Analysis
- max time kernel
135s - max time network
158s - platform
debian-12_mipsel - resource
debian12-mipsel-20260127-en - resource tags
- submitted
05/05/2026, 12:23
General
- Target jew.mpsl
- Size 82KB
- Sample260505-pkg57sbx4n
- SHA256 06c3b54fbe5454c8db506947a902a6b9424a446650c1d13d319a4e970ab755b2
Score
9/10
Malware Config
Signatures
- Contacts a large (112917) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
- Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
- Writes file to system bin folder 2 IoCs
- Changes its process name 1 IoCs
Processes
-
/tmp/jew.mpsl/tmp/jew.mpsl1⤵
- Modifies Watchdog functionality
- Writes file to system bin folder
- Changes its process name