Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
156s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
13/12/2024, 09:19
Behavioral task
behavioral1
Sample
0x86d.mpsl.elf
Resource
debian12-mipsel-20240221-en
4 signatures
150 seconds
General
-
Target
0x86d.mpsl.elf
-
Size
94KB
-
MD5
70ce477bf31b038fbdf2572685b13c44
-
SHA1
e113064c6754344c764aca244157843d4ee048f3
-
SHA256
0a7134ff9555d9373f44c49bdea7fcdcb83bff5e090cde58dac44f505d099e70
-
SHA512
c6d7e6f59f89af0ec00e15392259fd10b9f74fa776e1ba9f95ab24d7070738c52231c97b9c7f2eb3b039b9320e418d9cb3e0bbfccc890c56857d2d66457634ae
-
SSDEEP
1536:IIdgIHlIodXYtiTeLM/eNLNnit7ZIzAFy4pZ1BV6h5xJfCW:IIdgIHlIoh+LNit7ZPFbpCVqW
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 745 0x86d.mpsl.elf -
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog 0x86d.mpsl.elf File opened for modification /dev/misc/watchdog 0x86d.mpsl.elf -
Writes file to system bin folder 2 IoCs
description ioc Process File opened for modification /sbin/watchdog 0x86d.mpsl.elf File opened for modification /bin/watchdog 0x86d.mpsl.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself g3nrh1c02h4rotqe 745 0x86d.mpsl.elf