General
- Target nklmpsl.elf
- Size 95KB
- Sample251224-qya5gset3d
- SHA256 57b9b4e623d6cd28588e257c6fb89a7218379ed96e1a6c9eaadeba26fe8a6a22
- MD5 ea35ae3be4f8b4249a617baef502e320
- SHA1 850b1d421fcdca5e66e898ef75c95bacbec0a197
- SHA512 7381d746d62e635b4936e680e1fb9f8a62e71b4ca8d7c2d3a139bb15c69256a540e32d617ebea9b8361d38d33a97ce1f4eb9e9013e98649b9ce17fa9ff6143eb
- SSDEEP 1536:3vgAAsNiNyaf+wg9/sbn53a4LHR1xhc8FM+Y/F7s7R8GRzTAbVRI:3hMNVfd9XmxlGpTA
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
nklmpsl.elf
Resource
debian12-mipsel-20251223-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target nklmpsl.elf
- Size 95KB
- SHA256 57b9b4e623d6cd28588e257c6fb89a7218379ed96e1a6c9eaadeba26fe8a6a22
- MD5 ea35ae3be4f8b4249a617baef502e320
- SHA1 850b1d421fcdca5e66e898ef75c95bacbec0a197
- SHA512 7381d746d62e635b4936e680e1fb9f8a62e71b4ca8d7c2d3a139bb15c69256a540e32d617ebea9b8361d38d33a97ce1f4eb9e9013e98649b9ce17fa9ff6143eb
- SSDEEP 1536:3vgAAsNiNyaf+wg9/sbn53a4LHR1xhc8FM+Y/F7s7R8GRzTAbVRI:3hMNVfd9XmxlGpTA
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Contacts a large (20797) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Renames itself