87a2b4531d167cd8c30fc9d0b1a7d0bb8a670831c25f94994abb02bf6bf0ed1c | Triage

Analysis

max time kernel
151s
max time network
155s
platform
debian-12_mipsel
resource
debian12-mipsel-20240221-en
resource tags

arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
16-12-2024 09:24

Sharing

Report Analysis Logs

General

Target

main_mpsl.elf
Size

173KB
MD5

3203c9e258d0a245d5064e75cc8f644d
SHA1

78483e6d26851f1b00c0ba4427ab086e1279ff3e
SHA256

87a2b4531d167cd8c30fc9d0b1a7d0bb8a670831c25f94994abb02bf6bf0ed1c
SHA512

8c9570f743aa9319ce77117b0c0f39de78a4e64e37a38e43f0e638894658c8e6369a91f20e7d9a71d2322b99caccdefd70921cce82de2c4c32fc9c3246e5c763
SSDEEP

3072:nKpzGteNkSfcQqmav8SqaRVlnYz65nVt:nKYteNYQqmeqavlg65n

Score

7^/10

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
741	main_mpsl.elf

Traces itself 2 IoCs

Traces itself to prevent debugging attempts

pid	Process
741	main_mpsl.elf
743	main_mpsl.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	httpd	741	main_mpsl.elf

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/main_mpsl.elf	main_mpsl.elf

/tmp/main_mpsl.elf
/tmp/main_mpsl.elf
1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory
PID:741

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads