General
- Target nabmpsl.elf
- Size 70KB
- Sample260125-wpyr3sds5a
- SHA256 f4d4b5ea6d6a1c3b8af364911ab30ff4a93df7fb58e826d0d307f99d222e36e8
- MD5 96e2ab2c336c45bd2d8cc41b1e09f20e
- SHA1 de8207151a8a5ab8537130410c947ee5741b7f8e
- SHA512 8f4e7a21ea4fa58f08f0caf9f7e4cf31cc918b63514fa67982c8fd9e886a7527b0de6581f00f468d2f0aaa2dbfc7fa7208f548d561bfd787934db4ee48422ae2
- SSDEEP 1536:n3nALqyzg5ak3DPJjjA+kge87oepZCvt5aZkR4pVAX:n3A2yzIak3DPpoepXD+X
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
nabmpsl.elf
Resource
debian12-mipsel-20251231-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target nabmpsl.elf
- Size 70KB
- SHA256 f4d4b5ea6d6a1c3b8af364911ab30ff4a93df7fb58e826d0d307f99d222e36e8
- MD5 96e2ab2c336c45bd2d8cc41b1e09f20e
- SHA1 de8207151a8a5ab8537130410c947ee5741b7f8e
- SHA512 8f4e7a21ea4fa58f08f0caf9f7e4cf31cc918b63514fa67982c8fd9e886a7527b0de6581f00f468d2f0aaa2dbfc7fa7208f548d561bfd787934db4ee48422ae2
- SSDEEP 1536:n3nALqyzg5ak3DPJjjA+kge87oepZCvt5aZkR4pVAX:n3A2yzIak3DPpoepXD+X
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Contacts a large (14348) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Deletes itself
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Enumerates running processes
Discovers information about currently running processes on the system