General
- Target proxy.mpsl-11
- Size 132KB
- Sample260515-wtak2sdx5t
- SHA256 c7b892679c3ff23d5b7e3c725202f6ff8c2ec13092dc4e36b8e8c395665fe84a
- MD5 4b4e3fa78bf95003dc9ddd6c13a32369
- SHA1 1685211a9e13b51ff696b6fe4beb48ce412ddd43
- SHA512 83c805601d1ffcc2e1b5b2b2df51b5ac88ed31257e2e976dabdc7851a1aff6362ffbbedacc8834b895fc9dfa7830e08af92222395156216e271da2cf61f62460
- SSDEEP 1536:LzES/CeVoQAZOcFr6LfoD07H96BdiPz/IKJ5zeZ+MyW/Ooc/vvi5:q3X4zLQGWdc/vvi
- TLSH T1E3D3632ABB519EBBDC1FCD7302A94501208CA55A52D92F6FF2B4D628E34BC4F48E3D54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
proxy.mpsl-11
Resource
debian12-mipsel-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target proxy.mpsl-11
- Size 132KB
- SHA256 c7b892679c3ff23d5b7e3c725202f6ff8c2ec13092dc4e36b8e8c395665fe84a
- MD5 4b4e3fa78bf95003dc9ddd6c13a32369
- SHA1 1685211a9e13b51ff696b6fe4beb48ce412ddd43
- SHA512 83c805601d1ffcc2e1b5b2b2df51b5ac88ed31257e2e976dabdc7851a1aff6362ffbbedacc8834b895fc9dfa7830e08af92222395156216e271da2cf61f62460
- SSDEEP 1536:LzES/CeVoQAZOcFr6LfoD07H96BdiPz/IKJ5zeZ+MyW/Ooc/vvi5:q3X4zLQGWdc/vvi
- TLSH T1E3D3632ABB519EBBDC1FCD7302A94501208CA55A52D92F6FF2B4D628E34BC4F48E3D54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.