General
- Target jklmpsl.elf
- Size 133KB
- Sample261012-nyl6msdz3n
- SHA256 cac04d2a67b7e803df096bd91bedbf5603ab09299daf7070265f27a5094637bc
- MD5 05505c4b3255435a6576654e4283c203
- SHA1 d3b4e75b00459b89246387f755df46d76e394554
- SHA512 61b1890dea2d0960a0586b63880cf16147727deaacb1497eaedc51a038ee022c235222f70cc340cc7d5d0398229f6f05084ed6acb9cce2da5578b2e297a09927
- SSDEEP 1536:9RIXh3YLB6xAp9LD6BoZOe+OSDxgmQhyofDd8b8Im35fMoO95aqyhAexG2Xt2ZMn:9WXO5ZOe+ByNz0Z81vy94Zw0IFw3xC
- TLSH T18DD31A0ABF711EBBD86FDD3342AA4B09249C190621A93F763674D81CF61B24F5AD3C64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
jklmpsl.elf
Resource
debian12-mipsel-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target jklmpsl.elf
- Size 133KB
- SHA256 cac04d2a67b7e803df096bd91bedbf5603ab09299daf7070265f27a5094637bc
- MD5 05505c4b3255435a6576654e4283c203
- SHA1 d3b4e75b00459b89246387f755df46d76e394554
- SHA512 61b1890dea2d0960a0586b63880cf16147727deaacb1497eaedc51a038ee022c235222f70cc340cc7d5d0398229f6f05084ed6acb9cce2da5578b2e297a09927
- SSDEEP 1536:9RIXh3YLB6xAp9LD6BoZOe+OSDxgmQhyofDd8b8Im35fMoO95aqyhAexG2Xt2ZMn:9WXO5ZOe+ByNz0Z81vy94Zw0IFw3xC
- TLSH T18DD31A0ABF711EBBD86FDD3342AA4B09249C190621A93F763674D81CF61B24F5AD3C64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Renames itself
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Enumerates running processes
Discovers information about currently running processes on the system