Overview

overview

7

Static

static

7

theZoo-0.6...t__.py

windows7-x64

3

theZoo-0.6...t__.py

windows10-2004-x64

3

theZoo-0.6...ler.py

windows7-x64

3

theZoo-0.6...ler.py

windows10-2004-x64

3

theZoo-0.6...ler.py

ubuntu-18.04-amd64

1

theZoo-0.6...ler.py

debian-9-armhf

1

theZoo-0.6...ler.py

debian-9-mips

1

theZoo-0.6...ler.py

debian-9-mipsel

1

theZoo-0.6...als.py

ubuntu-18.04-amd64

1

theZoo-0.6...als.py

debian-9-armhf

1

theZoo-0.6...als.py

debian-9-mips

1

theZoo-0.6...als.py

debian-9-mipsel

1

theZoo-0.6...hes.py

windows7-x64

3

theZoo-0.6...hes.py

windows10-2004-x64

3

theZoo-0.6...ngs.py

ubuntu-18.04-amd64

1

theZoo-0.6...ngs.py

debian-9-armhf

1

theZoo-0.6...ngs.py

debian-9-mips

1

theZoo-0.6...ngs.py

debian-9-mipsel

1

theZoo-0.6...ler.py

windows7-x64

3

theZoo-0.6...ler.py

windows10-2004-x64

3

theZoo-0.6...ler.py

ubuntu-18.04-amd64

1

theZoo-0.6...ler.py

debian-9-armhf

1

theZoo-0.6...ler.py

debian-9-mips

1

theZoo-0.6...ler.py

debian-9-mipsel

1

AndroRat/a...sample

ubuntu-18.04-amd64

1

AndroRat/a...sample

debian-9-armhf

1

AndroRat/a...sample

debian-9-mips

1

AndroRat/a...sample

debian-9-mipsel

1

AndroRat/a...sample

ubuntu-18.04-amd64

3

AndroRat/a...sample

debian-9-armhf

1

AndroRat/a...sample

debian-9-mips

3

AndroRat/a...sample

debian-9-mipsel

3

Analysis

  • max time kernel
    37s
  • max time network
    157s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20230831-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20230831-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    11-10-2023 15:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    AndroRat/androrat/.git/hooks/commit-msg.sample

  • Size

    896B

  • MD5

    579a3c1e12a1e74a98169175fb913012

  • SHA1

    ee1ed5aad98a435f2020b6de35c173b75d9affac

  • SHA256

    1f74d5e9292979b573ebd59741d46cb93ff391acdd083d340b94370753d92437

  • SHA512

    d6bb7fa747f4625adf1877f546565cbe812ca7dd4168f7e9068e6732555d8737eba549546cf5946649e3f38de82d173aaf9c160a4c9f9445655258b4c5f955eb

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/AndroRat/androrat/.git/hooks/commit-msg.sample
    /tmp/AndroRat/androrat/.git/hooks/commit-msg.sample
    1⤵
      PID:339
    • /bin/grep
      grep "^Signed-off-by: "
      1⤵
        PID:341
      • /usr/bin/sort
        sort
        1⤵
          PID:342
        • /usr/bin/uniq
          uniq -c
          1⤵
            PID:343
          • /bin/sed
            sed -e "/^[ ]*1[ ]/d"
            1⤵
            • Reads runtime system information
            PID:344

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads