Analysis
- max time kernel
140s - max time network
153s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
16/08/2026, 00:12
Static task
static1
Behavioral task
behavioral1
Sample
mini.mpsl
Resource
debian12-mipsel-20260513-en
5 signatures
150 seconds
General
- Target mini.mpsl
- Size 63KB
- Sample260816-ahn4eaw1bx
- SHA256 fd9b3294962be6f3b57df0b6d545517cffb9bc5dbef374f0a0ab32d86ce79007
- MD5 9b5661d9e7c56cbf8ac5b0e1cb24979c
- SHA1 7e287806d85f35bce19d6a92a30bee538147b2dd
- SHA512 c3a65a6069e1cfc53816c096f1ca7a2685f26569f14b9fd111c4349c4bf37022041350f51029001004755545cc7ccb465853432d441588b116e7b01f88e356e6
- SSDEEP 768:DVpLzZrDaEJKPchYHPBjMsZtn7ycAUbxdj+r8ioLUyF344OqqxOdx3t+xqLsVfyM:DzzhvJvhYHZjMY7AUbDar8iK9kxX9
- TLSH T13453F849EEA51BDBC46FCE70467E130715EE485E62E273368638DC54B5EE2088BE3C58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 2 IoCs
pid Process 799 mini.mpsl 800 mini.mpsl - Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog mini.mpsl File opened for modification /dev/misc/watchdog mini.mpsl - Traces itself 1 IoCs
Traces itself to prevent debugging attempts
pid Process 799 mini.mpsl - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 799 mini.mpsl - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/mini.mpsl mini.mpsl