Overview

overview

10

Static

static

10

zmap.mpsl.elf

debian-12-mipsel

7

Analysis

  • max time kernel
    131s
  • max time network
    153s
  • platform
    debian-12_mipsel
  • resource
    debian12-mipsel-20240418-en
  • resource tags

    arch:mipselimage:debian12-mipsel-20240418-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
  • submitted
    13/12/2024, 09:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    zmap.mpsl.elf

  • Size

    94KB

  • MD5

    6dd88d3cb7fd5c97613e45ebc74c179a

  • SHA1

    142e4ffc1514defb6570b1ace6873150b8b1b49f

  • SHA256

    465331679afc39cc65da28a8dbfeaacca7f260c7420116f37edd98df7ab03880

  • SHA512

    471384785e5bd904d99b503ed0bf1171584f51a5bb5155b72728627a5d1fce71722ef99743f0b31ea1f0a308ade8ff5f07a40cec042aeccfc6334831eb01d230

  • SSDEEP

    1536:IIdgIHlIodXYtZ7eLM/eNLNnCt2ZIzAFy4JZ1BV6I5W/CD:IIdgIHlIoSmLNCt2ZPFbJrYKD

Score
7/10
defense_evasion

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  • Writes file to system bin folder 2 IoCs
  • Changes its process name 1 IoCs

Processes

  • /tmp/zmap.mpsl.elf
    /tmp/zmap.mpsl.elf
    1⤵
    • Deletes itself
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    • Changes its process name
    PID:737

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads