General
- Target bot.mpsl
- Size 328KB
- Sample260924-ann1laxeqa
- SHA256 4e5c3ca734ff4993687dfadbb270cf46f6c7c437d4a981d7ecef0760f1cfdba3
- MD5 d54bde7a0daff08566acc16ffb94991c
- SHA1 599f3807286bc9b1263b8cff77fed14aabb0ec56
- SHA512 8d7fba35c1d674230ce7ad46660ce6f95c53d5655b2180e53ef74922b0c72d2ce8609766b2a096501a645640c569485216fc1af1cf387f55365635f3feb2c88d
- SSDEEP 6144:inJxLRB449AIfClSwjecnCdZV6OnBaZBEUAZtYoRW:KL4BIwXKcCp6MBaMBYAW
- TLSH T1EF642989AFA50FEFC86FCE30172D430B29ECA95F42E5B33A597CDC4875AA10585D3468
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
bot.mpsl
Resource
debian12-mipsel-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target bot.mpsl
- Size 328KB
- SHA256 4e5c3ca734ff4993687dfadbb270cf46f6c7c437d4a981d7ecef0760f1cfdba3
- MD5 d54bde7a0daff08566acc16ffb94991c
- SHA1 599f3807286bc9b1263b8cff77fed14aabb0ec56
- SHA512 8d7fba35c1d674230ce7ad46660ce6f95c53d5655b2180e53ef74922b0c72d2ce8609766b2a096501a645640c569485216fc1af1cf387f55365635f3feb2c88d
- SSDEEP 6144:inJxLRB449AIfClSwjecnCdZV6OnBaZBEUAZtYoRW:KL4BIwXKcCp6MBaMBYAW
- TLSH T1EF642989AFA50FEFC86FCE30172D430B29ECA95F42E5B33A597CDC4875AA10585D3468
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Traces itself
Traces itself to prevent debugging attempts
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system