General
- Target mpsl.elf
- Size 180KB
- Sample261102-pgpe4ss1dz
- SHA256 1686b3e855581ad93e8d1e83520717dae1e07cced9879152b14beae2ec632865
- MD5 543e16bbc2a7261649b75a80bbe4cedf
- SHA1 48a6a35817eb807b349011be1a0cd1e5f0bd62c4
- SHA512 1a8caed8c88ebe23764ba876fd547e6c17a965fac261be435d77e4253016b35848afaf9cbc5a29042d4b64082401cee074d4915dcac6941fe96e25000ff01141
- SSDEEP 3072:jXaxu0SMr01HJU8jw3rwi+CgGnwv0T1ZpWs7RABBC4VYGecYSTE3/:jXa00189Qwi+CrwMT1ZbR0BC4VUSm/
- TLSH T15A0413C3DCE52FB0ADF839D6CDFE71FE8AAFD0DC129206D7A22808442C8B44D5656495
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
mpsl.elf
Resource
debian12-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target mpsl.elf
- Size 180KB
- SHA256 1686b3e855581ad93e8d1e83520717dae1e07cced9879152b14beae2ec632865
- MD5 543e16bbc2a7261649b75a80bbe4cedf
- SHA1 48a6a35817eb807b349011be1a0cd1e5f0bd62c4
- SHA512 1a8caed8c88ebe23764ba876fd547e6c17a965fac261be435d77e4253016b35848afaf9cbc5a29042d4b64082401cee074d4915dcac6941fe96e25000ff01141
- SSDEEP 3072:jXaxu0SMr01HJU8jw3rwi+CgGnwv0T1ZpWs7RABBC4VYGecYSTE3/:jXa00189Qwi+CrwMT1ZbR0BC4VUSm/
- TLSH T15A0413C3DCE52FB0ADF839D6CDFE71FE8AAFD0DC129206D7A22808442C8B44D5656495
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.