Overview

overview

10

Static

static

10

zmap.mpsl.elf

debian-9-mipsel

7

Analysis

  • max time kernel
    130s
  • max time network
    148s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240418-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    02-11-2024 12:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    zmap.mpsl.elf

  • Size

    94KB

  • MD5

    b4458e4fa2efcf88bfa2aaeda864519e

  • SHA1

    8263798736379ed4ce23ef75e4d1f606e05c815b

  • SHA256

    146ef07d918f77546ba8112e9f307361f9d54af4886dba7fc4ba9e58bc8c5d47

  • SHA512

    4aa6068f6e3ed09c6706c37f046cd4081a5c7de3e307860e67ff9fff426a281f33dbb027bbcb36b0fd9df6dccd083308d78f43948009ccdcc3676ed4ff063010

  • SSDEEP

    1536:IIdgIHlIodXYtj7eLM/eNLNnCt2ZIzAFy4JZ1BV6I5W/CQ:IIdgIHlIo4mLNCt2ZPFbJrYKQ

Score
7/10
defense_evasion

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  • Writes file to system bin folder 2 IoCs
  • Changes its process name 1 IoCs

Processes

  • /tmp/zmap.mpsl.elf
    /tmp/zmap.mpsl.elf
    1⤵
    • Deletes itself
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    • Changes its process name
    PID:719

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads