Analysis
- max time kernel
121s - max time network
156s - platform
debian-12_mipsel - resource
debian12-mipsel-20260127-en - resource tags
- submitted
20/02/2026, 16:18
General
- Target MMaaRRiiOisecTanee.mpsl.elf
- Size 114KB
- Sample260220-tscb5se16f
- SHA256 595cfd5764327df01acf613043b1d8453264d21fe3571747157a30ac88544142
Score
9/10
Malware Config
Signatures
- Contacts a large (61195) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
- Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
- Reads process memory 1 TTPs 20 IoCs
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.
- Changes its process name 1 IoCs
Processes
-
/tmp/MMaaRRiiOisecTanee.mpsl.elf/tmp/MMaaRRiiOisecTanee.mpsl.elf1⤵
- Modifies Watchdog functionality
- Reads process memory
- Changes its process name