Overview
overview
6Static
static
6Payload/Wa...6.2.js
windows10-2004-x64
3Payload/Wa...6.2.js
windows11-21h2-x64
3Payload/Wa...s/cycc
ubuntu-18.04-amd64
1Payload/Wa...s/cycc
debian-9-armhf
1Payload/Wa...s/cycc
debian-9-mips
1Payload/Wa...s/cycc
debian-9-mipsel
1Payload/Wa...ynject
macos-10.15-amd64
1Payload/Wa....dylib
macos-10.15-amd64
1Payload/Wa....dylib
macos-10.15-amd64
1Payload/Wa....dylib
macos-10.15-amd64
1Payload/Wa....dylib
macos-10.15-amd64
1Payload/Wa...ts.pdf
windows10-2004-x64
3Payload/Wa...ts.pdf
windows11-21h2-x64
3Payload/Wa...d.html
windows10-2004-x64
3Payload/Wa...d.html
windows11-21h2-x64
4Payload/Wa...aid.js
windows10-2004-x64
3Payload/Wa...aid.js
windows11-21h2-x64
3Payload/Wa...aid.js
windows10-2004-x64
3Payload/Wa...aid.js
windows11-21h2-x64
3Payload/Wa...d.html
windows10-2004-x64
4Payload/Wa...d.html
windows11-21h2-x64
4Payload/Wa...aid.js
windows10-2004-x64
3Payload/Wa...aid.js
windows11-21h2-x64
3Payload/Wa...-v1.js
windows10-2004-x64
3Payload/Wa...-v1.js
windows11-21h2-x64
3Payload/Wa...-v1.js
windows10-2004-x64
3Payload/Wa...-v1.js
windows11-21h2-x64
3Payload/Wa...-v1.js
windows10-2004-x64
3Payload/Wa...-v1.js
windows11-21h2-x64
3Payload/Wa...ts.pdf
windows10-2004-x64
3Payload/Wa...ts.pdf
windows11-21h2-x64
3Payload/Wa....dylib
macos-10.15-amd64
1Analysis
- max time kernel
129s - max time network
107s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
30/05/2026, 04:29
Behavioral task
behavioral1
Sample
Payload/Warriors.app/Frameworks/AppLovinSDK.framework/AppLovinSDKResources.bundle/omsdk-v1.6.2.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Payload/Warriors.app/Frameworks/AppLovinSDK.framework/AppLovinSDKResources.bundle/omsdk-v1.6.2.js
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Commands/cycc
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
Behavioral task
behavioral4
Sample
Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Commands/cycc
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral5
Sample
Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Commands/cycc
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral6
Sample
Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Commands/cycc
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral7
Sample
Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Commands/cynject
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral8
Sample
Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Libraries/SubstrateBootstrap.dylib
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral9
Sample
Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Libraries/SubstrateInjection.dylib
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral10
Sample
Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Libraries/SubstrateLauncher.dylib
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral11
Sample
Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Libraries/SubstrateLoader.dylib
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral12
Sample
Payload/Warriors.app/Frameworks/MolocoSDK.framework/Assets.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
Payload/Warriors.app/Frameworks/MolocoSDK.framework/Assets.pdf
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral14
Sample
Payload/Warriors.app/Frameworks/MolocoSDK.framework/Resources.bundle/endcard.html
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
Payload/Warriors.app/Frameworks/MolocoSDK.framework/Resources.bundle/endcard.html
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral16
Sample
Payload/Warriors.app/Frameworks/MolocoSDK.framework/mraid.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
Payload/Warriors.app/Frameworks/MolocoSDK.framework/mraid.js
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral18
Sample
Payload/Warriors.app/Frameworks/NeftaSDK.framework/mraid.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
Payload/Warriors.app/Frameworks/NeftaSDK.framework/mraid.js
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral20
Sample
Payload/Warriors.app/Frameworks/UnityFramework.framework/MolocoSDK.bundle/Resources.bundle/endcard.html
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
Payload/Warriors.app/Frameworks/UnityFramework.framework/MolocoSDK.bundle/Resources.bundle/endcard.html
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral22
Sample
Payload/Warriors.app/Frameworks/UnityFramework.framework/MolocoSDK.bundle/mraid.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
Payload/Warriors.app/Frameworks/UnityFramework.framework/MolocoSDK.bundle/mraid.js
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral24
Sample
Payload/Warriors.app/Frameworks/UnityFramework.framework/PAGAdSDK.bundle/omsdk-v1.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Payload/Warriors.app/Frameworks/UnityFramework.framework/PAGAdSDK.bundle/omsdk-v1.js
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral26
Sample
Payload/Warriors.app/Frameworks/UnityFramework.framework/UnityAdsResources.bundle/omid-session-client-v1.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Payload/Warriors.app/Frameworks/UnityFramework.framework/UnityAdsResources.bundle/omid-session-client-v1.js
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral28
Sample
Payload/Warriors.app/Frameworks/UnityFramework.framework/UnityAdsResources.bundle/omsdk-v1.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
Payload/Warriors.app/Frameworks/UnityFramework.framework/UnityAdsResources.bundle/omsdk-v1.js
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral30
Sample
Payload/Warriors.app/Frameworks/UnityFramework.framework/UsercentricsUIResources.bundle/Assets.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Payload/Warriors.app/Frameworks/UnityFramework.framework/UsercentricsUIResources.bundle/Assets.pdf
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral32
Sample
Payload/Warriors.app/Frameworks/WeAreWarriors.dylib
Resource
macos-20250619-en
macos-10.15-amd64
General
- Target Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Commands/cynject
- Size 212KB
- Sample260530-e4f25sfz7m
- SHA256 01175a57da15e7bc71cbbb2afbb56834d955d225c9a19541bc79f3020bb10d06
- MD5 8ad8162a530866f3e2dfe470b2346124
- SHA1 0e052088721bd335b9a5d9933c87a44662544bbf
- SHA512 7e6152bf86596c60d4a8ea891684b299f1feb5f6329ea939362997c55e5d0eb5b1a874efecf07bdc7bc3e0df8873adec7fd128b2d214de069b73c2ff39910c2e
- SSDEEP 768:yoRzY1Cq9dPFNLU9sdyi1W4R1MWPZdPFNLU9sdyi1W:HuNusd+qNusd
- TLSH T1DC244B86B74C1F85E8E83D34E5590A45E063D6702B25831BADC8D2A8AFDF7D91433B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Commands/cynject\""1⤵PID:508
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Commands/cynject\""1⤵PID:508
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Commands/cynject1⤵PID:508
-
/bin/zsh/bin/zsh -c /Users/run/Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Commands/cynject2⤵PID:510
-
-
/Users/run/Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Commands/cynject/Users/run/Payload/Warriors.app/Frameworks/CydiaSubstrate.framework/Commands/cynject2⤵PID:510
-