General
- Target ohshit.arm7.elf
- Size 192KB
- Sample260720-axn2ysas3m
- SHA256 517164c29c0e178b1bb4613d3d5ceb552329c9596791624d8277f2dc5ba37c50
- MD5 889ec695feeae43ccd91b66a544734e2
- SHA1 1ae5a73fc8778fde5f283b0c2ba3ace213415dc7
- SHA512 12cb8c96179a13c63e47d0fcf5ca49fa67226fc3b3f642eea1f8921a1e076c6d056bcf63043495f7cd412d95d9a314667c8472e091d052b1a44c746f21751fb2
- SSDEEP 6144:FMOTrLD1PYH5hJaeXHJMGrjtEKbCMblbIjOAM/9GH7:FMOXH1PeXJaqHJMGrjtZNN/5/kb
- TLSH T15C144B46EA418A13C0D727B9B69F524A33339764D3DB33069D18AFB43F8679E0E67601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
ohshit.arm7.elf
Resource
debian12-armhf-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target ohshit.arm7.elf
- Size 192KB
- SHA256 517164c29c0e178b1bb4613d3d5ceb552329c9596791624d8277f2dc5ba37c50
- MD5 889ec695feeae43ccd91b66a544734e2
- SHA1 1ae5a73fc8778fde5f283b0c2ba3ace213415dc7
- SHA512 12cb8c96179a13c63e47d0fcf5ca49fa67226fc3b3f642eea1f8921a1e076c6d056bcf63043495f7cd412d95d9a314667c8472e091d052b1a44c746f21751fb2
- SSDEEP 6144:FMOTrLD1PYH5hJaeXHJMGrjtEKbCMblbIjOAM/9GH7:FMOXH1PeXJaqHJMGrjtZNN/5/kb
- TLSH T15C144B46EA418A13C0D727B9B69F524A33339764D3DB33069D18AFB43F8679E0E67601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder