eb2b1f0c5cea5ce4941fe09a8260b939b102a5aff0ebde32793d061cb32077f2

Analysis

max time kernel
111s
max time network
151s
platform
debian-12_mipsel
resource
debian12-mipsel-20260513-en
resource tags

arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
22/05/2026, 13:59

Target
mpsl.elf
Size 115KB
Sample260522-rajbmac13q
SHA256 eb2b1f0c5cea5ce4941fe09a8260b939b102a5aff0ebde32793d061cb32077f2
MD5 9662135d1f3ee516a7e2a2402358f01a
SHA1 7834e1d6b48bea96f8c2ecdd19e894ed8d29edba
SHA512 0b1fad278e089e2bea4d080b69aea63f209661b7e3bad8e1fbae0ad935947bff5d2b45d2d4b3e11075206537fd5fc7590cf48c51b2c0e1465d94c8075c5f5f4f
SSDEEP 1536:6JA6KkFdUV9OWAN1Ia6RfsIUSgYFSLWrE34/31jxXZqC6Puv6N:6JdlwOWA8BsIUSgYcLWAcxXZ4
TLSH
T167C30906BB510FF7DC6BDC371AF9170525CC691A11EA6F36B534E91CB64B20B2AE3860
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

discovery

Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	r01juk4edt4v	803	mpsl.elf

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact