Analysis

  • max time kernel
    138s
  • max time network
    143s
  • platform
    debian-12_mipsel
  • resource
    debian12-mipsel-20240221-en
  • resource tags

    arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
  • submitted
    02-07-2024 05:53

General

  • Target

    qkdjdjj22.mpsl.elf

  • Size

    209KB

  • MD5

    b3d9eab3c7dfe6b12d2b11f082c26a0f

  • SHA1

    6a9ffe8db2cb31000af5d6c39cb8e917cbb9492f

  • SHA256

    3458aa0a053b2d6ece5c81d7b0ab08f4eb8931932df9cc36e08aa0bf82a2690f

  • SHA512

    890f8b5e4b4ef6ece46044be428b2d070ae7121555c98eb30a9188dda4d97ed5731d69bab3525998605b519a7b6a4f49295eeaf25e837b46c1a7d63280d30142

  • SSDEEP

    3072:T4mSFGv/kuidcX1qRdck5hfH3TwpCMtmrpy6n9Nn:pn/ZmbRCk5hfXJMtmrpy6n9Nn

Score
6/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/qkdjdjj22.mpsl.elf
    /tmp/qkdjdjj22.mpsl.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:738

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads