2322a5098627d113e939e6ac7ddb5c80ed5e253a650c6b6e1737baa4617db415 | Triage

Analysis

max time kernel
150s
max time network
154s
platform
debian-9_mipsel
resource
debian9-mipsel-20240226-en
resource tags

arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
16-12-2024 11:08

Sharing

Report Analysis Logs

General

Target

main_mpsl.elf
Size

173KB
MD5

b631ac20f28c030b5ffac9c4daeee7f4
SHA1

32210471f8e75d4abf632028e9c69c8c8bba96f6
SHA256

2322a5098627d113e939e6ac7ddb5c80ed5e253a650c6b6e1737baa4617db415
SHA512

e5329039925e869ecbf11e2f48be3cfcad1a9d3b7c9432523d9f442816f35727bc25669204cb82acd99e3a84acae08a22c65fd42d63c19aa2eac696f48e82d1b
SSDEEP

3072:nKpzGjeNkSfcQqmav8SqaRVlnYz65HVt:nKYjeNYQqmeqavlg65H

Score

7^/10

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
696	main_mpsl.elf

Traces itself 2 IoCs

Traces itself to prevent debugging attempts

pid	Process
696	main_mpsl.elf
697	main_mpsl.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	httpd	696	main_mpsl.elf

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/main_mpsl.elf	main_mpsl.elf

/tmp/main_mpsl.elf
/tmp/main_mpsl.elf
1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory
PID:696

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads