Overview

overview

3

Static

static

1

NO-EXTENSI...10.zip

windows7-x64

1

NO-EXTENSI...10.zip

windows10-2004-x64

1

Payload/Ap...Apollo

macos-10.15-amd64

1

Payload/Ap...ts.xml

windows7-x64

1

Payload/Ap...ts.xml

windows10-2004-x64

1

Payload/Ap...2x.png

windows7-x64

3

Payload/Ap...2x.png

windows10-2004-x64

3

Payload/Ap...ad.png

windows7-x64

3

Payload/Ap...ad.png

windows10-2004-x64

3

Payload/Ap...ts.car

windows7-x64

3

Payload/Ap...ts.car

windows10-2004-x64

3

Payload/Ap...et.xml

windows7-x64

1

Payload/Ap...et.xml

windows10-2004-x64

1

Payload/Ap...ll.nib

windows7-x64

3

Payload/Ap...ll.nib

windows10-2004-x64

3

Payload/Ap...t3.nib

windows7-x64

3

Payload/Ap...t3.nib

windows10-2004-x64

3

Payload/Ap....plist

windows7-x64

3

Payload/Ap....plist

windows10-2004-x64

3

Payload/Ap...VM.nib

windows7-x64

3

Payload/Ap...VM.nib

windows10-2004-x64

3

Payload/Ap...ll.nib

windows7-x64

3

Payload/Ap...ll.nib

windows10-2004-x64

3

Payload/Ap....plist

windows7-x64

3

Payload/Ap....plist

windows10-2004-x64

3

Payload/Ap...ll.nib

windows7-x64

3

Payload/Ap...ll.nib

windows10-2004-x64

3

Payload/Ap....plist

windows7-x64

3

Payload/Ap....plist

windows10-2004-x64

3

Payload/Ap...orking

macos-10.15-amd64

1

Payload/Ap....plist

windows7-x64

3

Payload/Ap....plist

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NO-EXTENSIONS_Apollo-1.15.11_improvedcustomapi-1.0.10.ipa

  • Size

    68.0MB

  • Sample

    240307-jnzlrsfc66

  • MD5

    86310477bf1162e0d932d7e06b70f5fe

  • SHA1

    629222e67a7a0e3efeea99a691b6edd8196823f0

  • SHA256

    51243079995f79a55cb37c432a3ba9e38689e78a215f109b409bc19b4bb7be8f

  • SHA512

    f946320af3b9666498333770fa1e69dbba6053f359b4c013a6742a8114db15662d512daeee69941514c7483cd6e124a94c88f60cd03da4e1b546c0e78e125b8d

  • SSDEEP

    1572864:EbpPWS/NpMDKsoqgA11SdwZEe8CYw91yKatb7mzE69RbIuuC3x4B1M7d0MR:ApPW8Ef7+wZEFCl1yKad7mAqbnH+BI

Score
3/10
macos

Malware Config

Targets

    • Target

      NO-EXTENSIONS_Apollo-1.15.11_improvedcustomapi-1.0.10.ipa

    • Size

      68.0MB

    • MD5

      86310477bf1162e0d932d7e06b70f5fe

    • SHA1

      629222e67a7a0e3efeea99a691b6edd8196823f0

    • SHA256

      51243079995f79a55cb37c432a3ba9e38689e78a215f109b409bc19b4bb7be8f

    • SHA512

      f946320af3b9666498333770fa1e69dbba6053f359b4c013a6742a8114db15662d512daeee69941514c7483cd6e124a94c88f60cd03da4e1b546c0e78e125b8d

    • SSDEEP

      1572864:EbpPWS/NpMDKsoqgA11SdwZEe8CYw91yKatb7mzE69RbIuuC3x4B1M7d0MR:ApPW8Ef7+wZEFCl1yKad7mAqbnH+BI

    Score
    1/10
    behavioral1behavioral2

    • Target

      Payload/Apollo.app/Apollo

    • Size

      13.9MB

    • MD5

      b5108ca4c536d26c8782aa84c129feac

    • SHA1

      193572b96fa84a744708474ee4c8fd1910bf09d0

    • SHA256

      0fb6fa0cb58c997177ccd560b95f8825dbd2ee8df219e96ede70ffcb1111ca86

    • SHA512

      7766407f459042c3fda2366735d9b8bb25ae347f99e45f7b8790b7575e676441222e578fce8e8d2c1f08e13270c5dca2279f0ce29ea449a06bc6b4617707a6c3

    • SSDEEP

      196608:bpE3ZQDc9rBGIg+V457XQtaP49y3R07JNfTcg+viFJn1b2FJad1lCXvXiUQErzJ2:RkSJRvBLj+gHJ7BNC

    Score
    1/10
    behavioral3

    • Target

      Payload/Apollo.app/ApolloIntents.intentdefinition

    • Size

      12KB

    • MD5

      8d36005e81517741acaf0490db898d23

    • SHA1

      4dc8ea987e9bf7743b92da4eb1c60555b1898ffb

    • SHA256

      40f0cdc73192304cb02432f6fdf3b6a73f7fcbb30dfd69f5eb81dfeb44961bed

    • SHA512

      c66fad1e92802d885ee7dfea18f4e5a645b84c4653d3f857ee4c499b1d8fc8d32198a83352744e171a19c2a75a3ec69b1847a4e8474279670db7c0454b9721a8

    • SSDEEP

      384:6IbotLtaXBNxO8QS+EVwkb98a1VHiWigCkoZms0F0Z000J0gjBxm0r6cBkDNVgsX:BhcCFzC

    Score
    1/10
    behavioral4behavioral5

    • Target

      Payload/Apollo.app/[email protected]

    • Size

      9KB

    • MD5

      d2cf69103466f8158f25c53649f327c5

    • SHA1

      fa54bbc3007f961c576f6916f651467b8cc84a6f

    • SHA256

      04ce948b3c0d425c42ae4eb322bafc2406fd63552d840bca24e5a2be79c16a54

    • SHA512

      5757ea128b0a3bf2fe20bbfa35b0f1cf96568a5e8801f06d6b0fdeb7f5eb1b95a4c2d12f42e65785ebf6b8ae274e9c65b13c83887a9f770485578dd856eb0295

    • SSDEEP

      192:SIQho/vDQ3MYTi+X6J2T94BJtJD8JlENBfsObOtl7lpnMgLCvGy2E:Lwo/v035hqJq9AtJQJl6lbOndCvGy2E

    Score
    3/10
    behavioral6behavioral7

    • Target

      Payload/Apollo.app/AppIcon76x76@2x~ipad.png

    • Size

      12KB

    • MD5

      ad0eeaec6e537beeaf0fd5d1b998381c

    • SHA1

      bf8193d2444338b3d3d1fcdec91fbf63a297de8b

    • SHA256

      13d7ddbdbf2cda8866c919bb2054a60a21a48581101d96c481be2ac8f95e9051

    • SHA512

      c2004c4bd9c5b187e95187b1d887bb5adcca30b5d25d6aa75c99edccd2484b7c56196e25e492e6436b91c45771b4e6b469f6b4e5bf0e01a612327dad611e011a

    • SSDEEP

      384:LF5dSJzGOvSw8sU2tHRWoe1Dy3+hazHLpAuCGl:LFDSprSw8B2tHRWoe1Dy3q0tAuCC

    Score
    3/10
    behavioral8behavioral9

    • Target

      Payload/Apollo.app/Assets.car

    • Size

      37.5MB

    • MD5

      0aaa33acfdc7f7a871de3eda65b6823e

    • SHA1

      db51988f87df2c58e758f470ebbf5ad9fcc9b27f

    • SHA256

      4f1717c96f34192d6e871394c4ae3914be402482b5c10f43b6ac1a20f9ac25c5

    • SHA512

      d5ea5bd140d6ef86db4e3f45cd3ef064826143457f5dcf0a1669cc6aab2878bbfdcbf3b1cc631c254dfeb6e64ae37cbfed0ec70ef45aa840ffe96c7dcad747a3

    • SSDEEP

      786432:ohL6vxPVYsMAsx14ANn3341onwu3Q0sd1NixHYZz1VMBlznpMc:ohGvxdh8x14Ad32MOsx4ZPm

    Score
    3/10
    behavioral10behavioral11

    • Target

      Payload/Apollo.app/AthenaWidget.intentdefinition

    • Size

      91KB

    • MD5

      f4ec872b6811f107369c25d335262aad

    • SHA1

      e96ec8206694e567498550eca1ed1b6eae7e1df1

    • SHA256

      7241a1c1304420aa5f8a63d64b179002262a64f4d516043378c940be66095c3a

    • SHA512

      289acc52a387367978f98f00d933d17bc30e8b0ae4ee81598e25f91aad08b87994fb43b02c2bf163ac7f34e026bdae2d7449e58694ba02f02f8af1112a10b162

    • SSDEEP

      384:ty0mgCwvqApfgKZu9dnmgMpuYvokkY5V7tMi1E8e+UCue02Sv1vaaSrbyzvywDMS:AHuQ9BjOgE+fNxWa

    Score
    1/10
    behavioral12behavioral13

    • Target

      Payload/Apollo.app/BanDurationTableViewCell.nib

    • Size

      5KB

    • MD5

      c738835410a6b5e64bbbda6fcf05a352

    • SHA1

      4b2d16e7c889efed420fe3b8b132e11c71f14134

    • SHA256

      cf34f96b98ecb96ed39cd855b7e719ad9b7f1da5d4ee1e093ee43af52e165618

    • SHA512

      315c5ace9ed316deea6aa3779d488945c446da4bfff22fdb0936823d89649b1bb39c314980ba5c81f7fc1c638c7e68c50b6502f9074283269700e96d5b536ed9

    • SSDEEP

      96:3Iv/m864Tb/FEwAoUzlnVsgH4kcFAQ97KWB2ooelgV:4XB64XtEDoenVsgH4f7KPalgV

    Score
    3/10
    behavioral14behavioral15

    • Target

      Payload/Apollo.app/Base.lproj/LaunchScreen.storyboardc/01J-lp-oVM-view-Ze5-6b-2t3.nib

    • Size

      2KB

    • MD5

      3622631742658e0a76441ed6c6230ace

    • SHA1

      2906892e85fe40e2075b21b77415bd8c0188b564

    • SHA256

      d7c09308aee8b8f03524947d4da1f328af63df8be7aeab6442c575d50ab4601a

    • SHA512

      ade75b3e1659d6a6f74be69d9107e5278aced033297634cde612bd6c5eae12fa9338a97dde6220f64af173431b55aecfb4f11b9c8a8dd18e8dc30be6697f36aa

    Score
    3/10
    behavioral16behavioral17

    • Target

      Payload/Apollo.app/Base.lproj/LaunchScreen.storyboardc/Info.plist

    • Size

      258B

    • MD5

      c35c440d4928d20d6919478391910ded

    • SHA1

      9f6b7c82c0e97c4e979211b7d69ec84094714f15

    • SHA256

      1f255d5cc53b531e3f29a9406a8df49a958e2bf9443d3e20bd8374f707f7d5c8

    • SHA512

      0e34f6c6e73e76066094dc4d30d5493e54d4f94f1461d2c25a5b46736edbe237ecc9001e40b8b52f4fa544f40c54b7ebd4ec99b6384792e9cf91b420f6453c29

    Score
    3/10
    behavioral18behavioral19

    • Target

      Payload/Apollo.app/Base.lproj/LaunchScreen.storyboardc/UIViewController-01J-lp-oVM.nib

    • Size

      896B

    • MD5

      f9ff075522bd19a0f987f81f1c05ab97

    • SHA1

      534c7c10cd3bf357c23dbeb605b6485ca783959e

    • SHA256

      716abbabe890726a52a1a14679c9f23dd28510f170443dec960526c45003915b

    • SHA512

      d94e64524842636ae00bb65e1cb65c8a8eb793aa97376e1163c37ae539e8449b09fcfd8433d9ba91c700995f9b29189df2ad2faeff11556e64c710960f7b9331

    Score
    3/10
    behavioral20behavioral21

    • Target

      Payload/Apollo.app/BrightnessThresholdTableViewCell.nib

    • Size

      4KB

    • MD5

      d4db16145ac1174f775973cd550f3117

    • SHA1

      989f175b5deff424348a7feade2af0490599fca4

    • SHA256

      c87f6b1432124622d203faca1716849aa6670d4a0efb1a25b4cc16b19e72847d

    • SHA512

      f00da1939ff9611e2863407985751a838f67cf063e4c0d53ad2d8535672550aeadcc1d508a7e5892eddd7ab3ee2560aa93cdd7eec3dc7d630ea562f81683bb12

    • SSDEEP

      96:jXAYPE4sJiF5lxWGb1gqVrAMho8Ggnum9bLMA5Hng1Dm7ln:rAOE4UilxWo1gqFToWxg1Dm7ln

    Score
    3/10
    behavioral22behavioral23

    • Target

      Payload/Apollo.app/CommentColorThemes.plist

    • Size

      1KB

    • MD5

      95d6ee83404ad50050f0a866f78ec69e

    • SHA1

      0f678b39eaea98e3a4a287df258aa3de89477dfa

    • SHA256

      2d29159e31fb9b002071573f064c7a3093046c70c4408c389a33621618c25cb6

    • SHA512

      528109b449fc79dc469061037bc47180b53ff354bffa16d94c466028d5350a871d6f7a5d8f4e3209f4fff03ab39eaeca28f8bb5ef417e4f8b4b658b663ce2e91

    Score
    3/10
    behavioral24behavioral25

    • Target

      Payload/Apollo.app/DatePickerTableViewCell.nib

    • Size

      1KB

    • MD5

      d1f09ff1c3cc0a6cf08a55cdfa8ff373

    • SHA1

      563df431b1ec3ce34f112f66388978840f3ef87f

    • SHA256

      3d43dfc6e3643f9450c8fe008cd94a327bce006129b5ebaba3d97d69727ed335

    • SHA512

      90d094855569fdbdca31ae67614adaf25e068cdc7cdf9c6513ed3bb8f7bd57ef7a21bb3e7e7d210523e68a4eb641814414e1131d853744de8b5d54ff367ca2a1

    Score
    3/10
    behavioral26behavioral27

    • Target

      Payload/Apollo.app/Defaults.plist

    • Size

      2KB

    • MD5

      c92abf26fe030834c749c3253464552a

    • SHA1

      5bbd0c1742d5f66ef7208bb5ebe90c0ed6da202a

    • SHA256

      ea28cd52b3f704378cf40b56169b10d514b11e6eebcf3a6f616d729bdabc021f

    • SHA512

      12ee73fc1f205eff8f6befe3a0821b79822316fc0efea48768b74d8739d7f47e810cccf8aaf02a836c10cf86510429f377ffb52c839d9e5be1c136aa41d916be

    Score
    3/10
    behavioral28behavioral29

    • Target

      Payload/Apollo.app/Frameworks/AFNetworking.framework/AFNetworking

    • Size

      571KB

    • MD5

      07c626f6e66a48839ff7ae5a163c169c

    • SHA1

      c010c78218cbbb3a192fec020c4e692893dc2131

    • SHA256

      c6501de322f244533c28b63b5b5c1184fa6faaeea534fa75db03fcaace54a097

    • SHA512

      3c57d2956873daf82d519cac116c2a7968db1ab365d761c7c70dbc6874e52c989ed3126af661705e7a2a0b16c05c5d41733731825fb12f9e252ae9de67d5db9b

    • SSDEEP

      6144:c7jGfhR3FInmY+9y7o9li3/Ns/+puWTCoqgozQi3/Ns/+c6pKpqRAw:ujGTZY1acUPQq6w

    Score
    1/10
    behavioral30

    • Target

      Payload/Apollo.app/Frameworks/AFNetworking.framework/Info.plist

    • Size

      827B

    • MD5

      c3c53566e372f98b4afde8425b18c036

    • SHA1

      bbc11809462ae63c748aa80cae574cb81fd208b6

    • SHA256

      9c8892ce963e39f8760421127c3066447dfa701bce444820a4e49afa9c574f3d

    • SHA512

      2a3f92ad3df923d9fbebbbb4521a0c96b04533574dc9bb749b13eaf5ea6dc633af633157a508de405ce179ce9ba0de5f9a6a2058644e767a5c2a08095157a62f

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks