317e25e1e735235fcc4b7ece5d8584916e82c1cf84027142d0e623b9bf5474d3 | Triage

Analysis

max time kernel
152s
max time network
164s
platform
debian-12_mipsel
resource
debian12-mipsel-20240221-en
resource tags

arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
11-12-2024 00:46

Sharing

Report Analysis Logs

General

Target

main_mpsl.elf
Size

173KB
MD5

c9e235d769811d070c6a2d2e3965b79c
SHA1

0808da6ba59e571593c6e8f92260d568a0a21367
SHA256

317e25e1e735235fcc4b7ece5d8584916e82c1cf84027142d0e623b9bf5474d3
SHA512

7f0b3c6f131d7ece6b8e18ff9078fb66dcedcba26650d2781ecfa871dc0c4f7b6ca778b96b9aa3c63e54ddd753a984f93ff6b53410fe8287772001e8af2e7982
SSDEEP

3072:nKpzGZeNkSfcQqmav8SqaRVlnYz65n1t:nKYZeNYQqmeqavlg65n

Score

7^/10

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
741	main_mpsl.elf

Traces itself 2 IoCs

Traces itself to prevent debugging attempts

pid	Process
741	main_mpsl.elf
743	main_mpsl.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	httpd	741	main_mpsl.elf

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/main_mpsl.elf	main_mpsl.elf

/tmp/main_mpsl.elf
/tmp/main_mpsl.elf
1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory
PID:741

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads