Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

mpsl.elf

debian-9-mipsel

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mpsl.elf

  • Size

    194KB

  • Sample

    231012-aymkhsff87

  • MD5

    32e65584b70e837be41c400747a4ee54

  • SHA1

    46b248cb420356ee18c63e71e2b185f9be892ff6

  • SHA256

    c02575dfb004b55e7db58eb3f03c37a284b558b0d289cfdb95834178f161ee39

  • SHA512

    bc967e75d18d0c322cb4017c24d6c063ba7e666f16cd633082e8e9f1d0d9293672df778e389d1e852c62088243806cdf1012096bf90589d5838de2fa44e10f41

  • SSDEEP

    3072:dhsvvuT31TR/CZA1W5yFICMEnnGjtlNnTxhXMwM:dhsvvqRoAg53CMwStnTf

Score
10/10
miraidiscovery

Malware Config

Targets

    • Target

      mpsl.elf

    • Size

      194KB

    • MD5

      32e65584b70e837be41c400747a4ee54

    • SHA1

      46b248cb420356ee18c63e71e2b185f9be892ff6

    • SHA256

      c02575dfb004b55e7db58eb3f03c37a284b558b0d289cfdb95834178f161ee39

    • SHA512

      bc967e75d18d0c322cb4017c24d6c063ba7e666f16cd633082e8e9f1d0d9293672df778e389d1e852c62088243806cdf1012096bf90589d5838de2fa44e10f41

    • SSDEEP

      3072:dhsvvuT31TR/CZA1W5yFICMEnnGjtlNnTxhXMwM:dhsvvqRoAg53CMwStnTf

    Score
    9/10
    discovery

    • Contacts a large (75157) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Changes its process name

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks