General
- Target nklmpsl.elf
- Size 94KB
- Sample251226-wce47ssjfv
- SHA256 155331e78fcbc8fa7e91727c99a8f68fdb95ed88e778fa94d1599b112e7ce000
- MD5 f62485e977d22aa4218609099dc2a837
- SHA1 17a5a4348cb5323ce590ba3115b5f1eef41d79e0
- SHA512 84b4922d4ec0454b302fc58fca1eb012172685273acf5d607c3ff003bc18b7c9756dbc65b5bd83eeaeeb270380ac54130cf5aaf6d973d5f24c40bf4be92b5b83
- SSDEEP 1536:4q/AnVlPNZa4h7NxQpn5je8nAJFxhc8FHBz/s9y1W874ATAbVRR:4XDNk4hgS8nAma7/TA5
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
nklmpsl.elf
Resource
debian12-mipsel-20251223-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target nklmpsl.elf
- Size 94KB
- SHA256 155331e78fcbc8fa7e91727c99a8f68fdb95ed88e778fa94d1599b112e7ce000
- MD5 f62485e977d22aa4218609099dc2a837
- SHA1 17a5a4348cb5323ce590ba3115b5f1eef41d79e0
- SHA512 84b4922d4ec0454b302fc58fca1eb012172685273acf5d607c3ff003bc18b7c9756dbc65b5bd83eeaeeb270380ac54130cf5aaf6d973d5f24c40bf4be92b5b83
- SSDEEP 1536:4q/AnVlPNZa4h7NxQpn5je8nAJFxhc8FHBz/s9y1W874ATAbVRR:4XDNk4hgS8nAma7/TA5
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Contacts a large (19322) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Renames itself