Extracted

• • Target

    mpsl.elf

  • Size

    106KB

  • MD5

    616831389c4cf3a27859320768d73950

  • SHA1

    f6f4d267fd6640e70123359467a32605df197437

  • SHA256

    2ea0ed847034f0322f20b98f173904659101350a0e903522e65e08ea830ceaa0

  • SHA512

    a00575f8645f90a75e8f9d5b57723b9b0eebb0f930897c6dc283c40096f8e132e1385148378dc24aa5c72a66db5118095c4d2688ae1aeccc759304a8da82ef10

  • SSDEEP

    1536:ygXHwnODnP1QGpapwiYiQ/GO4DqUXZSJvD3ZCu3qS9mTHH:y6HwnODnP112nJSVD3zUH

  Score

  7^/10

  defense_evasiondiscoveryevasionpersistenceprivilege_escalation

  • Deletes Audit logs

    Deletes logs related to the Linux Audit framework.

    evasion

  • Deletes itself

  • Deletes journal logs

    Deletes systemd journal logs. Likely to evade detection.

    evasion

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Deletes log files

    Deletes log files on the system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Modifies systemd

    Adds/ modifies systemd service files. Likely to achieve persistence.

    persistenceprivilege_escalation
  behavioral1