98a5aec9bfc45f769b18920794981b56890bb54dd1230f7861a85e1c86d7733d | Triage

Analysis

max time kernel
131s
max time network
142s
platform
debian-12_mipsel
resource
debian12-mipsel-20240221-en
resource tags

arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
19-12-2024 07:05

Sharing

Report Analysis Logs

General

Target

Aqua.mpsl.elf
Size

186KB
MD5

f2816037111d75902f0c00e2a9473e52
SHA1

5e21632ba18116dc01c1df67354d6a32fe170b2b
SHA256

98a5aec9bfc45f769b18920794981b56890bb54dd1230f7861a85e1c86d7733d
SHA512

8f8316bbd47607a6191a3d2b2e92f24044629b91b928b1db6b8971986f975ba708b18e630c7aa071f3dcf88246ff90356010eed1325ceed4b019b425806caedf
SSDEEP

3072:dTI8qXsMqmU67Hm5KwIyGXGlQ1+S+4NdgT94I:dTXqsMqmU/5lzGXUVw/Y94

Score

7^/10

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
745	Aqua.mpsl.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	httpd	744	Aqua.mpsl.elf

/tmp/Aqua.mpsl.elf
/tmp/Aqua.mpsl.elf
1⤵
- Deletes itself
- Changes its process name
PID:744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads