Analysis
- max time kernel
141s - max time network
13s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
09/08/2026, 10:16
Behavioral task
behavioral1
Sample
lkxstress.mpsl.elf
Resource
debian12-mipsel-20260513-en
debian-12-mipsel
5 signatures
150 seconds
General
- Target lkxstress.mpsl.elf
- Size 73KB
- Sample260809-ma2qrawbkc
- SHA256 605b3e9bda7bd6298a4e859779a06e02bbf5e121fc39b0d54b83c97f8d192205
- MD5 610c3e07aaf03853305c407430519d8d
- SHA1 6709cda386fe1845dc99a7961bff08ecc22c138c
- SHA512 03d5f8ecfe187ddd78737c751d50cb205e4b9b3f969106c990191e8b659f52cf4a43730fec5d28c1d231f6c3c09228e569570b3e6f3a91a05ddf0a67ef57cb3e
- SSDEEP 1536:yhcFwJd+wvnlujqUwGIYPow2SYI1zA2PfiW6hMqFpo/AwFl6D:yh0q1vnIq5GpCFwzXCo/AmAD
- TLSH T10E7302BC7C79F5A19CBCDDBF98ED0B2190801583BDC98941FB3819C9E12216FB3089A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Signatures
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog lkxstress.mpsl.elf File opened for modification /dev/misc/watchdog lkxstress.mpsl.elf - Enumerates running processes
Discovers information about currently running processes on the system
- Writes file to system bin folder 2 IoCs
description ioc Process File opened for modification /sbin/watchdog lkxstress.mpsl.elf File opened for modification /bin/watchdog lkxstress.mpsl.elf -
description ioc Process File opened for reading /proc/14/status lkxstress.mpsl.elf File opened for reading /proc/28/status lkxstress.mpsl.elf File opened for reading /proc/409/status lkxstress.mpsl.elf File opened for reading /proc/697/status lkxstress.mpsl.elf File opened for reading /proc/29/status lkxstress.mpsl.elf File opened for reading /proc/118/status lkxstress.mpsl.elf File opened for reading /proc/379/status lkxstress.mpsl.elf File opened for reading /proc/663/status lkxstress.mpsl.elf File opened for reading /proc/11/status lkxstress.mpsl.elf File opened for reading /proc/15/status lkxstress.mpsl.elf File opened for reading /proc/18/status lkxstress.mpsl.elf File opened for reading /proc/19/status lkxstress.mpsl.elf File opened for reading /proc/25/status lkxstress.mpsl.elf File opened for reading /proc/111/status lkxstress.mpsl.elf File opened for reading /proc/115/status lkxstress.mpsl.elf File opened for reading /proc/322/status lkxstress.mpsl.elf File opened for reading /proc/3/status lkxstress.mpsl.elf File opened for reading /proc/32/status lkxstress.mpsl.elf File opened for reading /proc/33/status lkxstress.mpsl.elf File opened for reading /proc/48/status lkxstress.mpsl.elf File opened for reading /proc/395/status lkxstress.mpsl.elf File opened for reading /proc/677/status lkxstress.mpsl.elf File opened for reading /proc/678/status lkxstress.mpsl.elf File opened for reading /proc/805/status lkxstress.mpsl.elf File opened for reading /proc/4/status lkxstress.mpsl.elf File opened for reading /proc/16/status lkxstress.mpsl.elf File opened for reading /proc/119/status lkxstress.mpsl.elf File opened for reading /proc/2/status lkxstress.mpsl.elf File opened for reading /proc/9/status lkxstress.mpsl.elf File opened for reading /proc/17/status lkxstress.mpsl.elf File opened for reading /proc/26/status lkxstress.mpsl.elf File opened for reading /proc/35/status lkxstress.mpsl.elf File opened for reading /proc/44/status lkxstress.mpsl.elf File opened for reading /proc/47/status lkxstress.mpsl.elf File opened for reading /proc/137/status lkxstress.mpsl.elf File opened for reading /proc/34/status lkxstress.mpsl.elf File opened for reading /proc/765/status lkxstress.mpsl.elf File opened for reading /proc/53/status lkxstress.mpsl.elf File opened for reading /proc/58/status lkxstress.mpsl.elf File opened for reading /proc/59/status lkxstress.mpsl.elf File opened for reading /proc/180/status lkxstress.mpsl.elf File opened for reading /proc/793/status lkxstress.mpsl.elf File opened for reading /proc/5/status lkxstress.mpsl.elf File opened for reading /proc/7/status lkxstress.mpsl.elf File opened for reading /proc/433/status lkxstress.mpsl.elf File opened for reading /proc/774/status lkxstress.mpsl.elf File opened for reading /proc/792/status lkxstress.mpsl.elf File opened for reading /proc/802/status lkxstress.mpsl.elf File opened for reading /proc/8/status lkxstress.mpsl.elf File opened for reading /proc/208/status lkxstress.mpsl.elf File opened for reading /proc/338/status lkxstress.mpsl.elf File opened for reading /proc/377/status lkxstress.mpsl.elf File opened for reading /proc/1/status lkxstress.mpsl.elf File opened for reading /proc/12/status lkxstress.mpsl.elf File opened for reading /proc/762/status lkxstress.mpsl.elf File opened for reading /proc/768/status lkxstress.mpsl.elf File opened for reading /proc/30/status lkxstress.mpsl.elf File opened for reading /proc/37/status lkxstress.mpsl.elf File opened for reading /proc/390/status lkxstress.mpsl.elf File opened for reading /proc/779/status lkxstress.mpsl.elf File opened for reading /proc/797/status lkxstress.mpsl.elf File opened for reading /proc/13/status lkxstress.mpsl.elf File opened for reading /proc/20/status lkxstress.mpsl.elf File opened for reading /proc/24/status lkxstress.mpsl.elf