Analysis
- max time kernel
104s - platform
debian-12_mipsel - resource
debian12-mipsel-20260126-en - resource tags
arch:mipselimage:debian12-mipsel-20260126-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
18/04/2026, 15:38
Behavioral task
behavioral1
Sample
FBI.mpsl.elf
Resource
debian12-mipsel-20260126-en
1 signatures
150 seconds
General
- Target FBI.mpsl.elf
- Size 146KB
- Sample260418-s263facv6r
- SHA256 0bd4303fa4b78eb27323a138b541ffa58b8c8da08d2619ac285f8d49cd538d6c
- MD5 f06aeecef583819de246d8ca938f92e6
- SHA1 00e6861f0408629c82a8f1891e8c1b7291feeb19
- SHA512 79fd815a8f5ada99309b038eb08a8d68ebc87544be0eb59284a9e3f88d92c8e6a12e481c61d750098728b28a6463ffcfa1c339468f3cf85d9672bbd322a56c4a
- SSDEEP 1536:lTKKVHbKBo+0NFgNZhEyv2zJuoaZ8jCSRCt6+5Jx0/Jwq75hsp8nipD:hYhEVzPasCB/e575hsp8ni
- TLSH T187E3D706BF109EB7C81FDD3301F98B0124CCB49725A53B6B3674DA69BA5A58B05E3CE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Changes its process name 4 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself daddyl33t's back 804 FBI.mpsl.elf Changes the process name, possibly in an attempt to hide itself 804 FBI.mpsl.elf Changes the process name, possibly in an attempt to hide itself 808 FBI.mpsl.elf Changes the process name, possibly in an attempt to hide itself 807 FBI.mpsl.elf