General
- Target ohshit.mips
- Size 169KB
- Sample260625-g4wtpsh19p
- SHA256 f9ec1b33dfc61dad616223f2eef5a80d3b9b9165e9035b574eb436b34a78ee8e
- MD5 f46d6f12245effbc5162c077ee1203b9
- SHA1 da7910d7cd36c83e0da9434fd6f0f814f243af9e
- SHA512 d319ad7bd119fefc79f57eb6760c6cb0ac4ad46ea4ab4b8e59199fe793bc28feb0b848628c2da226944719d4a584cfe80b4daf5c23673720caaa81922b1d4ec3
- SSDEEP 3072:Kr2ZBqHbvDmJK9IPluOJI2sSKaShvFO8lI2K8dkngny6UWx8Acyx:Kr2Lq2JK9uoOJI2IhvFO8lnK8ht8AcY
- TLSH T1A304E70EAF214F7DF7A8C57103B36E65965913A72AD2D6C1D16CDA007E6028E242FBF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
ohshit.mips
Resource
debian9-mipsbe-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target ohshit.mips
- Size 169KB
- SHA256 f9ec1b33dfc61dad616223f2eef5a80d3b9b9165e9035b574eb436b34a78ee8e
- MD5 f46d6f12245effbc5162c077ee1203b9
- SHA1 da7910d7cd36c83e0da9434fd6f0f814f243af9e
- SHA512 d319ad7bd119fefc79f57eb6760c6cb0ac4ad46ea4ab4b8e59199fe793bc28feb0b848628c2da226944719d4a584cfe80b4daf5c23673720caaa81922b1d4ec3
- SSDEEP 3072:Kr2ZBqHbvDmJK9IPluOJI2sSKaShvFO8lI2K8dkngny6UWx8Acyx:Kr2Lq2JK9uoOJI2IhvFO8lnK8ht8AcY
- TLSH T1A304E70EAF214F7DF7A8C57103B36E65965913A72AD2D6C1D16CDA007E6028E242FBF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder