Extracted

• • Target

    hold.mpsl.elf

  • Size

    99KB

  • MD5

    2e00f583eb0cac5d3106c661805d8681

  • SHA1

    e4c66f8441bcc17406c0f0f275cbe3dcb1a97071

  • SHA256

    5a37c449a2783a80c3f29ed2a3a9586b08b30d8890477894f3c82dc113c85f0e

  • SHA512

    8156789ae5290d0454cd1be33015170e5de313e03d39d5f239807bebd55737ba2c48473895697513ae361432e3c499fba3655a04e1e10cf4adbd676886b6acc1

  • SSDEEP

    1536:4T0NbtFd367tQ4vtrYIXkCMfCgVFxpxcL7qZiLb+zt3gO47:4T0NbtFdq7tuukNTx4qD1gv7

  Score

  7^/10

  defense_evasiondiscovery

  • Deletes itself

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1