General
- Target mpsl-20250504-1647.elf
- Size 87KB
- Sample250504-vbqc4shr7w
- SHA256 ab985c73944e06a8ba80dc25fb6a79c9ed0c32ad8564493e96927c8ada2d0275
- MD5 51b6e07e7b3ce7eecf9be4bf09e9eed5
- SHA1 8e0467c0e0d0081a66984d10f1c220caa7e5b25b
- SHA512 0d9fe62e37c5a8e12e980c4cfaff20a99fe5cd4b6d815cd58bd35da970a8a5dba5f65be774eccf6ef35a190221ee8f44477dad3ad4ce1563d4b7743b4824fa53
- SSDEEP 1536:8O7tFyZ8aR0ayOWCiDZv9blJoe2mo2xZsOZtsV96mjd:/7tFyeaR0aq1bToe5xYV5jd
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
mpsl-20250504-1647.elf
Resource
debian12-mipsel-20250410-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
nnbotnet.duckdns.org
Targets
-
- Target mpsl-20250504-1647.elf
- Size 87KB
- SHA256 ab985c73944e06a8ba80dc25fb6a79c9ed0c32ad8564493e96927c8ada2d0275
- MD5 51b6e07e7b3ce7eecf9be4bf09e9eed5
- SHA1 8e0467c0e0d0081a66984d10f1c220caa7e5b25b
- SHA512 0d9fe62e37c5a8e12e980c4cfaff20a99fe5cd4b6d815cd58bd35da970a8a5dba5f65be774eccf6ef35a190221ee8f44477dad3ad4ce1563d4b7743b4824fa53
- SSDEEP 1536:8O7tFyZ8aR0ayOWCiDZv9blJoe2mo2xZsOZtsV96mjd:/7tFyeaR0aq1bToe5xYV5jd
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Traces itself
Traces itself to prevent debugging attempts
-
Writes file to system bin folder