Analysis
-
max time kernel
11s -
max time network
16s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240418-en -
resource tags
-
submitted
18-10-2024 20:39
General
-
Target
updates.mpsl
-
Size
94KB
-
MD5
e71c1a5ec391e53bde0d8e9f6d09841d
-
SHA1
e3bee72e4b7de2492fb0298a8e0e6447f8ab898e
-
SHA256
e26ec53db69ea3e7e3fdcce0a174c36ec3631de89937a8f299330ae59fee357a
-
SHA512
11dff47986fbd8afaa0cbe0d1af0eb38c41b6f48296c40301a8552597d07e6ba29918e2f25a24b0048036b51ede08a29e4a5c66a6993cd21b05e85b4ae206867
-
SSDEEP
1536:IIdgIHlIodXYtFrWbM/eNLNnStqZIzAFS4ZZ1hV6I5GPC8:IIdgIHlIo+OLNStqZPF7ZLI68
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder 2 IoCs
-
Changes its process name 1 IoCs
Processes
-
/tmp/updates.mpsl/tmp/updates.mpsl1⤵
- Deletes itself
- Modifies Watchdog functionality
- Writes file to system bin folder
- Changes its process name