General
- Target mpsl.elf
- Size 136KB
- Sample261107-mqnttsa191
- SHA256 754a7bfe099958fc751c780d7a5c6acf48f6ef69221c23050938ae383f10895d
- MD5 46b350afa0bac0afb9ef5db329f1be26
- SHA1 d24dd9e63abcacbb750c31ed0bef51162c1a5ee1
- SHA512 fa54bb3f78c0e064ab0af285cdedcda1be0cb7807a37ded5fc6ee3716e8cdb3a97c926c1a44e0141c05e65175fcc1388289dfa40ad18d3ff7fa2e444ab64bfc8
- SSDEEP 1536:LtcioYQBRxAF9bcliUFLp3skxUZQG5obEdnb8L4qT5fMoO95aqyhAexukMiK9YJm:LS/NFLp3sN34TAyaLOPA5pqlr5U1d
- TLSH T19AD3F80AFFA12EBBE4AFCD3346B98749389C154621E83B757574D818F24A14F46E38A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
mpsl.elf
Resource
debian12-mipsel-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target mpsl.elf
- Size 136KB
- SHA256 754a7bfe099958fc751c780d7a5c6acf48f6ef69221c23050938ae383f10895d
- MD5 46b350afa0bac0afb9ef5db329f1be26
- SHA1 d24dd9e63abcacbb750c31ed0bef51162c1a5ee1
- SHA512 fa54bb3f78c0e064ab0af285cdedcda1be0cb7807a37ded5fc6ee3716e8cdb3a97c926c1a44e0141c05e65175fcc1388289dfa40ad18d3ff7fa2e444ab64bfc8
- SSDEEP 1536:LtcioYQBRxAF9bcliUFLp3skxUZQG5obEdnb8L4qT5fMoO95aqyhAexukMiK9YJm:LS/NFLp3sN34TAyaLOPA5pqlr5U1d
- TLSH T19AD3F80AFFA12EBBE4AFCD3346B98749389C154621E83B757574D818F24A14F46E38A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Contacts a large (703) amount of remote hosts
This may indicate a network scan to discover remotely running services.
Renames itself
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Enumerates running processes
Discovers information about currently running processes on the system