General
- Target nklmpsl.elf
- Size 95KB
- Sample260111-bbmsfabz5a
- SHA256 2d115365628417f4ddcd8d23170d1b24ce6882af1e8ac53afb73ae697cfe7c99
- MD5 a512e4a5250554b3041e4960907d4fa9
- SHA1 1aeafe0722c32e2a85e9031b77a38cc0e4e509bf
- SHA512 6934b4c5bc326a5780d2675d502802d832123375a85ebdeca458f1cf65862df27802fd3b809f20e5afdfc9165cdecb15c05c637d9f3636d09811eba39b1f8663
- SSDEEP 1536:Dh7wKbHulgTyFCH5Y2Mt1uT/bqJp8mkfjVV5fT12FuQfTAbVR3q:DNdHuCEQYDt1uEyBOu0TAS
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
nklmpsl.elf
Resource
debian12-mipsel-20251231-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target nklmpsl.elf
- Size 95KB
- SHA256 2d115365628417f4ddcd8d23170d1b24ce6882af1e8ac53afb73ae697cfe7c99
- MD5 a512e4a5250554b3041e4960907d4fa9
- SHA1 1aeafe0722c32e2a85e9031b77a38cc0e4e509bf
- SHA512 6934b4c5bc326a5780d2675d502802d832123375a85ebdeca458f1cf65862df27802fd3b809f20e5afdfc9165cdecb15c05c637d9f3636d09811eba39b1f8663
- SSDEEP 1536:Dh7wKbHulgTyFCH5Y2Mt1uT/bqJp8mkfjVV5fT12FuQfTAbVR3q:DNdHuCEQYDt1uEyBOu0TAS
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Contacts a large (12711) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Renames itself
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.