General
-
Target
mpsl.elf
-
Size
95KB
-
Sample
241220-sy7jsszjbl
-
MD5
2b671c0e7ee1068632e6d2ff298c7486
-
SHA1
dc3d668edbe45dedc44460ec4878c0025063de01
-
SHA256
b1afe19d92ceafc19868ceaaff7ca91d415f7e02106e127a21e0944e2ebf9f24
-
SHA512
d8e546396aebd33072b47fb5a0608c30ceae15524fb48f03deec2325e881959dd724d6deda9eb363ffc8484bbad6dd0335dd2f0b1f75ac54838e752d12a15843
-
SSDEEP
1536:69gBeHbiMX4cHa0aZL/TsUAd/7MnneIOAPZ6y1Dib9pJkq5ODXuzALzZ:69gBqtXpHgCzMnneI3P012XuzA5
Behavioral task
behavioral1
Sample
mpsl.elf
Resource
debian12-mipsel-20240729-en
Malware Config
Extracted
mirai
BOTNET
Targets
-
-
Target
mpsl.elf
-
Size
95KB
-
MD5
2b671c0e7ee1068632e6d2ff298c7486
-
SHA1
dc3d668edbe45dedc44460ec4878c0025063de01
-
SHA256
b1afe19d92ceafc19868ceaaff7ca91d415f7e02106e127a21e0944e2ebf9f24
-
SHA512
d8e546396aebd33072b47fb5a0608c30ceae15524fb48f03deec2325e881959dd724d6deda9eb363ffc8484bbad6dd0335dd2f0b1f75ac54838e752d12a15843
-
SSDEEP
1536:69gBeHbiMX4cHa0aZL/TsUAd/7MnneIOAPZ6y1Dib9pJkq5ODXuzALzZ:69gBqtXpHgCzMnneI3P012XuzA5
Score9/10-
Contacts a large (226284) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-