General
- Target splmpsl.elf
- Size 113KB
- Sample260124-3f585aav2h
- SHA256 0a143da09cbc0c3d2e4e2291508cb044e2f9e9573074cd4ac78984ab55f396d6
- MD5 7ea52d74c4d493b6a2b73991d1b298aa
- SHA1 29edff18ba597a0560d1db0da0366312c0d9a01b
- SHA512 9cbb3e85174d14e1dff0f6db2c10a95c5fb779110db2d095c4bb1aef54d53cc940d94543b0b0e428d70bd6ca82d1f20240df5a9236f0b2b649b5788ba596c1c2
- SSDEEP 1536:ZzhQssWFuEgG35/qmo8h6Vq36n0UpqBYCxJbxc81uhuFO/vylPuZfqFX39wu7r8D:ZtR7h6B2PAz7ik4NsBkbkI/6CzX
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
splmpsl.elf
Resource
debian12-mipsel-20251231-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target splmpsl.elf
- Size 113KB
- SHA256 0a143da09cbc0c3d2e4e2291508cb044e2f9e9573074cd4ac78984ab55f396d6
- MD5 7ea52d74c4d493b6a2b73991d1b298aa
- SHA1 29edff18ba597a0560d1db0da0366312c0d9a01b
- SHA512 9cbb3e85174d14e1dff0f6db2c10a95c5fb779110db2d095c4bb1aef54d53cc940d94543b0b0e428d70bd6ca82d1f20240df5a9236f0b2b649b5788ba596c1c2
- SSDEEP 1536:ZzhQssWFuEgG35/qmo8h6Vq36n0UpqBYCxJbxc81uhuFO/vylPuZfqFX39wu7r8D:ZtR7h6B2PAz7ik4NsBkbkI/6CzX
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Contacts a large (54073) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system