General
- Target ohshit.i686
- Size 129KB
- Sample260627-wwtrpscv8z
- SHA256 c8545034cd4fe71eeadb24dacddc5da95c4311c7112c299f1325801f3e06f928
- MD5 6c533f0ae1236042ce2ac05e81719feb
- SHA1 7170172f780599e295bf76fbaf8f2dcde28d955e
- SHA512 ff0f22f506217fa0bb5ec904e5f1dc5bf0389b7784555a4f8ccdb0d92bd0afe4fab47936b22111ce54d741c9b4fd20ef190e03fbff35ffd8979f4356a373d6c3
- SSDEEP 3072:C1HC8MoqKmibjuoJPsXy8bhXKqIWBpLkizyP62MIT:iEi/uoJPsB33IuIT
- TLSH T1B2D32A86F68780F6E41B88706067B23FCA32857E8033D65AFF955E71EE2758651323C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
ohshit.i686
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target ohshit.i686
- Size 129KB
- SHA256 c8545034cd4fe71eeadb24dacddc5da95c4311c7112c299f1325801f3e06f928
- MD5 6c533f0ae1236042ce2ac05e81719feb
- SHA1 7170172f780599e295bf76fbaf8f2dcde28d955e
- SHA512 ff0f22f506217fa0bb5ec904e5f1dc5bf0389b7784555a4f8ccdb0d92bd0afe4fab47936b22111ce54d741c9b4fd20ef190e03fbff35ffd8979f4356a373d6c3
- SSDEEP 3072:C1HC8MoqKmibjuoJPsXy8bhXKqIWBpLkizyP62MIT:iEi/uoJPsB33IuIT
- TLSH T1B2D32A86F68780F6E41B88706067B23FCA32857E8033D65AFF955E71EE2758651323C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder