Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
152s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240729-en -
resource tags
arch:mipselimage:debian12-mipsel-20240729-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
02/02/2025, 07:12
Behavioral task
behavioral1
Sample
bot.mpsl.elf
Resource
debian12-mipsel-20240729-en
debian-12-mipsel
3 signatures
150 seconds
General
-
Target
bot.mpsl.elf
-
Size
173KB
-
MD5
9dc8468277870a16d333b519b9baf8ad
-
SHA1
15a556ecf5605315a6f15f2f3aa368a01e9cd2e9
-
SHA256
94e99db7f85183422eeca5d053f275c04d70a27ce1022a6574477f11a65d440b
-
SHA512
bea3bae03c082675e6538046f9817bb0cb80d2619da9432cc05df9c11848f85ffee6d04d28935e63294016a87661a04da3665da7c27c1a98ee91d205c1064c77
-
SSDEEP
3072:OeEksFM+wXpOraVB8H3NaMFuDbcpB99k+rhsKbs0:OeEnO+wXnVGdaMkD4pHi+PI
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M" ! 742 bot.mpsl.elf -
description ioc Process File opened for reading /proc/45/cmdline bot.mpsl.elf File opened for reading /proc/749/cmdline bot.mpsl.elf File opened for reading /proc/774/cmdline bot.mpsl.elf File opened for reading /proc/27/cmdline bot.mpsl.elf File opened for reading /proc/692/cmdline bot.mpsl.elf File opened for reading /proc/137/cmdline bot.mpsl.elf File opened for reading /proc/21/cmdline bot.mpsl.elf File opened for reading /proc/22/cmdline bot.mpsl.elf File opened for reading /proc/47/cmdline bot.mpsl.elf File opened for reading /proc/767/cmdline bot.mpsl.elf File opened for reading /proc/1/cmdline bot.mpsl.elf File opened for reading /proc/5/cmdline bot.mpsl.elf File opened for reading /proc/745/cmdline bot.mpsl.elf File opened for reading /proc/761/cmdline bot.mpsl.elf File opened for reading /proc/14/cmdline bot.mpsl.elf File opened for reading /proc/744/cmdline bot.mpsl.elf File opened for reading /proc/756/cmdline bot.mpsl.elf File opened for reading /proc/758/cmdline bot.mpsl.elf File opened for reading /proc/786/cmdline bot.mpsl.elf File opened for reading /proc/112/cmdline bot.mpsl.elf File opened for reading /proc/733/cmdline bot.mpsl.elf File opened for reading /proc/11/cmdline bot.mpsl.elf File opened for reading /proc/19/cmdline bot.mpsl.elf File opened for reading /proc/113/cmdline bot.mpsl.elf File opened for reading /proc/8/cmdline bot.mpsl.elf File opened for reading /proc/9/cmdline bot.mpsl.elf File opened for reading /proc/260/cmdline bot.mpsl.elf File opened for reading /proc/711/cmdline bot.mpsl.elf File opened for reading /proc/748/cmdline bot.mpsl.elf File opened for reading /proc/12/cmdline bot.mpsl.elf File opened for reading /proc/179/cmdline bot.mpsl.elf File opened for reading /proc/747/cmdline bot.mpsl.elf File opened for reading /proc/769/cmdline bot.mpsl.elf File opened for reading /proc/771/cmdline bot.mpsl.elf File opened for reading /proc/777/cmdline bot.mpsl.elf File opened for reading /proc/109/cmdline bot.mpsl.elf File opened for reading /proc/714/cmdline bot.mpsl.elf File opened for reading /proc/53/cmdline bot.mpsl.elf File opened for reading /proc/34/cmdline bot.mpsl.elf File opened for reading /proc/136/cmdline bot.mpsl.elf File opened for reading /proc/731/cmdline bot.mpsl.elf File opened for reading /proc/787/cmdline bot.mpsl.elf File opened for reading /proc/26/cmdline bot.mpsl.elf File opened for reading /proc/29/cmdline bot.mpsl.elf File opened for reading /proc/4/cmdline bot.mpsl.elf File opened for reading /proc/671/cmdline bot.mpsl.elf File opened for reading /proc/764/cmdline bot.mpsl.elf File opened for reading /proc/33/cmdline bot.mpsl.elf File opened for reading /proc/672/cmdline bot.mpsl.elf File opened for reading /proc/30/cmdline bot.mpsl.elf File opened for reading /proc/48/cmdline bot.mpsl.elf File opened for reading /proc/257/cmdline bot.mpsl.elf File opened for reading /proc/754/cmdline bot.mpsl.elf File opened for reading /proc/776/cmdline bot.mpsl.elf File opened for reading /proc/6/cmdline bot.mpsl.elf File opened for reading /proc/18/cmdline bot.mpsl.elf File opened for reading /proc/118/cmdline bot.mpsl.elf File opened for reading /proc/750/cmdline bot.mpsl.elf File opened for reading /proc/760/cmdline bot.mpsl.elf File opened for reading /proc/20/cmdline bot.mpsl.elf File opened for reading /proc/23/cmdline bot.mpsl.elf File opened for reading /proc/772/cmdline bot.mpsl.elf File opened for reading /proc/375/cmdline bot.mpsl.elf File opened for reading /proc/765/cmdline bot.mpsl.elf