8f3e60627135f64e8876d5fc85b4c8664799a584ad6533458cc45fa8ace58a8b | Triage

Analysis

max time kernel
150s
max time network
152s
platform
debian-9_mipsel
resource
debian9-mipsel-20240611-en
resource tags

arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
03-02-2025 10:39

Sharing

Report Analysis Logs

General

Target

main_mpsl.elf
Size

173KB
MD5

4ebc3a0e3eef23e936a9802e79c3a84e
SHA1

f7b5cddff9084a64e4c60148208ed89669dee93b
SHA256

8f3e60627135f64e8876d5fc85b4c8664799a584ad6533458cc45fa8ace58a8b
SHA512

f7f693d676037c3f68fa99d6a9ed4b64b083cb78e93f2cd2ff3b3266dcaaf6f334e4251c7e2d4ddce7addfeb28ab7aa45b18340fce7055eaf4b68524660c17ad
SSDEEP

3072:nKpzGjeNkSfcQqmav8SqaRVlnYz65gVt:nKYjeNYQqmeqavlg65g

Score

7^/10

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
711	main_mpsl.elf

Traces itself 2 IoCs

Traces itself to prevent debugging attempts

pid	Process
711	main_mpsl.elf
712	main_mpsl.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	httpd	711	main_mpsl.elf

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/main_mpsl.elf	main_mpsl.elf

/tmp/main_mpsl.elf
/tmp/main_mpsl.elf
1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory
PID:711

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads