General
- Target pmpsl.elf
- Size 95KB
- Sample260629-2red4sg13y
- SHA256 88a4b640bff61b58aef117e03723e9e426afa9b0257fda7d1b91a4f799ad844f
- MD5 28095402913bbdef97f62714a279297b
- SHA1 308bce0e56b5f17d770eb7a7a235b55b78c825b3
- SHA512 389f319fa663304c575d40c066c36e0d2432d6175a6b2fa8a416dc705bfc0d2ad8281c164d6e520f1f42c988342abeb647c4bfb80befdcda1c70cde40b06b31d
- SSDEEP 1536:LvGefaZSdtuQ4/xl4ExO29zyN0ZNhdZp54crFCZeLs/h5J:LOefaZSdg59zm0Hr6eoJ
- TLSH T1BEA3E506BB650FF7DC6FCD3706A9070225CCA51B22B83B367674D928B50B65B4AE3874
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
pmpsl.elf
Resource
debian12-mipsel-20260513-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
MIRAI
Targets
-
- Target pmpsl.elf
- Size 95KB
- SHA256 88a4b640bff61b58aef117e03723e9e426afa9b0257fda7d1b91a4f799ad844f
- MD5 28095402913bbdef97f62714a279297b
- SHA1 308bce0e56b5f17d770eb7a7a235b55b78c825b3
- SHA512 389f319fa663304c575d40c066c36e0d2432d6175a6b2fa8a416dc705bfc0d2ad8281c164d6e520f1f42c988342abeb647c4bfb80befdcda1c70cde40b06b31d
- SSDEEP 1536:LvGefaZSdtuQ4/xl4ExO29zyN0ZNhdZp54crFCZeLs/h5J:LOefaZSdg59zm0Hr6eoJ
- TLSH T1BEA3E506BB650FF7DC6FCD3706A9070225CCA51B22B83B367674D928B50B65B4AE3874
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system