Overview
overview
6Static
static
6Payload/Sp...ts.pdf
windows7-x64
3Payload/Sp...ts.pdf
windows10-2004-x64
3Payload/Sp...s/cycc
ubuntu-18.04-amd64
1Payload/Sp...s/cycc
debian-9-armhf
1Payload/Sp...s/cycc
debian-9-mips
1Payload/Sp...s/cycc
debian-9-mipsel
1Payload/Sp...ynject
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Payload/Sp....dylib
macos-10.15-amd64
1Analysis
-
max time kernel
2s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240226-en -
resource tags
arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
03-12-2024 12:23
Behavioral task
behavioral1
Sample
Payload/Spotify.app/Assets.pdf
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Payload/Spotify.app/Assets.pdf
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Payload/Spotify.app/Frameworks/CydiaSubstrate.framework/Commands/cycc
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral4
Sample
Payload/Spotify.app/Frameworks/CydiaSubstrate.framework/Commands/cycc
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral5
Sample
Payload/Spotify.app/Frameworks/CydiaSubstrate.framework/Commands/cycc
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral6
Sample
Payload/Spotify.app/Frameworks/CydiaSubstrate.framework/Commands/cycc
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral7
Sample
Payload/Spotify.app/Frameworks/CydiaSubstrate.framework/Commands/cynject
Resource
macos-20241106-en
Behavioral task
behavioral8
Sample
Payload/Spotify.app/Frameworks/CydiaSubstrate.framework/Libraries/SubstrateBootstrap.dylib
Resource
macos-20241101-en
Behavioral task
behavioral9
Sample
Payload/Spotify.app/Frameworks/Spotilife.dylib
Resource
macos-20241106-en
Behavioral task
behavioral10
Sample
Payload/Spotify.app/Frameworks/libswiftAVFoundation.dylib
Resource
macos-20241101-en
Behavioral task
behavioral11
Sample
Payload/Spotify.app/Frameworks/libswiftCallKit.dylib
Resource
macos-20241106-en
Behavioral task
behavioral12
Sample
Payload/Spotify.app/Frameworks/libswiftCloudKit.dylib
Resource
macos-20241101-en
Behavioral task
behavioral13
Sample
Payload/Spotify.app/Frameworks/libswiftContacts.dylib
Resource
macos-20241106-en
Behavioral task
behavioral14
Sample
Payload/Spotify.app/Frameworks/libswiftCore.dylib
Resource
macos-20241101-en
Behavioral task
behavioral15
Sample
Payload/Spotify.app/Frameworks/libswiftCoreAudio.dylib
Resource
macos-20241106-en
Behavioral task
behavioral16
Sample
Payload/Spotify.app/Frameworks/libswiftCoreData.dylib
Resource
macos-20241101-en
Behavioral task
behavioral17
Sample
Payload/Spotify.app/Frameworks/libswiftCoreFoundation.dylib
Resource
macos-20241106-en
Behavioral task
behavioral18
Sample
Payload/Spotify.app/Frameworks/libswiftCoreGraphics.dylib
Resource
macos-20241101-en
Behavioral task
behavioral19
Sample
Payload/Spotify.app/Frameworks/libswiftCoreImage.dylib
Resource
macos-20241101-en
Behavioral task
behavioral20
Sample
Payload/Spotify.app/Frameworks/libswiftCoreLocation.dylib
Resource
macos-20241106-en
Behavioral task
behavioral21
Sample
Payload/Spotify.app/Frameworks/libswiftCoreMedia.dylib
Resource
macos-20241106-en
Behavioral task
behavioral22
Sample
Payload/Spotify.app/Frameworks/libswiftDarwin.dylib
Resource
macos-20241106-en
Behavioral task
behavioral23
Sample
Payload/Spotify.app/Frameworks/libswiftDispatch.dylib
Resource
macos-20241106-en
Behavioral task
behavioral24
Sample
Payload/Spotify.app/Frameworks/libswiftFoundation.dylib
Resource
macos-20241106-en
Behavioral task
behavioral25
Sample
Payload/Spotify.app/Frameworks/libswiftIntents.dylib
Resource
macos-20241106-en
Behavioral task
behavioral26
Sample
Payload/Spotify.app/Frameworks/libswiftMapKit.dylib
Resource
macos-20241101-en
Behavioral task
behavioral27
Sample
Payload/Spotify.app/Frameworks/libswiftMediaPlayer.dylib
Resource
macos-20241101-en
Behavioral task
behavioral28
Sample
Payload/Spotify.app/Frameworks/libswiftMetal.dylib
Resource
macos-20241101-en
Behavioral task
behavioral29
Sample
Payload/Spotify.app/Frameworks/libswiftNetwork.dylib
Resource
macos-20241101-en
Behavioral task
behavioral30
Sample
Payload/Spotify.app/Frameworks/libswiftObjectiveC.dylib
Resource
macos-20241101-en
Behavioral task
behavioral31
Sample
Payload/Spotify.app/Frameworks/libswiftQuartzCore.dylib
Resource
macos-20241106-en
Behavioral task
behavioral32
Sample
Payload/Spotify.app/Frameworks/libswiftUIKit.dylib
Resource
macos-20241106-en
General
-
Target
Payload/Spotify.app/Frameworks/CydiaSubstrate.framework/Commands/cycc
-
Size
14KB
-
MD5
d292bcbd3d95de7350eb620d54461dd5
-
SHA1
d27a3e31c895ed5f8648c95cc0809d9aa87e7948
-
SHA256
8de45b84b9c52bf1313083639710ec170288471fb96abefec59145577014df74
-
SHA512
0af7fb01d0155169d44431f918de62ad8fc82a9842dfc43ae984adf063a976a826d2e37e6839e96e5a6183a7ed439080b4a61fff54b5e178d88fbb88d5ec6cd8
-
SSDEEP
384:fe1PLfQLp8LGCK+P9CjCKKoD3QzMiuTO7pz:feRfQLpz+P4uKKoD3QzMXq9z
Malware Config
Signatures
Processes
-
/tmp/Payload/Spotify.app/Frameworks/CydiaSubstrate.framework/Commands/cycc/tmp/Payload/Spotify.app/Frameworks/CydiaSubstrate.framework/Commands/cycc1⤵PID:748
-
/usr/local/sbin/bashbash /tmp/Payload/Spotify.app/Frameworks/CydiaSubstrate.framework/Commands/cycc1⤵PID:748
-
/usr/local/bin/bashbash /tmp/Payload/Spotify.app/Frameworks/CydiaSubstrate.framework/Commands/cycc1⤵PID:748
-
/usr/sbin/bashbash /tmp/Payload/Spotify.app/Frameworks/CydiaSubstrate.framework/Commands/cycc1⤵PID:748
-
/usr/bin/bashbash /tmp/Payload/Spotify.app/Frameworks/CydiaSubstrate.framework/Commands/cycc1⤵PID:748
-
/sbin/bashbash /tmp/Payload/Spotify.app/Frameworks/CydiaSubstrate.framework/Commands/cycc1⤵PID:748
-
/bin/bashbash /tmp/Payload/Spotify.app/Frameworks/CydiaSubstrate.framework/Commands/cycc1⤵PID:748
-
/usr/bin/basenamebasename /tmp/Payload/Spotify.app/Frameworks/CydiaSubstrate.framework/Commands/cycc2⤵PID:756
-