dc6b2b4b88ee2b241331e928e00c575fa8ac580aded1af413652cf2e867ad0f7

Analysis

max time kernel
11s
max time network
17s
platform
debian-12_mipsel
resource
debian12-mipsel-20260513-en
resource tags

arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
29/09/2026, 12:33

Target
manji.mpsl
Size 115KB
Sample260929-pre97azfmg
SHA256 dc6b2b4b88ee2b241331e928e00c575fa8ac580aded1af413652cf2e867ad0f7
MD5 336b624ba427bb7666c6ec41797292ea
SHA1 5ea7a12155883f26fcb66fc5d5875fee09d7f09f
SHA512 8758314d7a89415c26dfc11f7e1f351aa567062e0aaf8517925b48552b9cd72a8fa15b10dae89de4361eae4905320ed5afbd3424ffbf82d11ec61db4c5d6bb9f
SSDEEP 1536:j4w4zW/h4SZsqEz3UrgiDSAPrfO4jaXbzjZjCfPNXm/iRK0UgSSW/:0xW/rZsqcUzfHjarzjD+XW/
TLSH
T1F2C3D506BF114FF7D89BCD7346FA0B05258CB82B16B92B757534EC58B24A1CA1AE3874
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Traces itself 1 IoCs

Traces itself to prevent debugging attempts

pid	Process
804	manji.mpsl

Changes its process name 2 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	uhttpd	804	manji.mpsl
Changes the process name, possibly in an attempt to hide itself	systemd	804	manji.mpsl

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/mounts	manji.mpsl
File opened for reading	/proc/self/status	manji.mpsl