General
- Target nklmpsl.elf
- Size 174KB
- Sample261113-2xxsmsgx8m
- SHA256 7bec1cbaffc69365ad9216efc4b6574ea7ed2be75d73581573d0a05c404bacb8
- MD5 e6a7d55f6cf807d9a2ca944d0484c894
- SHA1 a7c6e2bee52f0ec2f7268510e1efa5b9ded97bb3
- SHA512 7558ebeebaaaf3dd053213e1a34fd18901927cc88f74f7e422ae77ce08d13e56c01207faa5a1c821aa6698f61a8b831734f8c292b3870570a9433a187d5dbf64
- SSDEEP 3072:JzTYFXyiPu09f36CTSAene8QHI8DFfI6463dw+:JzTY5yiPu09yCTHeeVIcpxfd
- TLSH T143041A0ABF611EFBD8AFCD3341BA4B09298C154622B52B796574DC1CF25B24F1AD3C64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
nklmpsl.elf
Resource
debian12-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target nklmpsl.elf
- Size 174KB
- SHA256 7bec1cbaffc69365ad9216efc4b6574ea7ed2be75d73581573d0a05c404bacb8
- MD5 e6a7d55f6cf807d9a2ca944d0484c894
- SHA1 a7c6e2bee52f0ec2f7268510e1efa5b9ded97bb3
- SHA512 7558ebeebaaaf3dd053213e1a34fd18901927cc88f74f7e422ae77ce08d13e56c01207faa5a1c821aa6698f61a8b831734f8c292b3870570a9433a187d5dbf64
- SSDEEP 3072:JzTYFXyiPu09f36CTSAene8QHI8DFfI6463dw+:JzTY5yiPu09yCTHeeVIcpxfd
- TLSH T143041A0ABF611EFBD8AFCD3341BA4B09298C154622B52B796574DC1CF25B24F1AD3C64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Contacts a large (7304) amount of remote hosts
This may indicate a network scan to discover remotely running services.
Renames itself
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.