Overview

overview

6

Static

static

6

theZoo-0.6...t__.py

windows7-x64

3

theZoo-0.6...t__.py

windows10-2004-x64

3

theZoo-0.6...ler.py

windows7-x64

3

theZoo-0.6...ler.py

windows10-2004-x64

3

theZoo-0.6...ler.py

ubuntu-18.04-amd64

1

theZoo-0.6...ler.py

debian-9-armhf

1

theZoo-0.6...ler.py

debian-9-mips

1

theZoo-0.6...ler.py

debian-9-mipsel

1

theZoo-0.6...als.py

ubuntu-18.04-amd64

1

theZoo-0.6...als.py

debian-9-armhf

1

theZoo-0.6...als.py

debian-9-mips

1

theZoo-0.6...als.py

debian-9-mipsel

1

theZoo-0.6...hes.py

windows7-x64

3

theZoo-0.6...hes.py

windows10-2004-x64

3

theZoo-0.6...ngs.py

ubuntu-18.04-amd64

1

theZoo-0.6...ngs.py

debian-9-armhf

1

theZoo-0.6...ngs.py

debian-9-mips

1

theZoo-0.6...ngs.py

debian-9-mipsel

1

theZoo-0.6...ler.py

windows7-x64

3

theZoo-0.6...ler.py

windows10-2004-x64

3

theZoo-0.6...ler.py

ubuntu-18.04-amd64

1

theZoo-0.6...ler.py

debian-9-armhf

1

theZoo-0.6...ler.py

debian-9-mips

1

theZoo-0.6...ler.py

debian-9-mipsel

1

AndroRat/a...sample

ubuntu-18.04-amd64

1

AndroRat/a...sample

debian-9-armhf

1

AndroRat/a...sample

debian-9-mips

1

AndroRat/a...sample

debian-9-mipsel

1

AndroRat/a...sample

ubuntu-18.04-amd64

3

AndroRat/a...sample

debian-9-armhf

3

AndroRat/a...sample

debian-9-mips

3

AndroRat/a...sample

debian-9-mipsel

3

Analysis

  • max time kernel
    0s
  • max time network
    128s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    20-08-2024 13:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    AndroRat/androrat/.git/hooks/commit-msg.sample

  • Size

    896B

  • MD5

    579a3c1e12a1e74a98169175fb913012

  • SHA1

    ee1ed5aad98a435f2020b6de35c173b75d9affac

  • SHA256

    1f74d5e9292979b573ebd59741d46cb93ff391acdd083d340b94370753d92437

  • SHA512

    d6bb7fa747f4625adf1877f546565cbe812ca7dd4168f7e9068e6732555d8737eba549546cf5946649e3f38de82d173aaf9c160a4c9f9445655258b4c5f955eb

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/AndroRat/androrat/.git/hooks/commit-msg.sample
    /tmp/AndroRat/androrat/.git/hooks/commit-msg.sample
    1⤵
      PID:1502
      • /usr/bin/sort
        sort
        2⤵
          PID:1505
        • /usr/bin/uniq
          uniq -c
          2⤵
            PID:1506
          • /bin/sed
            sed -e "/^[ ]*1[ ]/d"
            2⤵
            • Reads runtime system information
            PID:1507
          • /bin/grep
            grep "^Signed-off-by: "
            2⤵
              PID:1504

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads