General
- Target ohshit.x86
- Size 121KB
- Sample260623-pctt2acv6q
- SHA256 3ad48bae18b7ea8e7ffe3608b6eeaa4673b6ff47e9e6a21def774eecba66364a
- MD5 59b98f52977620c5e3356981226afc7a
- SHA1 95940e97688109bec4bb27124828abff8272119a
- SHA512 dbf44d491da3af06e5df39e1187f0ff7ed47560c4aea16eac0a1389ce45985f47a1dfccefc9741ebceaef51aeda9ddf9af76d92362dd7b76a87397bc444d7d06
- SSDEEP 3072:P43/Qco2DWxDoB7SFM2L3GeCxDYKDen621IS:P4vDDWtoB7iNLQle/IS
- TLSH T111C329C6E347C0FAE81508F1216BB73299B7C13F542BDA93EB654D61BD529828036BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
ohshit.x86
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target ohshit.x86
- Size 121KB
- SHA256 3ad48bae18b7ea8e7ffe3608b6eeaa4673b6ff47e9e6a21def774eecba66364a
- MD5 59b98f52977620c5e3356981226afc7a
- SHA1 95940e97688109bec4bb27124828abff8272119a
- SHA512 dbf44d491da3af06e5df39e1187f0ff7ed47560c4aea16eac0a1389ce45985f47a1dfccefc9741ebceaef51aeda9ddf9af76d92362dd7b76a87397bc444d7d06
- SSDEEP 3072:P43/Qco2DWxDoB7SFM2L3GeCxDYKDen621IS:P4vDDWtoB7iNLQle/IS
- TLSH T111C329C6E347C0FAE81508F1216BB73299B7C13F542BDA93EB654D61BD529828036BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder