ohshit.sh

First submission 2022-08-03 00:11:01

File details

File type: Bourne-Again shell script, ASCII text executable
File type: 2.87 KB (2940 bytes)
MD5: b37107730f879e60ff26eab9750ab75e
SHA1: 971dc7277f5eef9cc971de369f0d370ea1993733
SHA256: ab92c010f3a32f77c07bbc0fb0712a95bbb8111df481906090051e35178648db
Virus Total: 32/60 VT report date: 2022-08-02 21:00:27

File features detected

Is DLL

Packers

Anti Debug

Anti VM

Signed

XOR

URLs, FQDN and IP indicators 1

URL Host (FQDN/IP) Date Added
hXXp://134.119.1.149/ohshit.sh VirusTotal Report 134.119.1.149 VirusTotal Report 2022-08-03 00:11:01

Strings analysis - Possible IPs found 1

134.119.1.149

Strings analysis - Possible URLs found 30

http://134.119.1.149/hiddenbin/boatnet.arm6;cat
http://134.119.1.149/hiddenbin/boatnet.mpsl;cat
http://134.119.1.149/hiddenbin/boatnet.i686;
http://134.119.1.149/hiddenbin/boatnet.arc;
http://134.119.1.149/hiddenbin/boatnet.m68k;
http://134.119.1.149/hiddenbin/boatnet.arm5;cat
http://134.119.1.149/hiddenbin/boatnet.arc;cat
http://134.119.1.149/hiddenbin/boatnet.sh4;
http://134.119.1.149/hiddenbin/boatnet.arm7;cat
http://134.119.1.149/hiddenbin/boatnet.mips;
http://134.119.1.149/hiddenbin/boatnet.arm;
http://134.119.1.149/hiddenbin/boatnet.sh4;cat
http://134.119.1.149/hiddenbin/boatnet.i686;cat
http://134.119.1.149/hiddenbin/boatnet.m68k;cat
http://134.119.1.149/hiddenbin/boatnet.i468;cat
http://134.119.1.149/hiddenbin/boatnet.ppc;
http://134.119.1.149/hiddenbin/boatnet.x86;
http://134.119.1.149/hiddenbin/boatnet.i468;
http://134.119.1.149/hiddenbin/boatnet.arm6;
http://134.119.1.149/hiddenbin/boatnet.ppc;cat
http://134.119.1.149/hiddenbin/boatnet.arm;cat
http://134.119.1.149/hiddenbin/boatnet.spc;
http://134.119.1.149/hiddenbin/boatnet.x86;cat
http://134.119.1.149/hiddenbin/boatnet.x86_64;cat
http://134.119.1.149/hiddenbin/boatnet.arm7;
http://134.119.1.149/hiddenbin/boatnet.spc;cat
http://134.119.1.149/hiddenbin/boatnet.mpsl;
http://134.119.1.149/hiddenbin/boatnet.x86_64;
http://134.119.1.149/hiddenbin/boatnet.arm5;
http://134.119.1.149/hiddenbin/boatnet.mips;cat