c7d3f9322b1df4367a776ed5450fe89b64e3fa03fb737c63660fb9a3771e0515 | Triage

Analysis

max time kernel
95s
max time network
151s
platform
debian-12_mipsel
resource
debian12-mipsel-20240221-en
resource tags

arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
29-12-2024 23:00

Sharing

Report Analysis Logs

General

Target

main_mpsl.elf
Size

173KB
MD5

c029e40e274644b7a5e12cbedf829d64
SHA1

df3b3dbe1214d8d77eb7b3cb71033f0e945c1c6c
SHA256

c7d3f9322b1df4367a776ed5450fe89b64e3fa03fb737c63660fb9a3771e0515
SHA512

c79fb4eafb0f91b698f28d8fd47c0cf7e44bc06db26d75dc7227d9c5a6723efcbe71f44de4afbfdb9f3af5bd0460ae491b55a3f02e712ba413a670a85f316caf
SSDEEP

3072:nKpzGZeNkSfcQqmav8SqaRVlnYz65G1t:nKYZeNYQqmeqavlg65G

Score

7^/10

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
752	main_mpsl.elf

Traces itself 2 IoCs

Traces itself to prevent debugging attempts

pid	Process
752	main_mpsl.elf
754	main_mpsl.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	httpd	752	main_mpsl.elf

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/main_mpsl.elf	main_mpsl.elf

/tmp/main_mpsl.elf
/tmp/main_mpsl.elf
1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory
PID:752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads