General
- Target nullnet.mpsl.elf
- Size 102KB
- Sample260721-ame2asby2w
- SHA256 7694570bd0ddd16c6e60fbadd1d32a78c29944a1fa0cc19eacaa819d65654c05
- MD5 7c0db1eeb051d0e4d59bf713292112d6
- SHA1 f0dea7628c77cdeebdecd1fbff7ba6d7890d2256
- SHA512 a6ce940558971e2818fd8edf6c2509479102dffa7392acff8ffab9c68758b3ad269b48889b6c25aa405e99de1642b9d7d99899a2a651ca67f31f3c59f6f6d983
- SSDEEP 1536:DhIvVaMEpKOHpisY27JkrbOsCU9rACpHyT2YAFZofQQp4x:AjMKOJisvdkrFCUNIAFz
- TLSH T1E9A3520B7F606EF7E82BDD3745F15B04248CB41621993B76BA34E958FA0A18F45E38B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
nullnet.mpsl.elf
Resource
debian12-mipsel-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target nullnet.mpsl.elf
- Size 102KB
- SHA256 7694570bd0ddd16c6e60fbadd1d32a78c29944a1fa0cc19eacaa819d65654c05
- MD5 7c0db1eeb051d0e4d59bf713292112d6
- SHA1 f0dea7628c77cdeebdecd1fbff7ba6d7890d2256
- SHA512 a6ce940558971e2818fd8edf6c2509479102dffa7392acff8ffab9c68758b3ad269b48889b6c25aa405e99de1642b9d7d99899a2a651ca67f31f3c59f6f6d983
- SSDEEP 1536:DhIvVaMEpKOHpisY27JkrbOsCU9rACpHyT2YAFZofQQp4x:AjMKOJisvdkrFCUNIAFz
- TLSH T1E9A3520B7F606EF7E82BDD3745F15B04248CB41621993B76BA34E958FA0A18F45E38B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.