Overview
overview
3Static
static
1Payload/Ho...ot Tub
macos-10.15-amd64
1Payload/Ho...fig.py
ubuntu-18.04-amd64
Payload/Ho...fig.py
debian-9-armhf
Payload/Ho...fig.py
debian-9-mips
Payload/Ho...fig.py
debian-9-mipsel
email/mime...art.py
windows7-x64
3email/mime...art.py
windows10-2004-x64
3email/mime/text.py
windows7-x64
3email/mime/text.py
windows10-2004-x64
3email/parser.py
windows7-x64
3email/parser.py
windows10-2004-x64
3email/policy.py
windows7-x64
3email/policy.py
windows10-2004-x64
3email/quoprimime.py
windows7-x64
3email/quoprimime.py
windows10-2004-x64
3email/utils.py
windows7-x64
3email/utils.py
windows10-2004-x64
3encodings/__init__.py
windows7-x64
3encodings/__init__.py
windows10-2004-x64
3encodings/aliases.py
windows7-x64
3encodings/aliases.py
windows10-2004-x64
3encodings/ascii.py
windows7-x64
3encodings/ascii.py
windows10-2004-x64
3encodings/...dec.py
windows7-x64
3encodings/...dec.py
windows10-2004-x64
3encodings/big5.py
windows7-x64
3encodings/big5.py
windows10-2004-x64
3encodings/...scs.py
windows7-x64
3encodings/...scs.py
windows10-2004-x64
3encodings/...dec.py
windows7-x64
3encodings/...dec.py
windows10-2004-x64
3encodings/charmap.py
windows7-x64
3Analysis
-
max time kernel
77s -
max time network
139s -
platform
macos-10.15_amd64 -
resource
macos-20241106-en -
resource tags
arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
28/03/2025, 13:40
Static task
static1
Behavioral task
behavioral1
Sample
Payload/Hot Tub.app/Hot Tub
Resource
macos-20241106-en
Behavioral task
behavioral2
Sample
Payload/Hot Tub.app/Python-iOS_PythonSupport.bundle/lib/python3.10/config-3.10-darwin/python-config.py
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral3
Sample
Payload/Hot Tub.app/Python-iOS_PythonSupport.bundle/lib/python3.10/config-3.10-darwin/python-config.py
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral4
Sample
Payload/Hot Tub.app/Python-iOS_PythonSupport.bundle/lib/python3.10/config-3.10-darwin/python-config.py
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral5
Sample
Payload/Hot Tub.app/Python-iOS_PythonSupport.bundle/lib/python3.10/config-3.10-darwin/python-config.py
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral6
Sample
email/mime/nonmultipart.py
Resource
win7-20240903-en
Behavioral task
behavioral7
Sample
email/mime/nonmultipart.py
Resource
win10v2004-20250314-en
Behavioral task
behavioral8
Sample
email/mime/text.py
Resource
win7-20240903-en
Behavioral task
behavioral9
Sample
email/mime/text.py
Resource
win10v2004-20250314-en
Behavioral task
behavioral10
Sample
email/parser.py
Resource
win7-20240903-en
Behavioral task
behavioral11
Sample
email/parser.py
Resource
win10v2004-20250313-en
Behavioral task
behavioral12
Sample
email/policy.py
Resource
win7-20241010-en
Behavioral task
behavioral13
Sample
email/policy.py
Resource
win10v2004-20250314-en
Behavioral task
behavioral14
Sample
email/quoprimime.py
Resource
win7-20241023-en
Behavioral task
behavioral15
Sample
email/quoprimime.py
Resource
win10v2004-20250313-en
Behavioral task
behavioral16
Sample
email/utils.py
Resource
win7-20240903-en
Behavioral task
behavioral17
Sample
email/utils.py
Resource
win10v2004-20250314-en
Behavioral task
behavioral18
Sample
encodings/__init__.py
Resource
win7-20240729-en
Behavioral task
behavioral19
Sample
encodings/__init__.py
Resource
win10v2004-20250314-en
Behavioral task
behavioral20
Sample
encodings/aliases.py
Resource
win7-20240903-en
Behavioral task
behavioral21
Sample
encodings/aliases.py
Resource
win10v2004-20250313-en
Behavioral task
behavioral22
Sample
encodings/ascii.py
Resource
win7-20241010-en
Behavioral task
behavioral23
Sample
encodings/ascii.py
Resource
win10v2004-20250314-en
Behavioral task
behavioral24
Sample
encodings/base64_codec.py
Resource
win7-20240903-en
Behavioral task
behavioral25
Sample
encodings/base64_codec.py
Resource
win10v2004-20250314-en
Behavioral task
behavioral26
Sample
encodings/big5.py
Resource
win7-20240903-en
Behavioral task
behavioral27
Sample
encodings/big5.py
Resource
win10v2004-20250314-en
Behavioral task
behavioral28
Sample
encodings/big5hkscs.py
Resource
win7-20241023-en
Behavioral task
behavioral29
Sample
encodings/big5hkscs.py
Resource
win10v2004-20250313-en
Behavioral task
behavioral30
Sample
encodings/bz2_codec.py
Resource
win7-20241010-en
Behavioral task
behavioral31
Sample
encodings/bz2_codec.py
Resource
win10v2004-20250314-en
Behavioral task
behavioral32
Sample
encodings/charmap.py
Resource
win7-20240903-en
General
-
Target
Payload/Hot Tub.app/Hot Tub
-
Size
50.4MB
-
MD5
2255238bfe1a3c524113bc641222e2fc
-
SHA1
7b13c4063f13af052e995e93e5162890c908d3dc
-
SHA256
d53ce22dd137b92661a07cbd1cdc7846ae1caf67389c8e34cad7f4d6fe1c474f
-
SHA512
ecdc4ed34d42f604d798e68c17ff3c6c8428d700dfaf42526aee3ed40cadca4642e51c825a530bf4891ae9c6872b05052347a9d73e71af718d84a988c1dbeb1f
-
SSDEEP
786432:DXr1q0MIcZtkTu9HhqPQfZbTuwFGm9dqDzEg:/40+e
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Payload/Hot Tub.app/Hot Tub\""1⤵PID:480
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Payload/Hot Tub.app/Hot Tub\""1⤵PID:480
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Payload/Hot Tub.app/Hot Tub"1⤵PID:480
-
/bin/zsh/bin/zsh -c "/Users/run/Payload/Hot Tub.app/Hot Tub"2⤵PID:481
-
-
/Users/run/Payload/Hot/Users/run/Payload/Hot Tub.app/Hot Tub2⤵PID:481
-