General
- Target ohshit.sh
- Size 2KB
- Sample260331-pps39saw5j
- SHA256 ac12224d300baa85a2ccb8becb3f9cc01c6165ea77a0f41cc17e14f6d7ea4185
- MD5 242c5bd5126ac5b4d54ca6a97edf0678
- SHA1 747cb3c753e528c69a80fe2421aae8b5aa19fc86
- SHA512 6d2209f666693565bca450e0f6cb3213cabcbadbb8641a977b49a59b537714de1afe7b1aadc771df9a79943de3ac169027a399da0b48e34d1759bad6a55670a2
- TLSH T1C751F4C445849E75ACB7EA52BAB6C21C7092A4C314DF7F9ADEC8B9E0858EE10F140793
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
ohshit.sh
Resource
ubuntu1804-amd64-20260127-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
ohshit.sh
Resource
debian9-armhf-20260127-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
ohshit.sh
Resource
debian9-mipsbe-20260127-en
9 signatures
150 seconds
Behavioral task
behavioral4
Sample
ohshit.sh
Resource
debian9-mipsel-20260127-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ohshit.sh
- Size 2KB
- SHA256 ac12224d300baa85a2ccb8becb3f9cc01c6165ea77a0f41cc17e14f6d7ea4185
- MD5 242c5bd5126ac5b4d54ca6a97edf0678
- SHA1 747cb3c753e528c69a80fe2421aae8b5aa19fc86
- SHA512 6d2209f666693565bca450e0f6cb3213cabcbadbb8641a977b49a59b537714de1afe7b1aadc771df9a79943de3ac169027a399da0b48e34d1759bad6a55670a2
- TLSH T1C751F4C445849E75ACB7EA52BAB6C21C7092A4C314DF7F9ADEC8B9E0858EE10F140793
- MD5 SHA1 SHA512 TLSH
Score7/10File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
Deletes itself
Executes dropped EXE
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1