98a5aec9bfc45f769b18920794981b56890bb54dd1230f7861a85e1c86d7733d | Triage

Analysis

max time kernel
134s
max time network
151s
platform
debian-9_mipsel
resource
debian9-mipsel-20240611-en
resource tags

arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
19-12-2024 07:12

Sharing

Report Analysis Logs

General

Target

Aqua.mpsl.elf
Size

186KB
MD5

f2816037111d75902f0c00e2a9473e52
SHA1

5e21632ba18116dc01c1df67354d6a32fe170b2b
SHA256

98a5aec9bfc45f769b18920794981b56890bb54dd1230f7861a85e1c86d7733d
SHA512

8f8316bbd47607a6191a3d2b2e92f24044629b91b928b1db6b8971986f975ba708b18e630c7aa071f3dcf88246ff90356010eed1325ceed4b019b425806caedf
SSDEEP

3072:dTI8qXsMqmU67Hm5KwIyGXGlQ1+S+4NdgT94I:dTXqsMqmU/5lzGXUVw/Y94

Score

7^/10

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
705	Aqua.mpsl.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	httpd	704	Aqua.mpsl.elf

/tmp/Aqua.mpsl.elf
/tmp/Aqua.mpsl.elf
1⤵
- Deletes itself
- Changes its process name
PID:704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads