General
- Target mpsl.elf
- Size 113KB
- Sample260602-hasevsfs8x
- SHA256 56229a6050f43fd51c2a1b82dc823f4dc3ef417fe9984e90dd7ee3cb2fcd0085
- MD5 9b632d8d81d48801ddaf09ef7e62500e
- SHA1 435d6fe86c095f72fe7797096c6e5fb9ef6bc5c8
- SHA512 4fd56191c39104fe7096f03e7ac2d0e3693c1feae3ca93f86e035098bc3c35d569994d82a1eb9754d690e31ce3483ff3406097769846c258464adcbc48133544
- SSDEEP 1536:sOSdzzjrMT+tZkVK3hup0789EWR0rU4sd9md6Za5cMS72sWnsjZLjvwc5I69:sOezjQUu83hz89EWRsUlQ6772jnsjj7
- TLSH T151B3D70AFF600EF7E86BCD3B06A81B06348C651B12E97F357938D918B95A50B16E3D74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
mpsl.elf
Resource
debian12-mipsel-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target mpsl.elf
- Size 113KB
- SHA256 56229a6050f43fd51c2a1b82dc823f4dc3ef417fe9984e90dd7ee3cb2fcd0085
- MD5 9b632d8d81d48801ddaf09ef7e62500e
- SHA1 435d6fe86c095f72fe7797096c6e5fb9ef6bc5c8
- SHA512 4fd56191c39104fe7096f03e7ac2d0e3693c1feae3ca93f86e035098bc3c35d569994d82a1eb9754d690e31ce3483ff3406097769846c258464adcbc48133544
- SSDEEP 1536:sOSdzzjrMT+tZkVK3hup0789EWR0rU4sd9md6Za5cMS72sWnsjZLjvwc5I69:sOezjQUu83hz89EWRsUlQ6772jnsjj7
- TLSH T151B3D70AFF600EF7E86BCD3B06A81B06348C651B12E97F357938D918B95A50B16E3D74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.