7bb22d623a88fe966041c3ce885300ff6670bc1522a488c99f7d37979da70af2 | Triage

Analysis

max time kernel
150s
max time network
154s
platform
debian-9_mipsel
resource
debian9-mipsel-20240226-en
resource tags

arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
08/03/2025, 10:27

Sharing

Report Analysis Logs

General

Target

main_mpsl.elf
Size

173KB
MD5

308702394c207b5cfb5c5358a5ae4d5c
SHA1

039257b6cc0d621f79f80dc5d0fe57223618c594
SHA256

7bb22d623a88fe966041c3ce885300ff6670bc1522a488c99f7d37979da70af2
SHA512

27a5d63bc12c4702fedbe8ee75289a0595df481d7ffce1a4720a4244cb850fdad0baa891099fcd2ec8d50cd6356fe12976d1debc05b310a41f5ca3e13609150d
SSDEEP

3072:nKpzGZeNkSfcQqmav8SqaRVlnYz6521t:nKYZeNYQqmeqavlg652

Score

7^/10

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
696	main_mpsl.elf

Traces itself 2 IoCs

Traces itself to prevent debugging attempts

pid	Process
696	main_mpsl.elf
697	main_mpsl.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	httpd	696	main_mpsl.elf

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/main_mpsl.elf	main_mpsl.elf

/tmp/main_mpsl.elf
/tmp/main_mpsl.elf
1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory
PID:696

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads