General
- Target pmpsl
- Size 242KB
- Sample260825-agw3mavfnc
- SHA256 f2d84aa5b96bbfbe0d3f79a8913947949918af763bdda32c73454b0bf0065548
- MD5 f1f5da5d03b3dd7b0a634d36ac90f6a8
- SHA1 68941a3a6487cf78392111be646a2cd3b4105852
- SHA512 1d0d0b54bab7114cb510227e3b5059e50ec791aef9a93125a4ef858f86dfb4edd4d94f9e467312cfe8e0efa15dccac762a4287972332c6be2ed7e23155f4dbed
- SSDEEP 3072:9O95LHWecxKaGH5kASKYOn2jMhOY5+7lGNJuJilsEOVb:o912hLGBSpwhr5sbIl2V
- TLSH T10734F90AAB510FFBDC6BDD3702E91B0624CC641722A52F367678DA18F94A54F4AD3C78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
pmpsl
Resource
debian12-mipsel-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target pmpsl
- Size 242KB
- SHA256 f2d84aa5b96bbfbe0d3f79a8913947949918af763bdda32c73454b0bf0065548
- MD5 f1f5da5d03b3dd7b0a634d36ac90f6a8
- SHA1 68941a3a6487cf78392111be646a2cd3b4105852
- SHA512 1d0d0b54bab7114cb510227e3b5059e50ec791aef9a93125a4ef858f86dfb4edd4d94f9e467312cfe8e0efa15dccac762a4287972332c6be2ed7e23155f4dbed
- SSDEEP 3072:9O95LHWecxKaGH5kASKYOn2jMhOY5+7lGNJuJilsEOVb:o912hLGBSpwhr5sbIl2V
- TLSH T10734F90AAB510FFBDC6BDD3702E91B0624CC641722A52F367678DA18F94A54F4AD3C78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.