Overview

overview

10

Static

static

10

zmap.mpsl.elf

debian-9-mipsel

7

Analysis

  • max time kernel
    131s
  • max time network
    147s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240418-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    04-12-2024 18:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    zmap.mpsl.elf

  • Size

    94KB

  • MD5

    482e02948e1ffe2801130ef940e42d5e

  • SHA1

    fb0e76214b94cb12cbe77d0913bf6ad8e5ba9bad

  • SHA256

    627cac76f72a097364bd8830cfa8524f32f8c2538571328af1b48d6c345998fa

  • SHA512

    ea647a0c86812b05a8a376cfb1184a8982d56ad67cbe6c3eaa685bc30becce0705a552a4ab34b643f4f8f0b3095bc67b2b0a99fbff1a3f2b7b1351a224b4d8d6

  • SSDEEP

    1536:IIdgIHlIodXYtfv+rM/eNLNnStqZIzAFS4ZZ1hV6I5GPCI:IIdgIHlIowiLNStqZPF7ZLI6I

Score
7/10
defense_evasion

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  • Writes file to system bin folder 2 IoCs
  • Changes its process name 1 IoCs

Processes

  • /tmp/zmap.mpsl.elf
    /tmp/zmap.mpsl.elf
    1⤵
    • Deletes itself
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    • Changes its process name
    PID:718

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads