General
- Target ohshit.arm7
- Size 221KB
- Sample260623-g1cawsax6m
- SHA256 8d5eec24052138e24c1342dc054a8e25d2837027b27cfcd7c4f1a7aea597dbbf
- MD5 d9d98306be7d9e7a1ab6027b9ff92f47
- SHA1 442ed04c5c57159906bc3bf166c9ee7db95b387b
- SHA512 9f05879d0904a7726779515f781e868525bc827fd3335e4ad911e9e922d617c5f818a7c155bf856de6ea6e2fd52092d791d68225cd472726833f838b1f8c98c3
- SSDEEP 6144:toqC1uLDadfkQf1DpFJfDiZ08K/zi5GM/9gW2Ku:toF1uLDaBkQfFpFJLE0cn/KL
- TLSH T17B243A43EB408953C0D617B6B6AF624533238775D3EB7306E9186FB03B8669E0E37685
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
ohshit.arm7
Resource
debian12-armhf-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target ohshit.arm7
- Size 221KB
- SHA256 8d5eec24052138e24c1342dc054a8e25d2837027b27cfcd7c4f1a7aea597dbbf
- MD5 d9d98306be7d9e7a1ab6027b9ff92f47
- SHA1 442ed04c5c57159906bc3bf166c9ee7db95b387b
- SHA512 9f05879d0904a7726779515f781e868525bc827fd3335e4ad911e9e922d617c5f818a7c155bf856de6ea6e2fd52092d791d68225cd472726833f838b1f8c98c3
- SSDEEP 6144:toqC1uLDadfkQf1DpFJfDiZ08K/zi5GM/9gW2Ku:toF1uLDaBkQfFpFJLE0cn/KL
- TLSH T17B243A43EB408953C0D617B6B6AF624533238775D3EB7306E9186FB03B8669E0E37685
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder