Overview

overview

10

Static

static

10

zmap.mpsl.elf

debian-12-mipsel

7

Analysis

  • max time kernel
    131s
  • max time network
    150s
  • platform
    debian-12_mipsel
  • resource
    debian12-mipsel-20240729-en
  • resource tags

    arch:mipselimage:debian12-mipsel-20240729-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
  • submitted
    24-12-2024 12:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    zmap.mpsl.elf

  • Size

    94KB

  • MD5

    d010584192558f35b9040b3988bf06f6

  • SHA1

    dd775eb5278ba339c6841a9e799db51ed8249b46

  • SHA256

    d1d6085d2980e7615265e79b178af02c5230a34267c740f5ad25810868dafaa8

  • SHA512

    783f3b2c0cf2930c16a2a5c3f22f9ce43321dc3b2ea57eb6828bc65169b01ebd493fd4997aaba0f2f414aa328d7371d63620eeb65067b85fd500d17635d2ea90

  • SSDEEP

    1536:IIdgIHlIodXYtWXeLM/eNLNnCt2ZIzAFy4JZ1BV6I5W/C1:IIdgIHlIopKLNCt2ZPFbJrYK1

Score
7/10
defense_evasion

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  • Writes file to system bin folder 2 IoCs
  • Changes its process name 1 IoCs

Processes

  • /tmp/zmap.mpsl.elf
    /tmp/zmap.mpsl.elf
    1⤵
    • Deletes itself
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    • Changes its process name
    PID:745

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads