Analysis
- max time kernel
151s - max time network
157s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
- submitted
02/06/2026, 06:32
General
- Target mpsl.elf
- Size 113KB
- Sample260602-hasevsfs8x
- SHA256 56229a6050f43fd51c2a1b82dc823f4dc3ef417fe9984e90dd7ee3cb2fcd0085
Score
7/10
Malware Config
Signatures
- Unexpected DNS network traffic destination 5 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
- Reads process memory 1 TTPs 1 IoCs
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.
- Changes its process name 2 IoCs
Processes
-
/tmp/mpsl.elf/tmp/mpsl.elf1⤵
- Reads process memory
- Changes its process name