Analysis
- max time kernel
150s - max time network
143s - platform
debian-12_mipsel - resource
debian12-mipsel-20260126-en - resource tags
arch:mipselimage:debian12-mipsel-20260126-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
24/04/2026, 10:02
Behavioral task
behavioral1
Sample
main_mpsl.elf
Resource
debian12-mipsel-20260126-en
4 signatures
150 seconds
General
- Target main_mpsl.elf
- Size 173KB
- Sample260424-l2q8naew21
- SHA256 1f034da4196be6b6bf55b26af1be078dcf649b508b02d959796f16426ccfb7dd
- MD5 0cc43b82287ef80e6d8f640382915b94
- SHA1 812e3951ff7134339aab48d31e6694c12f3d2afb
- SHA512 0705a7cc2d73cd7e05ac952b6ffcbe719eeb18285c2368d30428c82076ec7aa7119a1c09d5dca2b80c4153e54b1d9e36d1458f0ba7e0510de96a3e650f4e4fa3
- SSDEEP 1536:HwdqBezGeDBxeXJvkgBZOofcQq6K7yKshdUNmBvLZvU1SaZ6y985gkgXw5jxgK2e:HKpzG4e9kSfcQqW9v8SawFgXojl5vFt
- TLSH T1EC04B719AB510FBBDCAFDD3702E90B0139CC955B22A93B363674D528F54E50B4AE3C68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 802 main_mpsl.elf - Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 802 main_mpsl.elf 803 main_mpsl.elf - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 802 main_mpsl.elf - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/main_mpsl.elf main_mpsl.elf