8ad68a6dd76f0ca58d1651343916807370fabc294394c12cb4209d5cdb7dc259

Analysis

max time kernel
5s
platform
debian-9_mipsel
resource
debian9-mipsel-20240418-en
resource tags

arch:mipselimage:debian9-mipsel-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
27-12-2024 05:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

RpcSecurity.mpsl.elf
Size

75KB
MD5

909e68d7f9baf5b2c79023ca027aa132
SHA1

1a17caa726700e04242251f101298bf209c54c18
SHA256

8ad68a6dd76f0ca58d1651343916807370fabc294394c12cb4209d5cdb7dc259
SHA512

31c1925c839304e1336d1b09a0e30734ff6bb2d476ae6174eebfebce5664ff8944e2acd986b57b2e0045ba6a1f760d7003cb3920fdf3746789df321423f7579e
SSDEEP

1536:7J5dbFB4x92nKoIHa98M26ofWU+UZ9CYXzdJa10o:7J5dxBu9uKoqIUXd4f

Score

6^/10

discovery

Malware Config

Signatures

Enumerates active TCP sockets 1 TTPs 1 IoCs

Gets active TCP sockets from /proc virtual filesystem.

discovery

System Network Connections Discovery

T1049

description	ioc	Process
File opened for reading	/proc/net/tcp	RpcSecurity.mpsl.elf

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/tcp	RpcSecurity.mpsl.elf

/tmp/RpcSecurity.mpsl.elf
/tmp/RpcSecurity.mpsl.elf
1⤵
- Enumerates active TCP sockets
- Reads system network configuration
PID:718

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Network Connections Discovery

T1049

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads