dbe8e30860c8fc4f1470138113f3ea1983129319938b3bb98f3616df0ac23f01

Analysis

max time kernel
151s
max time network
156s
platform
debian-12_mipsel
resource
debian12-mipsel-20260513-en
resource tags

arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
07/10/2026, 23:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mpsl.elf
Size 131KB
Sample261007-26zzcsfw7t
SHA256 dbe8e30860c8fc4f1470138113f3ea1983129319938b3bb98f3616df0ac23f01
MD5 de31509881c8104305b7517fd66c40a1
SHA1 0b8af5ac9188c8847596a3f23cd9f46f1ca62342
SHA512 60adafeced3a91f3127ec36a81096cdf043c3978f40b63c7f3da4b199cb7d9c8e7f97cea5667080f77316ca3f5e7c4008afa7aecc2569773e04bf4ad0ac7f733
SSDEEP 1536:XJQT5SdsKBSsooJZboeGhrF7wJ04lYPhvyKg86KuZmn+jre8PL1:XJQlusKBfoo3Ee0rWsPsKtXimnUrx1
TLSH
T155D32A07BFA10FFBD85BCE3702EB0B21158DD95A23926B367138DD68B64728A16D3D50
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion

Malware Config

Signatures

Deletes Audit logs 1 TTPs 1 IoCs

Deletes logs related to the Linux Audit framework.

defense_evasion

Clear Linux or Mac System Logs

T1070.002

description	ioc	Process
File deleted	/var/log/audit/audit.log	mpsl.elf

Deletes itself 1 IoCs

pid	Process
802	mpsl.elf

Deletes journal logs 1 TTPs 1 IoCs

Deletes systemd journal logs. Likely to evade detection.

defense_evasion

Clear Linux or Mac System Logs

T1070.002

description	ioc	Process
File deleted	/var/log/journal/edeb2f80f756429c9aae366fe5ab23dd/system.journal	mpsl.elf

Renames itself 1 IoCs

pid	Process
802	mpsl.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	a	802	mpsl.elf

/tmp/mpsl.elf
/tmp/mpsl.elf
1⤵
- Deletes Audit logs
- Deletes itself
- Deletes journal logs
- Renames itself
- Changes its process name
PID:802

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

T1070

Clear Linux or Mac System Logs

T1070.002

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads