Analysis
- max time kernel
150s - max time network
152s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
09/08/2026, 00:17
Behavioral task
behavioral1
Sample
sdfjgnjsdf.mpsl
Resource
debian12-mipsel-20260513-en
3 signatures
150 seconds
General
- Target sdfjgnjsdf.mpsl
- Size 72KB
- Sample260809-ak4xmsfk7s
- SHA256 688181c0de684018f2707bbcb1573952cc95347e217a159243b2145e9583e8c3
- MD5 fb687de1ad933373b1d7b73bb3503b14
- SHA1 a19359ca28736a90d3a890934f2d9cba8a5a97c1
- SHA512 d4c9bb438c9dd72b47cf526d22ee4e1c0dbda9a5416184426f947febbc16731744ad16dde59449c38be7da6908fe843b8203c9c839a2f9cf7bee534bc3d7dd76
- SSDEEP 1536:GcZhsoKKZktiGzK4WukDUKIjEMKxR1zP6LkLxIBaXBnOIe6ssfbDn:vZBVHdxDU5jEMK3B64iBaX0IeQT
- TLSH T13273027D81A139C3A9CE683B91FB4B4E8EE8F0C0D2458AD9CB440C51739B59675B85FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Extracted
Family
-
mirai
Botnet
-
LZRD
C2
-
94.154.43.46
Signatures
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog sdfjgnjsdf.mpsl File opened for modification /dev/misc/watchdog sdfjgnjsdf.mpsl - Writes file to system bin folder 2 IoCs
description ioc Process File opened for modification /bin/watchdog sdfjgnjsdf.mpsl File opened for modification /sbin/watchdog sdfjgnjsdf.mpsl