Overview

overview

10

Static

static

10

zmap.mpsl.elf

debian-9-mipsel

7

Analysis

  • max time kernel
    130s
  • max time network
    147s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240418-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    13-12-2024 09:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    zmap.mpsl.elf

  • Size

    94KB

  • MD5

    6dd88d3cb7fd5c97613e45ebc74c179a

  • SHA1

    142e4ffc1514defb6570b1ace6873150b8b1b49f

  • SHA256

    465331679afc39cc65da28a8dbfeaacca7f260c7420116f37edd98df7ab03880

  • SHA512

    471384785e5bd904d99b503ed0bf1171584f51a5bb5155b72728627a5d1fce71722ef99743f0b31ea1f0a308ade8ff5f07a40cec042aeccfc6334831eb01d230

  • SSDEEP

    1536:IIdgIHlIodXYtZ7eLM/eNLNnCt2ZIzAFy4JZ1BV6I5W/CD:IIdgIHlIoSmLNCt2ZPFbJrYKD

Score
7/10
defense_evasion

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  • Writes file to system bin folder 2 IoCs
  • Changes its process name 1 IoCs

Processes

  • /tmp/zmap.mpsl.elf
    /tmp/zmap.mpsl.elf
    1⤵
    • Deletes itself
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    • Changes its process name
    PID:705

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads