELF Header Size:52
                                    Program Header Offset:52
                                    Program Header Size:32
                                    Number of Program Headers:3
                                    Section Header Offset:0
                                    Section Header Size:40
                                    Number of Section Headers:0
                                    Header String Table Index:0
                                    TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                                    LOAD0x00xc010000xc010000x661b0x661b7.88060x5R E0x1000
                                    LOAD0xd400x8056d400x8056d400x00x00.00000x6RW 0x1000
                                    GNU_STACK0x00x00x00x00x00.00000x6RW 0x4

                                    Download Network PCAP: filteredfull

                                    • Total Packets: 18
                                    • 23451 undefined
                                    • 443 (HTTPS)
                                    TimestampSource PortDest PortSource IPDest IP
                                    Mar 23, 2025 12:21:06.923041105 CET3880223451192.168.2.13198.98.51.68
                                    Mar 23, 2025 12:21:07.014144897 CET2345138802198.98.51.68192.168.2.13
                                    Mar 23, 2025 12:21:07.014204979 CET3880223451192.168.2.13198.98.51.68
                                    Mar 23, 2025 12:21:07.950474024 CET3880223451192.168.2.13198.98.51.68
                                    Mar 23, 2025 12:21:08.040258884 CET2345138802198.98.51.68192.168.2.13
                                    Mar 23, 2025 12:21:08.040322065 CET3880223451192.168.2.13198.98.51.68
                                    Mar 23, 2025 12:21:08.040364027 CET3880223451192.168.2.13198.98.51.68
                                    Mar 23, 2025 12:21:08.130317926 CET2345138802198.98.51.68192.168.2.13
                                    Mar 23, 2025 12:21:08.130367994 CET3880223451192.168.2.13198.98.51.68
                                    Mar 23, 2025 12:21:08.220668077 CET2345138802198.98.51.68192.168.2.13
                                    Mar 23, 2025 12:21:17.230504036 CET48202443192.168.2.13185.125.190.26
                                    Mar 23, 2025 12:21:18.049401999 CET3880223451192.168.2.13198.98.51.68
                                    Mar 23, 2025 12:21:18.139622927 CET2345138802198.98.51.68192.168.2.13
                                    Mar 23, 2025 12:21:18.139686108 CET2345138802198.98.51.68192.168.2.13
                                    Mar 23, 2025 12:21:18.139725924 CET3880223451192.168.2.13198.98.51.68
                                    Mar 23, 2025 12:21:33.233097076 CET2345138802198.98.51.68192.168.2.13
                                    Mar 23, 2025 12:21:33.233160973 CET3880223451192.168.2.13198.98.51.68
                                    Mar 23, 2025 12:21:48.322480917 CET2345138802198.98.51.68192.168.2.13
                                    Mar 23, 2025 12:21:48.322598934 CET3880223451192.168.2.13198.98.51.68
                                    Mar 23, 2025 12:21:48.462568045 CET48202443192.168.2.13185.125.190.26
                                    Mar 23, 2025 12:22:03.411593914 CET2345138802198.98.51.68192.168.2.13
                                    Mar 23, 2025 12:22:03.411689997 CET3880223451192.168.2.13198.98.51.68
                                    Mar 23, 2025 12:22:18.192704916 CET3880223451192.168.2.13198.98.51.68
                                    Mar 23, 2025 12:22:18.284075975 CET2345138802198.98.51.68192.168.2.13
                                    Mar 23, 2025 12:22:18.284359932 CET3880223451192.168.2.13198.98.51.68
                                    Mar 23, 2025 12:22:33.394083023 CET2345138802198.98.51.68192.168.2.13
                                    Mar 23, 2025 12:22:33.394306898 CET3880223451192.168.2.13198.98.51.68
                                    Mar 23, 2025 12:22:48.483764887 CET2345138802198.98.51.68192.168.2.13
                                    Mar 23, 2025 12:22:48.483850002 CET3880223451192.168.2.13198.98.51.68
                                    Mar 23, 2025 12:23:03.573430061 CET2345138802198.98.51.68192.168.2.13
                                    Mar 23, 2025 12:23:03.573735952 CET3880223451192.168.2.13198.98.51.68

                                    System Behavior

                                    Start time (UTC):11:21:06
                                    Start date (UTC):23/03/2025
                                    Path:/tmp/x86.elf
                                    Arguments:/tmp/x86.elf
                                    File size:26404 bytes
                                    MD5 hash:22834e5a7f735f91e6a4287270738076

                                    Start time (UTC):11:21:06
                                    Start date (UTC):23/03/2025
                                    Path:/tmp/x86.elf
                                    Arguments:-
                                    File size:26404 bytes
                                    MD5 hash:22834e5a7f735f91e6a4287270738076

                                    Start time (UTC):11:21:06
                                    Start date (UTC):23/03/2025
                                    Path:/tmp/x86.elf
                                    Arguments:-
                                    File size:26404 bytes
                                    MD5 hash:22834e5a7f735f91e6a4287270738076

                                    Start time (UTC):11:21:06
                                    Start date (UTC):23/03/2025
                                    Path:/tmp/x86.elf
                                    Arguments:-
                                    File size:26404 bytes
                                    MD5 hash:22834e5a7f735f91e6a4287270738076