Overview

overview

10

Static

static

10

zmap.mpsl.elf

debian-12-mipsel

7

Analysis

  • max time kernel
    131s
  • max time network
    152s
  • platform
    debian-12_mipsel
  • resource
    debian12-mipsel-20240221-en
  • resource tags

    arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
  • submitted
    01-11-2024 14:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    zmap.mpsl.elf

  • Size

    94KB

  • MD5

    c8c252000819ff17743d4ec978a7f520

  • SHA1

    dbb5106eb8dec1123d860b48b14d3d75320a9f8e

  • SHA256

    e699f761120144c9eb49cfcfff7f3154a70c91137512e4d686d4cb3dac6c9338

  • SHA512

    adf22bf51cabf9d769034d222593752defe0ea73fc69aee92161e96dc0aa1a731ff0ff96d6b618e1eb1b7f6967cdf691b237590f9a46dd90d08b7764b922edb9

  • SSDEEP

    1536:IIdgIHlIodXYtZyeLM/eNLNnCt2ZIzAFy4JZ1BV6I5W/C/:IIdgIHlIoSfLNCt2ZPFbJrYK/

Score
7/10
defense_evasion

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  • Writes file to system bin folder 2 IoCs
  • Changes its process name 1 IoCs

Processes

  • /tmp/zmap.mpsl.elf
    /tmp/zmap.mpsl.elf
    1⤵
    • Deletes itself
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    • Changes its process name
    PID:740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads