Overview
overview
6Static
static
6theZoo-0.6...t__.py
windows7-x64
3theZoo-0.6...t__.py
windows10-2004-x64
3theZoo-0.6...ler.py
windows7-x64
3theZoo-0.6...ler.py
windows10-2004-x64
3theZoo-0.6...ler.py
ubuntu-18.04-amd64
1theZoo-0.6...ler.py
debian-9-armhf
1theZoo-0.6...ler.py
debian-9-mips
1theZoo-0.6...ler.py
debian-9-mipsel
1theZoo-0.6...als.py
ubuntu-18.04-amd64
1theZoo-0.6...als.py
debian-9-armhf
1theZoo-0.6...als.py
debian-9-mips
1theZoo-0.6...als.py
debian-9-mipsel
1theZoo-0.6...hes.py
windows7-x64
3theZoo-0.6...hes.py
windows10-2004-x64
3theZoo-0.6...ngs.py
ubuntu-18.04-amd64
1theZoo-0.6...ngs.py
debian-9-armhf
1theZoo-0.6...ngs.py
debian-9-mips
1theZoo-0.6...ngs.py
debian-9-mipsel
1theZoo-0.6...ler.py
windows7-x64
3theZoo-0.6...ler.py
windows10-2004-x64
3theZoo-0.6...ler.py
ubuntu-18.04-amd64
1theZoo-0.6...ler.py
debian-9-armhf
1theZoo-0.6...ler.py
debian-9-mips
1theZoo-0.6...ler.py
debian-9-mipsel
1AndroRat/a...sample
ubuntu-18.04-amd64
1AndroRat/a...sample
debian-9-armhf
1AndroRat/a...sample
debian-9-mips
1AndroRat/a...sample
debian-9-mipsel
1AndroRat/a...sample
ubuntu-18.04-amd64
3AndroRat/a...sample
debian-9-armhf
3AndroRat/a...sample
debian-9-mips
3AndroRat/a...sample
debian-9-mipsel
3Analysis
-
max time kernel
5s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240729-en -
resource tags
arch:mipselimage:debian9-mipsel-20240729-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
20-08-2024 13:39
Static task
static1
Behavioral task
behavioral1
Sample
theZoo-0.60/imports/__init__.py
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
theZoo-0.60/imports/__init__.py
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
theZoo-0.60/imports/db_handler.py
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
theZoo-0.60/imports/db_handler.py
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
theZoo-0.60/imports/eula_handler.py
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral6
Sample
theZoo-0.60/imports/eula_handler.py
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral7
Sample
theZoo-0.60/imports/eula_handler.py
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral8
Sample
theZoo-0.60/imports/eula_handler.py
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral9
Sample
theZoo-0.60/imports/globals.py
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral10
Sample
theZoo-0.60/imports/globals.py
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral11
Sample
theZoo-0.60/imports/globals.py
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral12
Sample
theZoo-0.60/imports/globals.py
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral13
Sample
theZoo-0.60/imports/manysearches.py
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
theZoo-0.60/imports/manysearches.py
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
theZoo-0.60/imports/muchmuchstrings.py
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral16
Sample
theZoo-0.60/imports/muchmuchstrings.py
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral17
Sample
theZoo-0.60/imports/muchmuchstrings.py
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral18
Sample
theZoo-0.60/imports/muchmuchstrings.py
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral19
Sample
theZoo-0.60/imports/terminal_handler.py
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
theZoo-0.60/imports/terminal_handler.py
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
theZoo-0.60/imports/updatehandler.py
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral22
Sample
theZoo-0.60/imports/updatehandler.py
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral23
Sample
theZoo-0.60/imports/updatehandler.py
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral24
Sample
theZoo-0.60/imports/updatehandler.py
Resource
debian9-mipsel-20240729-en
Behavioral task
behavioral25
Sample
AndroRat/androrat/.git/hooks/applypatch-msg.sample
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral26
Sample
AndroRat/androrat/.git/hooks/applypatch-msg.sample
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral27
Sample
AndroRat/androrat/.git/hooks/applypatch-msg.sample
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral28
Sample
AndroRat/androrat/.git/hooks/applypatch-msg.sample
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral29
Sample
AndroRat/androrat/.git/hooks/commit-msg.sample
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral30
Sample
AndroRat/androrat/.git/hooks/commit-msg.sample
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral31
Sample
AndroRat/androrat/.git/hooks/commit-msg.sample
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral32
Sample
AndroRat/androrat/.git/hooks/commit-msg.sample
Resource
debian9-mipsel-20240729-en
General
-
Target
theZoo-0.60/imports/updatehandler.py
-
Size
4KB
-
MD5
5201cb5157cacb4ab9f9effe96c21df0
-
SHA1
927f864c9004ea4ea16e5fa06889316ee7726644
-
SHA256
9a1af354c7e8649e18713c871f1a70c9c1e3dc3466d4b920fe95e3cc80f0d127
-
SHA512
c027e9502031b7d4406d44209c5460c1c9fe751d5d292eec943e914b1de7234016e371ae140bdf245f97cad043949030d006662ca4fff9a9e69d66bdf056af9d
-
SSDEEP
96:3A9NabL3WNL5WGjtAtSCy3ipV45tSCyx95tSCy+:qsbLgL5WG8SCFpmbSC+bSCp
Malware Config
Signatures
Processes
-
/tmp/theZoo-0.60/imports/updatehandler.py/tmp/theZoo-0.60/imports/updatehandler.py1⤵PID:725
-
/usr/local/sbin/pythonpython /tmp/theZoo-0.60/imports/updatehandler.py1⤵PID:725
-
/usr/local/bin/pythonpython /tmp/theZoo-0.60/imports/updatehandler.py1⤵PID:725
-
/usr/sbin/pythonpython /tmp/theZoo-0.60/imports/updatehandler.py1⤵PID:725
-
/usr/bin/pythonpython /tmp/theZoo-0.60/imports/updatehandler.py1⤵PID:725