General
- Target xdf.mpsl
- Size 134KB
- Sample260427-bbvs2saz7y
- SHA256 c308caa00f8eb0824b0def1ce58f5abf9072ff6e6db0d078718146e819f59563
- MD5 3430d28e594b4db854fd4282688bbcb1
- SHA1 65b8abc80c833414639f705c7332c62838f46463
- SHA512 9f8687befaeea06424df9d7427948e7bf2e8c4c7db242561f03f2df86eb89c57a78dee7f9bb2947494eb6cef72a384fcdba08805b61d72bb09e238fcf145e4e1
- SSDEEP 1536:upUpwpUBAZOcFrMkBQrmWVohoAlJy7KrvIA95fXUG4NZdp92V3d:upUpwpUiPS6nIq5vA8V3d
- TLSH T113D3312ABB619FBBDC1ECD7306A94601108CA95A12D92F7FF6B0D518E38BC4E44D3D64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
xdf.mpsl
Resource
debian12-mipsel-20260126-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target xdf.mpsl
- Size 134KB
- SHA256 c308caa00f8eb0824b0def1ce58f5abf9072ff6e6db0d078718146e819f59563
- MD5 3430d28e594b4db854fd4282688bbcb1
- SHA1 65b8abc80c833414639f705c7332c62838f46463
- SHA512 9f8687befaeea06424df9d7427948e7bf2e8c4c7db242561f03f2df86eb89c57a78dee7f9bb2947494eb6cef72a384fcdba08805b61d72bb09e238fcf145e4e1
- SSDEEP 1536:upUpwpUBAZOcFrMkBQrmWVohoAlJy7KrvIA95fXUG4NZdp92V3d:upUpwpUiPS6nIq5vA8V3d
- TLSH T113D3312ABB619FBBDC1ECD7306A94601108CA95A12D92F7FF6B0D518E38BC4E44D3D64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.