General
- Target bot.mpsl.elf
- Size 1.0MB
- Sample260924-avds7shf39
- SHA256 215d4190b32b707e737abd732120eb1bb6c51ee7af5ee21cb9fb970fb86b239a
- MD5 9fa3840585b072ebcfb29ed0c4a3a80f
- SHA1 e4dc7a412766af42352ed9de5d43d98ca6e3ab95
- SHA512 81025a71d693bce05b81b74e56735707782b690f10cea6fcf833c0633196f82b7eba9b831ec6572b070b466066fc914cbafefcff4c300a736b7ce29c489f73a2
- SSDEEP 24576:Znxtnx4eHKnFKVW/rSgPUA1fZfrbYhqxwHnKWkX:FxFXO46P1KhqxwHgX
- TLSH T1E4354B07EF402FEBC4AFCD30452EC31720EDE89B52C5A62D71FC4A8CBA596594AD7588
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
bot.mpsl.elf
Resource
debian12-mipsel-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target bot.mpsl.elf
- Size 1.0MB
- SHA256 215d4190b32b707e737abd732120eb1bb6c51ee7af5ee21cb9fb970fb86b239a
- MD5 9fa3840585b072ebcfb29ed0c4a3a80f
- SHA1 e4dc7a412766af42352ed9de5d43d98ca6e3ab95
- SHA512 81025a71d693bce05b81b74e56735707782b690f10cea6fcf833c0633196f82b7eba9b831ec6572b070b466066fc914cbafefcff4c300a736b7ce29c489f73a2
- SSDEEP 24576:Znxtnx4eHKnFKVW/rSgPUA1fZfrbYhqxwHnKWkX:FxFXO46P1KhqxwHgX
- TLSH T1E4354B07EF402FEBC4AFCD30452EC31720EDE89B52C5A62D71FC4A8CBA596594AD7588
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads MAC address of network interface
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
2System Checks
2