Analysis
- max time kernel
149s - max time network
154s - platform
debian-12_mipsel - resource
debian12-mipsel-20250619-en - resource tags
arch:mipselimage:debian12-mipsel-20250619-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
11/05/2026, 12:12
Behavioral task
behavioral1
Sample
micro.mpsl.elf
Resource
debian12-mipsel-20250619-en
2 signatures
150 seconds
General
- Target micro.mpsl.elf
- Size 177KB
- Sample260511-pdfzkahs7v
- SHA256 d94b95f5d745a20c25bd3be5db54d3b0a33df0d4b956163b9fdafda94227fe05
- MD5 af5a64f8d40e71e6399dfe5adfdf4a14
- SHA1 9870f3b01f12060ac7d770b05c45f7b889d3e1e6
- SHA512 8c4b1e46940dd748dba1b7e6e3ae335821c53c7a32da1b570c12bd0cb7669edb384c7c876161b684c54e982fb7405d0563772fb2fe473fcae49395425c8382fd
- SSDEEP 1536:tQLwc7U+leabUjvo3T73G1PLdPCHPW/C1Qkh4dOoxahQadIfcIViZ02xtn7cp:tQsiU+l1gjvi6ZUGdOb2aQcRr77q
- TLSH T14304C60ABB610FBBDCAFCE3706A90B0139CC541722A53B757674D528F54E60B5AE3C68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/misc/watchdog micro.mpsl.elf File opened for modification /dev/watchdog micro.mpsl.elf - Writes file to system bin folder 2 IoCs
description ioc Process File opened for modification /sbin/watchdog micro.mpsl.elf File opened for modification /bin/watchdog micro.mpsl.elf