Overview
overview
7Static
static
7theZoo-0.6...t__.py
windows7-x64
3theZoo-0.6...t__.py
windows10-2004-x64
3theZoo-0.6...ler.py
windows7-x64
3theZoo-0.6...ler.py
windows10-2004-x64
3theZoo-0.6...ler.py
ubuntu-18.04-amd64
1theZoo-0.6...ler.py
debian-9-armhf
1theZoo-0.6...ler.py
debian-9-mips
1theZoo-0.6...ler.py
debian-9-mipsel
1theZoo-0.6...als.py
ubuntu-18.04-amd64
1theZoo-0.6...als.py
debian-9-armhf
1theZoo-0.6...als.py
debian-9-mips
1theZoo-0.6...als.py
debian-9-mipsel
1theZoo-0.6...hes.py
windows7-x64
3theZoo-0.6...hes.py
windows10-2004-x64
3theZoo-0.6...ngs.py
ubuntu-18.04-amd64
1theZoo-0.6...ngs.py
debian-9-armhf
1theZoo-0.6...ngs.py
debian-9-mips
1theZoo-0.6...ngs.py
debian-9-mipsel
1theZoo-0.6...ler.py
windows7-x64
3theZoo-0.6...ler.py
windows10-2004-x64
3theZoo-0.6...ler.py
ubuntu-18.04-amd64
1theZoo-0.6...ler.py
debian-9-armhf
1theZoo-0.6...ler.py
debian-9-mips
1theZoo-0.6...ler.py
debian-9-mipsel
1AndroRat/a...sample
ubuntu-18.04-amd64
1AndroRat/a...sample
debian-9-armhf
1AndroRat/a...sample
debian-9-mips
1AndroRat/a...sample
debian-9-mipsel
1AndroRat/a...sample
ubuntu-18.04-amd64
3AndroRat/a...sample
debian-9-armhf
1AndroRat/a...sample
debian-9-mips
3AndroRat/a...sample
debian-9-mipsel
3Analysis
-
max time kernel
11s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20230831-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20230831-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
11-10-2023 15:48
Static task
static1
Behavioral task
behavioral1
Sample
theZoo-0.60/imports/__init__.py
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
theZoo-0.60/imports/__init__.py
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
theZoo-0.60/imports/db_handler.py
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
theZoo-0.60/imports/db_handler.py
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
theZoo-0.60/imports/eula_handler.py
Resource
ubuntu1804-amd64-20230831-en
Behavioral task
behavioral6
Sample
theZoo-0.60/imports/eula_handler.py
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral7
Sample
theZoo-0.60/imports/eula_handler.py
Resource
debian9-mipsbe-20230831-en
Behavioral task
behavioral8
Sample
theZoo-0.60/imports/eula_handler.py
Resource
debian9-mipsel-20230831-en
Behavioral task
behavioral9
Sample
theZoo-0.60/imports/globals.py
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral10
Sample
theZoo-0.60/imports/globals.py
Resource
debian9-armhf-20230831-en
Behavioral task
behavioral11
Sample
theZoo-0.60/imports/globals.py
Resource
debian9-mipsbe-20230831-en
Behavioral task
behavioral12
Sample
theZoo-0.60/imports/globals.py
Resource
debian9-mipsel-20230831-en
Behavioral task
behavioral13
Sample
theZoo-0.60/imports/manysearches.py
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
theZoo-0.60/imports/manysearches.py
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
theZoo-0.60/imports/muchmuchstrings.py
Resource
ubuntu1804-amd64-20230831-en
Behavioral task
behavioral16
Sample
theZoo-0.60/imports/muchmuchstrings.py
Resource
debian9-armhf-20230831-en
Behavioral task
behavioral17
Sample
theZoo-0.60/imports/muchmuchstrings.py
Resource
debian9-mipsbe-20230831-en
Behavioral task
behavioral18
Sample
theZoo-0.60/imports/muchmuchstrings.py
Resource
debian9-mipsel-20230831-en
Behavioral task
behavioral19
Sample
theZoo-0.60/imports/terminal_handler.py
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
theZoo-0.60/imports/terminal_handler.py
Resource
win10v2004-20230915-en
Behavioral task
behavioral21
Sample
theZoo-0.60/imports/updatehandler.py
Resource
ubuntu1804-amd64-20230831-en
Behavioral task
behavioral22
Sample
theZoo-0.60/imports/updatehandler.py
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral23
Sample
theZoo-0.60/imports/updatehandler.py
Resource
debian9-mipsbe-20230831-en
Behavioral task
behavioral24
Sample
theZoo-0.60/imports/updatehandler.py
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral25
Sample
AndroRat/androrat/.git/hooks/applypatch-msg.sample
Resource
ubuntu1804-amd64-20230831-en
Behavioral task
behavioral26
Sample
AndroRat/androrat/.git/hooks/applypatch-msg.sample
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral27
Sample
AndroRat/androrat/.git/hooks/applypatch-msg.sample
Resource
debian9-mipsbe-20230831-en
Behavioral task
behavioral28
Sample
AndroRat/androrat/.git/hooks/applypatch-msg.sample
Resource
debian9-mipsel-20230831-en
Behavioral task
behavioral29
Sample
AndroRat/androrat/.git/hooks/commit-msg.sample
Resource
ubuntu1804-amd64-20230831-en
Behavioral task
behavioral30
Sample
AndroRat/androrat/.git/hooks/commit-msg.sample
Resource
debian9-armhf-20230831-en
Behavioral task
behavioral31
Sample
AndroRat/androrat/.git/hooks/commit-msg.sample
Resource
debian9-mipsbe-20230831-en
Behavioral task
behavioral32
Sample
AndroRat/androrat/.git/hooks/commit-msg.sample
Resource
debian9-mipsel-en-20211208
General
-
Target
theZoo-0.60/imports/eula_handler.py
-
Size
2KB
-
MD5
5945243f20801ac5cae79006709245cd
-
SHA1
1b6a6f1988a0eb6c813bac4e7808b5f65da93cbc
-
SHA256
7b295025e92902fc9a5ab3903f11f5131e09916ac6968dbc7137c32b958e4b55
-
SHA512
d0301e61c2b7ab38b2170ba3f999ae08a7554d6a588c6486db7e24fae21ce003b01d883fe78e6eaf6771bfc0f651bf64891bb49b5b253cb3f92123abcaf722d9
Malware Config
Signatures
Processes
-
/tmp/theZoo-0.60/imports/eula_handler.py/tmp/theZoo-0.60/imports/eula_handler.py1⤵PID:606
-
/usr/local/sbin/pythonpython /tmp/theZoo-0.60/imports/eula_handler.py1⤵PID:606
-
/usr/local/bin/pythonpython /tmp/theZoo-0.60/imports/eula_handler.py1⤵PID:606
-
/usr/sbin/pythonpython /tmp/theZoo-0.60/imports/eula_handler.py1⤵PID:606
-
/usr/bin/pythonpython /tmp/theZoo-0.60/imports/eula_handler.py1⤵PID:606
-
/sbin/pythonpython /tmp/theZoo-0.60/imports/eula_handler.py1⤵PID:606
-
/bin/pythonpython /tmp/theZoo-0.60/imports/eula_handler.py1⤵PID:606