General
- Target ohshit.arm7
- Size 193KB
- Sample260806-anpl5azbne
- SHA256 5b769a715939762d66fdefbed016abfe5e3d63412b53ea17ec79d1731f728fd0
- MD5 be65a5a006fe21fdf6ef4d4ab6a5d18c
- SHA1 0f54df8d40f710543bce515e7359c6cedbe58e12
- SHA512 f42e1073a775a7d1eb40ac6c772a6ca1af153541ca7fc92f275b594d0445cc1e56e198cfead44ade9a7592f0b4bcfe901f97b9bf4a7f3e8fc4192c7c3e7b6050
- SSDEEP 6144:0110OUSwJLath1UAmydRDR2GclFGOHoxM/9PeM6L:01eOUSILaj1UAmydR1r4m2/phC
- TLSH T1C0144B46EA404E13C4D717B9BA9F524A3323A765D3DB33068D186FB03B8779E0E67605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
ohshit.arm7
Resource
debian12-armhf-20260127-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target ohshit.arm7
- Size 193KB
- SHA256 5b769a715939762d66fdefbed016abfe5e3d63412b53ea17ec79d1731f728fd0
- MD5 be65a5a006fe21fdf6ef4d4ab6a5d18c
- SHA1 0f54df8d40f710543bce515e7359c6cedbe58e12
- SHA512 f42e1073a775a7d1eb40ac6c772a6ca1af153541ca7fc92f275b594d0445cc1e56e198cfead44ade9a7592f0b4bcfe901f97b9bf4a7f3e8fc4192c7c3e7b6050
- SSDEEP 6144:0110OUSwJLath1UAmydRDR2GclFGOHoxM/9PeM6L:01eOUSILaj1UAmydR1r4m2/phC
- TLSH T1C0144B46EA404E13C4D717B9BA9F524A3323A765D3DB33068D186FB03B8779E0E67605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder