General
- Target mpsl
- Size 99KB
- Sample260624-pgdcvab14j
- SHA256 a21766a2df35e45db59e0a6dbfeb7c8862fb9e77710c9f8f589b7a9b96c99bb9
- MD5 47ff45fc70ffbd5be2fff1344dcc8ed5
- SHA1 23656f1893c6e41960ababa16dd20257bbfb1643
- SHA512 39f4e3d088444975dd93c58352500f649bc987d5aed1672ad1e6aa7af1652e261ecb0a603b95eeb7f9fbff51fa05d131ad1afc36d23140f91fc7c0ab7b3d14f4
- SSDEEP 1536:u+kMoJdVZCSXVK1t0oub9ZH+SWjw+ZgLioV4Reu7VeZgh+FkgVFXj:u+kMQzZCi8IoE9ZH+S5+Qgeu7VebXnj
- TLSH T12EA3D80AEF600EF7EC6FCD3706A91B0634CC651A12A97B357A78D92CF91A20B55D3C64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
mpsl
Resource
debian12-mipsel-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target mpsl
- Size 99KB
- SHA256 a21766a2df35e45db59e0a6dbfeb7c8862fb9e77710c9f8f589b7a9b96c99bb9
- MD5 47ff45fc70ffbd5be2fff1344dcc8ed5
- SHA1 23656f1893c6e41960ababa16dd20257bbfb1643
- SHA512 39f4e3d088444975dd93c58352500f649bc987d5aed1672ad1e6aa7af1652e261ecb0a603b95eeb7f9fbff51fa05d131ad1afc36d23140f91fc7c0ab7b3d14f4
- SSDEEP 1536:u+kMoJdVZCSXVK1t0oub9ZH+SWjw+ZgLioV4Reu7VeZgh+FkgVFXj:u+kMQzZCi8IoE9ZH+S5+Qgeu7VebXnj
- TLSH T12EA3D80AEF600EF7EC6FCD3706A91B0634CC651A12A97B357A78D92CF91A20B55D3C64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.