Analysis
-
max time kernel
151s -
max time network
156s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240418-en -
resource tags
arch:mipselimage:debian12-mipsel-20240418-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
13-12-2024 09:19
Behavioral task
behavioral1
Sample
mpsl.elf
Resource
debian12-mipsel-20240418-en
debian-12-mipsel
3 signatures
150 seconds
General
-
Target
mpsl.elf
-
Size
177KB
-
MD5
6b771c522f86b31da3032b7922d493a7
-
SHA1
0cc28ec6344f825f73bc4ae52fac381f00b7df45
-
SHA256
16e848fd462a4050ecd970cf8be0cbb483d48c776dc641bf004fbf821e246a95
-
SHA512
1e3f0c11327fe3c1481effe19753018096e7e2a6accf1e42868f3ef8e86322455fe2ed74ffcc5364e19075491dec1da9bd565f09a41ab1b5ab3f667169c2f13f
-
SSDEEP
3072:swoe3sJlZd9nQiX/Wp+Q8x5pKNm2dW/5y:snSs/ZTQiX/m+bx2YSWB
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M"! 731 mpsl.elf -
description ioc Process File opened for reading /proc/770/cmdline mpsl.elf File opened for reading /proc/21/cmdline mpsl.elf File opened for reading /proc/444/cmdline mpsl.elf File opened for reading /proc/728/cmdline mpsl.elf File opened for reading /proc/180/cmdline mpsl.elf File opened for reading /proc/202/cmdline mpsl.elf File opened for reading /proc/736/cmdline mpsl.elf File opened for reading /proc/4/cmdline mpsl.elf File opened for reading /proc/9/cmdline mpsl.elf File opened for reading /proc/11/cmdline mpsl.elf File opened for reading /proc/735/cmdline mpsl.elf File opened for reading /proc/47/cmdline mpsl.elf File opened for reading /proc/114/cmdline mpsl.elf File opened for reading /proc/765/cmdline mpsl.elf File opened for reading /proc/733/cmdline mpsl.elf File opened for reading /proc/740/cmdline mpsl.elf File opened for reading /proc/775/cmdline mpsl.elf File opened for reading /proc/786/cmdline mpsl.elf File opened for reading /proc/15/cmdline mpsl.elf File opened for reading /proc/710/cmdline mpsl.elf File opened for reading /proc/724/cmdline mpsl.elf File opened for reading /proc/37/cmdline mpsl.elf File opened for reading /proc/747/cmdline mpsl.elf File opened for reading /proc/748/cmdline mpsl.elf File opened for reading /proc/716/cmdline mpsl.elf File opened for reading /proc/1/cmdline mpsl.elf File opened for reading /proc/5/cmdline mpsl.elf File opened for reading /proc/27/cmdline mpsl.elf File opened for reading /proc/756/cmdline mpsl.elf File opened for reading /proc/773/cmdline mpsl.elf File opened for reading /proc/17/cmdline mpsl.elf File opened for reading /proc/115/cmdline mpsl.elf File opened for reading /proc/394/cmdline mpsl.elf File opened for reading /proc/7/cmdline mpsl.elf File opened for reading /proc/59/cmdline mpsl.elf File opened for reading /proc/750/cmdline mpsl.elf File opened for reading /proc/785/cmdline mpsl.elf File opened for reading /proc/113/cmdline mpsl.elf File opened for reading /proc/449/cmdline mpsl.elf File opened for reading /proc/737/cmdline mpsl.elf File opened for reading /proc/698/cmdline mpsl.elf File opened for reading /proc/10/cmdline mpsl.elf File opened for reading /proc/32/cmdline mpsl.elf File opened for reading /proc/337/cmdline mpsl.elf File opened for reading /proc/776/cmdline mpsl.elf File opened for reading /proc/697/cmdline mpsl.elf File opened for reading /proc/764/cmdline mpsl.elf File opened for reading /proc/774/cmdline mpsl.elf File opened for reading /proc/26/cmdline mpsl.elf File opened for reading /proc/757/cmdline mpsl.elf File opened for reading /proc/771/cmdline mpsl.elf File opened for reading /proc/29/cmdline mpsl.elf File opened for reading /proc/713/cmdline mpsl.elf File opened for reading /proc/718/cmdline mpsl.elf File opened for reading /proc/3/cmdline mpsl.elf File opened for reading /proc/6/cmdline mpsl.elf File opened for reading /proc/767/cmdline mpsl.elf File opened for reading /proc/18/cmdline mpsl.elf File opened for reading /proc/48/cmdline mpsl.elf File opened for reading /proc/749/cmdline mpsl.elf File opened for reading /proc/2/cmdline mpsl.elf File opened for reading /proc/726/cmdline mpsl.elf File opened for reading /proc/136/cmdline mpsl.elf File opened for reading /proc/308/cmdline mpsl.elf