Overview
overview
6Static
static
1redsn0w_ma...ommand
ubuntu-18.04-amd64
1redsn0w_ma...ommand
debian-9-armhf
1redsn0w_ma...ommand
debian-9-mips
1redsn0w_ma...ommand
debian-9-mipsel
1Applicatio...eCydia
macos-10.15-amd64
1Applicatio...Neuter
ubuntu-18.04-amd64
Applicatio...Neuter
debian-9-armhf
Applicatio...Neuter
debian-9-mips
Applicatio...Neuter
debian-9-mipsel
Applicatio...euter_
macos-10.15-amd64
4Applicatio...n/bash
macos-10.15-amd64
1Applicatio...sysctl
macos-10.15-amd64
4cleanup
macos-10.15-amd64
1usr/libexec/dirhelper
ubuntu-18.04-amd64
1usr/libexec/dirhelper
debian-9-armhf
1usr/libexec/dirhelper
debian-9-mips
1usr/libexec/dirhelper
debian-9-mipsel
1usr/share/...azeles
macos-10.15-amd64
1filemover
macos-10.15-amd64
4gzip
macos-10.15-amd64
1jailbreak
macos-10.15-amd64
1reapply.sh
ubuntu-18.04-amd64
reapply.sh
debian-9-armhf
reapply.sh
debian-9-mips
reapply.sh
debian-9-mipsel
tar
macos-10.15-amd64
4redsn0w_ma...edsn0w
macos-10.15-amd64
1Static task
static1
Behavioral task
behavioral1
Sample
redsn0w_mac_0.9.11b4/boot-ipt4g.command
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
redsn0w_mac_0.9.11b4/boot-ipt4g.command
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
redsn0w_mac_0.9.11b4/boot-ipt4g.command
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
redsn0w_mac_0.9.11b4/boot-ipt4g.command
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral5
Sample
Applications/Cydia.app/MobileCydia
Resource
macos-20240410-en
Behavioral task
behavioral6
Sample
Applications/BootNeuter.app/BootNeuter
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral7
Sample
Applications/BootNeuter.app/BootNeuter
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral8
Sample
Applications/BootNeuter.app/BootNeuter
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral9
Sample
Applications/BootNeuter.app/BootNeuter
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral10
Sample
Applications/BootNeuter.app/BootNeuter_
Resource
macos-20240410-en
Behavioral task
behavioral11
Sample
Applications/BootNeuter.app/bin/bash
Resource
macos-20240410-en
Behavioral task
behavioral12
Sample
Applications/BootNeuter.app/bin/sysctl
Resource
macos-20240410-en
Behavioral task
behavioral13
Sample
cleanup
Resource
macos-20240410-en
Behavioral task
behavioral14
Sample
usr/libexec/dirhelper
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral15
Sample
usr/libexec/dirhelper
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral16
Sample
usr/libexec/dirhelper
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral17
Sample
usr/libexec/dirhelper
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral18
Sample
usr/share/corona/crazeles
Resource
macos-20240410-en
Behavioral task
behavioral19
Sample
filemover
Resource
macos-20240410-en
Behavioral task
behavioral20
Sample
gzip
Resource
macos-20240410-en
Behavioral task
behavioral21
Sample
jailbreak
Resource
macos-20240410-en
Behavioral task
behavioral22
Sample
reapply.sh
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral23
Sample
reapply.sh
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral24
Sample
reapply.sh
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral25
Sample
reapply.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral26
Sample
tar
Resource
macos-20240410-en
Behavioral task
behavioral27
Sample
redsn0w_mac_0.9.11b4/redsn0w.app/Contents/MacOS/redsn0w
Resource
macos-20240410-en
General
-
Target
f18fb10ec0b320c9292ada11ab77402b_JaffaCakes118
-
Size
15.4MB
-
MD5
f18fb10ec0b320c9292ada11ab77402b
-
SHA1
49ff59eee385f7ff03fc941afc481c5f0d91f62c
-
SHA256
1fcd75886e7da64b1bd2466f806ad9ae17111934752de694e0e817df0870b6d3
-
SHA512
82c0ecd6d19b5e44a1bb5a26c9090e7fa87086890c3115e7f29db35f3e442371771efc14ec3ffe18fc620c854104d4fdcdafd7cb671b668707c180237c736a13
-
SSDEEP
393216:8QhixsTkgYc4Q8ZtGyxWLr1sVAScTX2CGsHV6JenBp:8QhOsTzYLotoAvz2CGs1zn/
Malware Config
Signatures
Files
-
f18fb10ec0b320c9292ada11ab77402b_JaffaCakes118.zip
-
redsn0w_mac_0.9.11b4/README.txt
-
redsn0w_mac_0.9.11b4/boot-ipt4g.command.sh linux
-
redsn0w_mac_0.9.11b4/credits.txt
-
redsn0w_mac_0.9.11b4/license.txt
-
redsn0w_mac_0.9.11b4/redsn0w.app/Contents/Info.plist.xml
-
redsn0w_mac_0.9.11b4/redsn0w.app/Contents/MacOS/Cydia.tar.gz.gz
-
Cydia.tar.tar
-
Applications/Cydia.app/Default.png.png
-
Applications/Cydia.app/[email protected].png
-
Applications/Cydia.app/German.lproj/Localizable.strings
-
Applications/Cydia.app/German.lproj/Sections.strings
-
Applications/Cydia.app/Icon-Small.png.png
-
Applications/Cydia.app/[email protected].png
-
Applications/Cydia.app/Info.plist.xml
-
Applications/Cydia.app/Italian.lproj/Localizable.strings
-
Applications/Cydia.app/MobileCydia.macho macos arch:arm
-
Applications/Cydia.app/Sections.plist.xml
-
Applications/Cydia.app/Sections/Multimedia.png.png
-
Applications/Cydia.app/Sections/Networking.png.png
-
Applications/Cydia.app/Sections/Packaging.png.png
-
Applications/Cydia.app/Sections/Ringtones.png.png
-
Applications/Cydia.app/Sections/Scripting.png.png
-
Applications/Cydia.app/Sections/Security.png.png
-
Applications/Cydia.app/Sections/Site-Specific_Apps.png.png
-
Applications/Cydia.app/Sections/Terminal_Support.png.png
-
Applications/Cydia.app/Swedish.lproj/Localizable.strings
-
Applications/Cydia.app/configure.png.png
-
Applications/Cydia.app/folder.png.png
-
Applications/Cydia.app/[email protected].png
-
Applications/Cydia.app/[email protected].png
-
Applications/Cydia.app/iconClassic.png.png
-
Applications/Cydia.app/install.png.png
-
Applications/Cydia.app/installed.png.png
-
Applications/Cydia.app/installing.png.png
-
Applications/Cydia.app/reload.png.png
-
Applications/Cydia.app/search.png.png
-
Applications/Cydia.app/source.png.png
-
Applications/Cydia.app/[email protected].png
-
Applications/Cydia.app/sources.png.png
-
Applications/Cydia.app/unknown.png.png
-
Applications/Cydia.app/zh_TW.lproj/Localizable.strings
-
redsn0w_mac_0.9.11b4/redsn0w.app/Contents/MacOS/Keys.plist.xml
-
redsn0w_mac_0.9.11b4/redsn0w.app/Contents/MacOS/bn.tar.gz.gz
-
bn.tar.tar
-
Applications/BootNeuter.app/BootNeuter.sh linux
-
Applications/BootNeuter.app/BootNeuter_.macho macos arch:arm
-
Applications/BootNeuter.app/Default.png.png
-
Applications/BootNeuter.app/Icon.png.png
-
Applications/BootNeuter.app/Info.plist
-
Applications/BootNeuter.app/PkgInfo
-
Applications/BootNeuter.app/ResourceRules.plist
-
Applications/BootNeuter.app/bin/bash.macho macos arch:arm
-
Applications/BootNeuter.app/bin/sysctl.macho macos arch:arm
-
System/Library/LaunchDaemons/com.apple.CommCenter.plist.xml
-
System/Library/LaunchDaemons/com.apple.SpringBoard.plist.xml
-
System/Library/LaunchDaemons/com.devteam.bootneuter.auto.plist.xml
-
redsn0w_mac_0.9.11b4/redsn0w.app/Contents/MacOS/bootlogo.png.png
-
redsn0w_mac_0.9.11b4/redsn0w.app/Contents/MacOS/bootlogox2.png.png
-
redsn0w_mac_0.9.11b4/redsn0w.app/Contents/MacOS/corona-A5.tar.tar
-
cleanup.macho macos arch:arm
-
data/iOS/9A334/iPhone4,1/corona.tgz.gz
-
corona.tgz.tar
-
private/etc/launchd.conf
-
usr/libexec/dirhelper.sh linux
-
usr/share/corona/crazeles.macho macos arch:arm
-
usr/share/corona/jb.plist.xml
-
usr/share/corona/payload
-
usr/share/corona/payload-vars
-
usr/share/corona/racoon-exploit.conf
-
usr/share/corona/vnimage.clean
-
usr/share/corona/vnimage.overflow
-
usr/share/corona/vnimage.payload
-
data/iOS/9A334/iPhone4,1/payload
-
data/iOS/9A334/iPhone4,1/payload-vars
-
data/iOS/9A334/iPhone4,1/racoon-exploit.conf
-
data/iOS/9A334/iPhone4,1/sb_evaluatehook.bin
-
data/iOS/9A334/iPhone4,1/sb_evaluatehooker.bin
-
data/iOS/9A334/iPhone4,1/shellcode.bin
-
data/iOS/9A334/iPhone4,1/sysent_1c50
-
data/iOS/9A334/iPhone4,1/vnimage.clean
-
data/iOS/9A334/iPhone4,1/vnimage.overflow
-
data/iOS/9A334/iPhone4,1/vnimage.payload
-
data/iOS/9A334/iPhone4,1/zfreehook.bin
-
data/iOS/9A334/iPhone4,1/zfreehooker.bin
-
data/iOS/9A405/iPad2,1/corona.tgz.gz
-
corona.tgz.tar
-
data/iOS/9A405/iPad2,1/payload
-
data/iOS/9A405/iPad2,1/payload-vars
-
data/iOS/9A405/iPad2,1/racoon-exploit.conf
-
data/iOS/9A405/iPad2,1/sb_evaluatehook.bin
-
data/iOS/9A405/iPad2,1/sb_evaluatehooker.bin
-
data/iOS/9A405/iPad2,1/shellcode.bin
-
data/iOS/9A405/iPad2,1/sysent_1c50
-
data/iOS/9A405/iPad2,1/vnimage.clean
-
data/iOS/9A405/iPad2,1/vnimage.overflow
-
data/iOS/9A405/iPad2,1/vnimage.payload
-
data/iOS/9A405/iPad2,1/zfreehook.bin
-
data/iOS/9A405/iPad2,1/zfreehooker.bin
-
data/iOS/9A405/iPad2,2/corona.tgz.gz
-
data/iOS/9A405/iPad2,2/payload
-
data/iOS/9A405/iPad2,2/payload-vars
-
data/iOS/9A405/iPad2,2/racoon-exploit.conf
-
data/iOS/9A405/iPad2,2/sb_evaluatehook.bin
-
data/iOS/9A405/iPad2,2/sb_evaluatehooker.bin
-
data/iOS/9A405/iPad2,2/shellcode.bin
-
data/iOS/9A405/iPad2,2/sysent_1c50
-
data/iOS/9A405/iPad2,2/vnimage.clean
-
data/iOS/9A405/iPad2,2/vnimage.overflow
-
data/iOS/9A405/iPad2,2/vnimage.payload
-
data/iOS/9A405/iPad2,2/zfreehook.bin
-
data/iOS/9A405/iPad2,2/zfreehooker.bin
-
data/iOS/9A405/iPad2,3/corona.tgz.gz
-
data/iOS/9A405/iPad2,3/payload
-
data/iOS/9A405/iPad2,3/payload-vars
-
data/iOS/9A405/iPad2,3/racoon-exploit.conf
-
data/iOS/9A405/iPad2,3/sb_evaluatehook.bin
-
data/iOS/9A405/iPad2,3/sb_evaluatehooker.bin
-
data/iOS/9A405/iPad2,3/shellcode.bin
-
data/iOS/9A405/iPad2,3/sysent_1c50
-
data/iOS/9A405/iPad2,3/vnimage.clean
-
data/iOS/9A405/iPad2,3/vnimage.overflow
-
data/iOS/9A405/iPad2,3/vnimage.payload
-
data/iOS/9A405/iPad2,3/zfreehook.bin
-
data/iOS/9A405/iPad2,3/zfreehooker.bin
-
data/iOS/9A405/iPhone4,1/corona.tgz.gz
-
data/iOS/9A405/iPhone4,1/payload
-
data/iOS/9A405/iPhone4,1/payload-vars
-
data/iOS/9A405/iPhone4,1/racoon-exploit.conf
-
data/iOS/9A405/iPhone4,1/sb_evaluatehook.bin
-
data/iOS/9A405/iPhone4,1/sb_evaluatehooker.bin
-
data/iOS/9A405/iPhone4,1/shellcode.bin
-
data/iOS/9A405/iPhone4,1/sysent_1c50
-
data/iOS/9A405/iPhone4,1/vnimage.clean
-
data/iOS/9A405/iPhone4,1/vnimage.overflow
-
data/iOS/9A405/iPhone4,1/vnimage.payload
-
data/iOS/9A405/iPhone4,1/zfreehook.bin
-
data/iOS/9A405/iPhone4,1/zfreehooker.bin
-
data/iOS/9A406/iPhone4,1/corona.tgz.gz
-
data/iOS/9A406/iPhone4,1/payload
-
data/iOS/9A406/iPhone4,1/payload-vars
-
data/iOS/9A406/iPhone4,1/racoon-exploit.conf
-
data/iOS/9A406/iPhone4,1/sb_evaluatehook.bin
-
data/iOS/9A406/iPhone4,1/sb_evaluatehooker.bin
-
data/iOS/9A406/iPhone4,1/shellcode.bin
-
data/iOS/9A406/iPhone4,1/sysent_1c50
-
data/iOS/9A406/iPhone4,1/vnimage.clean
-
data/iOS/9A406/iPhone4,1/vnimage.overflow
-
data/iOS/9A406/iPhone4,1/vnimage.payload
-
data/iOS/9A406/iPhone4,1/zfreehook.bin
-
data/iOS/9A406/iPhone4,1/zfreehooker.bin
-
filemover.macho macos arch:arm
-
filemover.plist.xml
-
gzip.macho macos arch:arm
-
jailbreak.macho macos arch:arm
-
jailbreak.mobileconfig.xml
-
jb.plist.xml
-
reapply.sh.sh linux
-
tar.macho macos arch:arm
-
redsn0w_mac_0.9.11b4/redsn0w.app/Contents/MacOS/progresslogo.png.png
-
redsn0w_mac_0.9.11b4/redsn0w.app/Contents/MacOS/rd.tar.tar
-
redsn0w_mac_0.9.11b4/redsn0w.app/Contents/MacOS/redsn0w.macho macos arch:x86
-
redsn0w_mac_0.9.11b4/redsn0w.app/Contents/PkgInfo
-
redsn0w_mac_0.9.11b4/redsn0w.app/Contents/Resources/redsn0w.icns