Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

EdiAf.mpsl.elf

debian-12-mipsel

7

Analysis

  • max time kernel
    131s
  • max time network
    150s
  • platform
    debian-12_mipsel
  • resource
    debian12-mipsel-20240729-en
  • resource tags

    arch:mipselimage:debian12-mipsel-20240729-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
  • submitted
    03/02/2025, 10:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    EdiAf.mpsl.elf

  • Size

    98KB

  • MD5

    15a5a8e9274911d77a2f712c844e9ce4

  • SHA1

    5a99c4100991a874b25a98c7e73a46689f5378f2

  • SHA256

    0a2c9150391cf228a7ce859473d8adce0fd4b2e10c71f6cf76e53abbff66aab3

  • SHA512

    987e68ae81f29bd8338782c77c4fae9d47bd89764279061771272bb3f386ff24b9a1e03f9643b06922f731a4371522ab62d04f5212eeb5569aa2801f5fc49147

  • SSDEEP

    1536:byxgEvcKwxXHQu9+c8qXKG3+7Tjq35dRhJpNemTZNh+uSZW4J/:byxgEvcKwxxXKGDdRhJOmTIY4J

Score
7/10
defense_evasiondiscovery

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  • Writes file to system bin folder 2 IoCs
  • Changes its process name 1 IoCs
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/EdiAf.mpsl.elf
    /tmp/EdiAf.mpsl.elf
    1⤵
    • Deletes itself
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    • Changes its process name
    • Reads runtime system information
    PID:740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads