Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
150s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240226-en -
resource tags
arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
22/12/2024, 08:40
Behavioral task
behavioral1
Sample
vlxx.mpsl.elf
Resource
debian9-mipsel-20240226-en
debian-9-mipsel
3 signatures
150 seconds
General
-
Target
vlxx.mpsl.elf
-
Size
173KB
-
MD5
99279f22658eef897ecc808c09ccdc75
-
SHA1
d028156dcc29a3d40db36c0c53cee6c1f4788f5c
-
SHA256
698d20cd37c0fb16f1e5b37f8cf6320947c212c009725cb7a5b17de34bc1f32a
-
SHA512
d287993c0b6cae1ee02e010fe8a9829d5d7e919ab1c59e4eb22427c4ee83209a16ff6c4b6c774c537d08a762031e896bc14f0e52ef783f4ac1b9f6a06789216f
-
SSDEEP
3072:uCQDElnT/hX5MZ6vKOgwRl6adAbVNj+K/iy8:uCQQRzhaZ6vFg+ljmLSK/
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself -"6 708 vlxx.mpsl.elf -
description ioc Process File opened for reading /proc/384/cmdline vlxx.mpsl.elf File opened for reading /proc/748/cmdline vlxx.mpsl.elf File opened for reading /proc/20/cmdline vlxx.mpsl.elf File opened for reading /proc/333/cmdline vlxx.mpsl.elf File opened for reading /proc/393/cmdline vlxx.mpsl.elf File opened for reading /proc/484/cmdline vlxx.mpsl.elf File opened for reading /proc/750/cmdline vlxx.mpsl.elf File opened for reading /proc/785/cmdline vlxx.mpsl.elf File opened for reading /proc/80/cmdline vlxx.mpsl.elf File opened for reading /proc/713/cmdline vlxx.mpsl.elf File opened for reading /proc/717/cmdline vlxx.mpsl.elf File opened for reading /proc/753/cmdline vlxx.mpsl.elf File opened for reading /proc/15/cmdline vlxx.mpsl.elf File opened for reading /proc/77/cmdline vlxx.mpsl.elf File opened for reading /proc/332/cmdline vlxx.mpsl.elf File opened for reading /proc/754/cmdline vlxx.mpsl.elf File opened for reading /proc/18/cmdline vlxx.mpsl.elf File opened for reading /proc/114/cmdline vlxx.mpsl.elf File opened for reading /proc/742/cmdline vlxx.mpsl.elf File opened for reading /proc/767/cmdline vlxx.mpsl.elf File opened for reading /proc/768/cmdline vlxx.mpsl.elf File opened for reading /proc/1/cmdline vlxx.mpsl.elf File opened for reading /proc/722/cmdline vlxx.mpsl.elf File opened for reading /proc/730/cmdline vlxx.mpsl.elf File opened for reading /proc/787/cmdline vlxx.mpsl.elf File opened for reading /proc/105/cmdline vlxx.mpsl.elf File opened for reading /proc/498/cmdline vlxx.mpsl.elf File opened for reading /proc/712/cmdline vlxx.mpsl.elf File opened for reading /proc/752/cmdline vlxx.mpsl.elf File opened for reading /proc/775/cmdline vlxx.mpsl.elf File opened for reading /proc/779/cmdline vlxx.mpsl.elf File opened for reading /proc/790/cmdline vlxx.mpsl.elf File opened for reading /proc/17/cmdline vlxx.mpsl.elf File opened for reading /proc/719/cmdline vlxx.mpsl.elf File opened for reading /proc/720/cmdline vlxx.mpsl.elf File opened for reading /proc/401/cmdline vlxx.mpsl.elf File opened for reading /proc/74/cmdline vlxx.mpsl.elf File opened for reading /proc/763/cmdline vlxx.mpsl.elf File opened for reading /proc/786/cmdline vlxx.mpsl.elf File opened for reading /proc/808/cmdline vlxx.mpsl.elf File opened for reading /proc/36/cmdline vlxx.mpsl.elf File opened for reading /proc/71/cmdline vlxx.mpsl.elf File opened for reading /proc/165/cmdline vlxx.mpsl.elf File opened for reading /proc/703/cmdline vlxx.mpsl.elf File opened for reading /proc/792/cmdline vlxx.mpsl.elf File opened for reading /proc/3/cmdline vlxx.mpsl.elf File opened for reading /proc/24/cmdline vlxx.mpsl.elf File opened for reading /proc/737/cmdline vlxx.mpsl.elf File opened for reading /proc/774/cmdline vlxx.mpsl.elf File opened for reading /proc/805/cmdline vlxx.mpsl.elf File opened for reading /proc/10/cmdline vlxx.mpsl.elf File opened for reading /proc/5/cmdline vlxx.mpsl.elf File opened for reading /proc/732/cmdline vlxx.mpsl.elf File opened for reading /proc/736/cmdline vlxx.mpsl.elf File opened for reading /proc/791/cmdline vlxx.mpsl.elf File opened for reading /proc/800/cmdline vlxx.mpsl.elf File opened for reading /proc/801/cmdline vlxx.mpsl.elf File opened for reading /proc/4/cmdline vlxx.mpsl.elf File opened for reading /proc/82/cmdline vlxx.mpsl.elf File opened for reading /proc/701/cmdline vlxx.mpsl.elf File opened for reading /proc/19/cmdline vlxx.mpsl.elf File opened for reading /proc/706/cmdline vlxx.mpsl.elf File opened for reading /proc/724/cmdline vlxx.mpsl.elf File opened for reading /proc/751/cmdline vlxx.mpsl.elf