720bb97855e0eb0ead039cf397ef0c48f92ecb4129c91a593a62d3fcbc8b9691

Sharing

Copy URL Twitter E-mail

General

Target
We Are Warriors! iOS Mod IPA No Jailbreak Cheats 1.65.1 Hacked IPA by iOSGods.com.ipa
Size 113.5MB
Sample260530-e4f25sfz7m
SHA256 720bb97855e0eb0ead039cf397ef0c48f92ecb4129c91a593a62d3fcbc8b9691
MD5 3f95775c305da618ba6de8aacdb1280b
SHA1 d85760c65899fc4b98198c31cc98f5d6e0b3b9c3
SHA512 7914e76f0398fbbe7ef3f787e482a131df501d1995d83a7cfcf8afc52ed104956dfe474d79b05bdb0eabffb7bd60c6847427154f6b3b6027cf58921af3aa1218
SSDEEP 3145728:dngpnM9sZxm4/LGQbt67taLhSKo5O984VWeuljpICYuE/p8d+1:dn8zD7Rqtyo49J83jpIt8d+1
TLSH
T18248339BD90DC77FEC1B1076EB6525B590AC9003F8A6B0DC69324E46F2E6EB0E174718
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Payload/Warriors.app/Frameworks/AppLovinSDK.framework/AppLovinSDKResources.bundle/omsdk-v1.6.2.js
- Size 52KB
- SHA256 0f8ece9415167386b7d7e219c9af9face467ba2e7fd9af4ce79256e2b44d8b1e
- MD5 4da28b0b37d93f97680592467633946c
- SHA1 31f4b9b649f6de0028b118d1fdb7e573c708e3e6
- SHA512 32da5b82bbb707084eed28b85a52407d3d58b2a1dbc466a989d7a4b02b38a08597d0584323521fb48c6343f58f8eb85efab1c1d447eb22a4010e26f059c43327
- SSDEEP 1536:CYCxCbzYTX3M9ohqdN87KHTQ9ow4wgAgQIhj6eTv3CMWQNmjUd/AUd:0CPzRd
- TLSH
  T15833E98D7A1274B94273A0F6903F004A773AE4AAA40889E5B18DD1E1AFF455D0737FBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Commands/cycc
- Size 14KB
- SHA256 8de45b84b9c52bf1313083639710ec170288471fb96abefec59145577014df74
- MD5 d292bcbd3d95de7350eb620d54461dd5
- SHA1 d27a3e31c895ed5f8648c95cc0809d9aa87e7948
- SHA512 0af7fb01d0155169d44431f918de62ad8fc82a9842dfc43ae984adf063a976a826d2e37e6839e96e5a6183a7ed439080b4a61fff54b5e178d88fbb88d5ec6cd8
- SSDEEP 384:fe1PLfQLp8LGCK+P9CjCKKoD3QzMiuTO7pz:feRfQLpz+P4uKKoD3QzMXq9z
- TLSH
  T16F62942C35C283B5250695BE6BCA90046378010BCD559CBCBE4EB7933F71939A2FA6DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Commands/cynject
- Size 212KB
- SHA256 01175a57da15e7bc71cbbb2afbb56834d955d225c9a19541bc79f3020bb10d06
- MD5 8ad8162a530866f3e2dfe470b2346124
- SHA1 0e052088721bd335b9a5d9933c87a44662544bbf
- SHA512 7e6152bf86596c60d4a8ea891684b299f1feb5f6329ea939362997c55e5d0eb5b1a874efecf07bdc7bc3e0df8873adec7fd128b2d214de069b73c2ff39910c2e
- SSDEEP 768:yoRzY1Cq9dPFNLU9sdyi1W4R1MWPZdPFNLU9sdyi1W:HuNusd+qNusd
- TLSH
  T1DC244B86B74C1F85E8E83D34E5590A45E063D6702B25831BADC8D2A8AFDF7D91433B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Libraries/SubstrateBootstrap.dylib
- Size 96KB
- SHA256 a717a4729dec9a804c6c36e12ba874dc153cebccaea34423ab18fec376cef720
- MD5 6fedcffddfb05c315c4b45ba648aa14a
- SHA1 e74ca8f6bdb665a4a502dce01b30776d83e31e41
- SHA512 511e91e1544862da4533e144e24b19a73340bf06b981b915c59fedcfae242bae6a56f60dd239d71ce14bb420da1a072a6e892e032e4d01bf23552069ec36c2aa
- SSDEEP 48:A310VOUmtn2aqs6X5X5XSl2VSM6Ky6QQrWYqIQMXKUoksrsX8q06TlBM6KkulyW7:WGaEpXpVgvxQN5QMCGBlYlJaU
- TLSH
  T197A33347EB9C5B99D86C02B481D753893272F4703B93862A0B85C1286F727A5387E78B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Libraries/SubstrateInjection.dylib
- Size 96KB
- SHA256 a717a4729dec9a804c6c36e12ba874dc153cebccaea34423ab18fec376cef720
- MD5 6fedcffddfb05c315c4b45ba648aa14a
- SHA1 e74ca8f6bdb665a4a502dce01b30776d83e31e41
- SHA512 511e91e1544862da4533e144e24b19a73340bf06b981b915c59fedcfae242bae6a56f60dd239d71ce14bb420da1a072a6e892e032e4d01bf23552069ec36c2aa
- SSDEEP 48:A310VOUmtn2aqs6X5X5XSl2VSM6Ky6QQrWYqIQMXKUoksrsX8q06TlBM6KkulyW7:WGaEpXpVgvxQN5QMCGBlYlJaU
- TLSH
  T197A33347EB9C5B99D86C02B481D753893272F4703B93862A0B85C1286F727A5387E78B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Libraries/SubstrateLauncher.dylib
- Size 136KB
- SHA256 5b991655162a442aee2e751a9ee32fdef4012d05dca9fdd45120407ac0a98560
- MD5 836e3d2ec965b5fc8931a20ff59d1257
- SHA1 6e115f23d74ec4594b687d3b16ee9fdf6ca1edc6
- SHA512 25ad6d00ac662ab5b292833562c44567d16933c8a52dbaeb26f972695a111052cc7327564af0e62bc711912e53a91d229a8d8a865945f0aebc1956beb02fad92
- SSDEEP 1536:ZMkA6me3d+7TbQ36DZRGYAUQ3pPPOIQyODvTk1YJ:Zee47Tb7tRHAb3pPPmyfW
- TLSH
  T18FD37D4A9F8D0B20D5CA227DA01717557227E4BCDB8E8307661AC47C9DEE3D9E833B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Libraries/SubstrateLoader.dylib
- Size 101KB
- SHA256 240c4ae7d50981b7e0ac07e44ecbce83893f2d06927c664eee276b27886c1c68
- MD5 9e98dd893774a306912f2767090ed427
- SHA1 0df131fe1e4ed19533220445935da15e99264174
- SHA512 4241f2fe9da4ac15433d54963192fc9aa4aeb7c5593fca613ed8cf4351873b0c01dff427d2d356c065c9b98d14bf7d387f917920e5402f5f9c36ff9d0d35ee6d
- SSDEEP 768:zkvEzNvSdtv6Qr9N0cAMRau962GJ+ULDkEibN0cEL4:154NsBMrE+UXzian
- TLSH
  T1B9A31A578FC82F32D9995A3A0944235B0247F97D3B19833F0F06508D9DA23D865FB9AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Payload/Warriors.app/Frameworks/MolocoSDK.framework/Assets.car
- Size 156KB
- SHA256 ef636e0b50e63c15e4291a07b8aaf2858f0e189b5b8952be74210fe81f9c1570
- MD5 bd47d7d6f0951bdec005608f6e26e3d7
- SHA1 8ab7dc7ba51fd5efff96f2027fffb9d4cdab4d95
- SHA512 c33756477a6e3264354f490d20a5e7c2b1982cb019e98d25918e0c2ae5f1579d3b4418a2a767a6f9a8c3251ba089d8476ecc7f8354892ac7075b1df98c465a74
- SSDEEP 3072:+1PGWsQoSe4pTqJgIuJCnRvnE8RUI8yJwoRUB9N1/IbFCm+4Vi3oFv1QlG2C00wd:+1SuJ/H4ViIiR
- TLSH
  T1F7F3AF95BB9C8C1EEC029572C65B7F846BBCF02517E79553122C022E3D0B684BD4BBB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral12 behavioral13
- Target
  Payload/Warriors.app/Frameworks/MolocoSDK.framework/Resources.bundle/endcard.html
- Size 394B
- SHA256 7a8953b7137818403857203e6289cc4bb14f580d3be67910939162dca1bc04da
- MD5 71df3e8748c1765e54e886ba33799303
- SHA1 19d20414706291ced2541f5eca42193a159392be
- SHA512 1ed5d86a2bce0723920a07f7687928b554293e27b8c03911a413ccfa19afc912ee64d77b442062381cfbf5c2ad5921fd49fe84e36c3d830abfe2b81cce6804aa
- TLSH
  T182E023BF69CDA91AC4656195C5ABE5D810290150034144C14655DA61784CABA4E258DD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral14 behavioral15
- Target
  Payload/Warriors.app/Frameworks/MolocoSDK.framework/mraid.js.ignore
- Size 28KB
- SHA256 d32987f52d3aefb57c8eab31410cf281d24a20eb4264e2194a471a63177fb90e
- MD5 cdef96742be9f7186efc50bfdb5bbf21
- SHA1 41b7267e9b1c617547ad00cdeed98ac314ca9acb
- SHA512 95a76f4bdad274707006c8dd41c592957d4a62781b1d5c933e84a992da2666f289114de64f14db31c3d24a77711045bd07571caf90dded8aea376c94859b240a
- SSDEEP 384:qJ6uaGyTJUyvjpb6FkWF9LKHC3fACmUA6UDhhMrHhhMtEFf:qJpaGyK85uXom
- TLSH
  T138D253189AA31E765593713E83AF00CDB479A5434268EE11BF4CB35C0F8E45C46AE7EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16 behavioral17
- Target
  Payload/Warriors.app/Frameworks/NeftaSDK.framework/mraid.js
- Size 4KB
- SHA256 04208b06b4c91de386e9f7dfb88dd496621a944443a3c73ebbccc6a5b069b8a7
- MD5 71fe880cc83f8c6991ce4279f7b5d566
- SHA1 f6f05f0f989adabe30f83bf0c3d06b1be78b8b57
- SHA512 3a6c9bfb8d61d27567e307215d8e0a2d52a15d837659a16e1b2f8f04c5456a329d428198b0a01ec1bba0a36dc3b7d963d05aa44451b17ee4424b676c9ee5c9cf
- SSDEEP 96:LaEhGmzHNYqzGW10kVGOZDGxkEGw2rp0XrXE1zqt8oG1nCkPGUGWpGnE:O4Yqq00ksOZaxknvp0XrX78j1CkeXfnE
- TLSH
  T11F91D06CB76C3939824BB1379F2F225A667E80DB55251C047B0C44C46F2983F8AB9ED4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18 behavioral19
- Target
  Payload/Warriors.app/Frameworks/UnityFramework.framework/MolocoSDK.bundle/Resources.bundle/endcard.html
- Size 394B
- SHA256 7a8953b7137818403857203e6289cc4bb14f580d3be67910939162dca1bc04da
- MD5 71df3e8748c1765e54e886ba33799303
- SHA1 19d20414706291ced2541f5eca42193a159392be
- SHA512 1ed5d86a2bce0723920a07f7687928b554293e27b8c03911a413ccfa19afc912ee64d77b442062381cfbf5c2ad5921fd49fe84e36c3d830abfe2b81cce6804aa
- TLSH
  T182E023BF69CDA91AC4656195C5ABE5D810290150034144C14655DA61784CABA4E258DD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral20 behavioral21
- Target
  Payload/Warriors.app/Frameworks/UnityFramework.framework/MolocoSDK.bundle/mraid.js.ignore
- Size 28KB
- SHA256 d32987f52d3aefb57c8eab31410cf281d24a20eb4264e2194a471a63177fb90e
- MD5 cdef96742be9f7186efc50bfdb5bbf21
- SHA1 41b7267e9b1c617547ad00cdeed98ac314ca9acb
- SHA512 95a76f4bdad274707006c8dd41c592957d4a62781b1d5c933e84a992da2666f289114de64f14db31c3d24a77711045bd07571caf90dded8aea376c94859b240a
- SSDEEP 384:qJ6uaGyTJUyvjpb6FkWF9LKHC3fACmUA6UDhhMrHhhMtEFf:qJpaGyK85uXom
- TLSH
  T138D253189AA31E765593713E83AF00CDB479A5434268EE11BF4CB35C0F8E45C46AE7EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22 behavioral23
- Target
  Payload/Warriors.app/Frameworks/UnityFramework.framework/PAGAdSDK.bundle/omsdk-v1.js
- Size 44KB
- SHA256 1e569a6b84baaa6e15edf2aafc31c7dc584e45c420299fa1aa788e3b8a6d9877
- MD5 f6785a5039234d8bcb40ce132738d507
- SHA1 597f5b59504d97e87f356d5b413771fa9b095725
- SHA512 67dc753cef56107e816d287c3cb25b82aed9a4ae85ddd717760ec0d336bc5914dddc331fe390dd08b5f7992cda3d19d1ba1fc84c9b2cba49b6a106d31f7d2f9b
- SSDEEP 768:A3nyam3bm+frTYOl4fUEx3n5Qq/BeB2tdNW7D4NQ9oJwgAgQIXj665v37UdjgryU:A3nnmbY4E3+WtdNW7D4NQ9oJwgAgQIXV
- TLSH
  T137230A8D7A52B4B9427390F6903F004E773AE4EAA40888E6B189D1E1BEF45590737F7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24 behavioral25
- Target
  Payload/Warriors.app/Frameworks/UnityFramework.framework/UnityAdsResources.bundle/omid-session-client-v1.js
- Size 68KB
- SHA256 4dedc9af97ba6d9c094d6078b007e002f0033542a3fc9f65ea72722588d159dc
- MD5 6b09aeda01931b31d41c62f6e80eb3c3
- SHA1 eeca7702be5e584f0247537e79824bccb43a61c4
- SHA512 d4ea9603763c70be4e1afa0f69372f3224b5e00db8d0a0739515c56d533093bb6a993c4257170c3c55c6e0ecabaffd52f1884265c6781433bd1779176f25f045
- SSDEEP 768:hJkFKb/htvHIDeFbX92fdm3Of1wEcRwyAJfia7gCrufbeBDC3u6NPrvonHDVBvZJ:oFKbzf0ett2RM7fr0D9gCbrcWj
- TLSH
  T16E635569BAF535A9032EB034FB2BB10A3FB54AA9701C8E01F4DC99D41FC857442F6B64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26 behavioral27
- Target
  Payload/Warriors.app/Frameworks/UnityFramework.framework/UnityAdsResources.bundle/omsdk-v1.js
- Size 44KB
- SHA256 c1d1e8f99c48af97854acf24823f10da3a2b3d9cd2b62dff3c93b9f61937451c
- MD5 4f235865b68094a9c6e5234d68f1243b
- SHA1 ebe85f09d5e78b12a6fbae7b5948977a9ac03757
- SHA512 507537ab1aae3e2a3fb0f898469df094507da67e180992a8e1e7cc46dcc8608c7cd760079ff45ec23a41ef981a1ae36b6e38ac28ff140e0f4ffd068d4b81ac8a
- SSDEEP 768:A3nyam3bx+frTYOl4fUEx3n5Qq/BeB2tdNW7D4NQ9oJwgAgQIXj665v37UdjgryV:A3nnm8Y4E3+WtdNW7D4NQ9oJwgAgQIXc
- TLSH
  T14E230A8D7A12B4B9427390F6903F004E773AE4EAA40889E6B189D1E1BEF45590737F7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28 behavioral29
- Target
  Payload/Warriors.app/Frameworks/UnityFramework.framework/UsercentricsUIResources.bundle/Assets.car
- Size 169KB
- SHA256 10d3be0a4532dfd3501c089d93d57b5cebdf3934857ca13c056fc3f6a3caece7
- MD5 85eb1dcca5793e4134f4402cb8029afa
- SHA1 071751bdbf4fb334b0a2c56c546b2895d5f98b49
- SHA512 423ae9463d40814d35acaed8ba542e9a48e159c2b79ba74e0cec608885929a0a5882e34d83f36cecafb98b603ef0367dfc0bb811d46cc7242986682484ee14d6
- SSDEEP 3072:rnZpNxSSuUHI6yC5KZS018hprMXK4tBv:rrwt6gZRkc7t
- TLSH
  T13F04BF51F7A18C1EDC028272C68FBB4867BCF03657E2AD071138536D7D47668B947AB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral30 behavioral31
- Target
  Payload/Warriors.app/Frameworks/WeAreWarriors.dylib
- Size 13.7MB
- SHA256 d7b25a7f8cdd1ca910cc883570894a303238debdaff139f02a8e954bd1da828c
- MD5 1cf2ac16a44530fb35420bbc7600b852
- SHA1 7c5dc876ecfbc292ff3633360eb8ad92b6229e12
- SHA512 471b397eee2cf0f7c96e7cbea9272a1ce2a542491eeb67ce016bde2d940be6aed3667c698ca708da2aa2bcf41e45c9e39c76dc08ecad4e45e945cc49a147f7c4
- SSDEEP 196608:i84jEwMMV3/qeJyLpI+orf79kzAMX979qJH:OEOcpI+oP9ksqEJH
- TLSH
  T147E666BDEA0B64B5F391323C9EE48A872996614D80675053DFB782BF5B4C3C39279039
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32