a54f650177a5f9d6303ff4caed4857be8eedfb04de8e4684a0b372aaa29f6ad1

Sharing

Copy URL Twitter E-mail

General

Target
ck4dqm.ipa
Size 83.4MB
Sample260625-ej8awsht4r
SHA256 a54f650177a5f9d6303ff4caed4857be8eedfb04de8e4684a0b372aaa29f6ad1
MD5 1de88aead0f3aab24885d25570afc658
SHA1 45735f8d1c528cc2097b3a84688d12bf4a968559
SHA512 a998c4fac2c3141a26fe3e44a639c16be292f618b092db0ac102b7b04e8a9f1c27bc27442677a5d5a20c8ffc7cdc1309a02f4bf4a8c5e81426050a1cb0de8c5b
SSDEEP 1572864:uFR+bSLNlEpwFW006EfKQk05gICrovjkrjV76obafk/2GNZc2r0w5KV7kKbHHIvf:u4SLNhXDn05ow4XR6bi2Gw2rj5KVI8H0
TLSH
T139183366D4FCA459ED3C86B084007A02DC250C13CE12F2973F275696CFDB6CBABB955A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

macos

Malware Config

Targets

- Target
  Payload/Spotify.app/Frameworks/EeveeSpotify.dylib
- Size 1.4MB
- SHA256 a68d8f5d7da5a0d63e293f14cc322d338151ed6734adf2006bb2cab658e4ef90
- MD5 4dcafa2e2469dd8b165dce2239cf73b4
- SHA1 f31cf0ee2edd1ad44d31f0071a45259584c3ade7
- SHA512 008013fb1cce7f9c4a25fa6e53af66734fb839591b05cea8d3c2fc036eeb2d9c3c72aa36b9089994487ade3efa1fd6ae9bef423085c63ea622b06014a4d502ed
- SSDEEP 24576:TSGHMflCumDupvfjXAqxdgISusw5lbo5LvhoG66t:TnIO4SISjwo5doG66
- TLSH
  T1D2654A41A68C1D34E099F27C1C564BA0B43BFA9087B0C2A97F27166AFD596F2553EF30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Payload/Spotify.app/Frameworks/Sposify.dylib
- Size 456KB
- SHA256 c07f736f5b3529a8b254a3fdde11a22f8efd7bdf393b9af3fb720cfe14033d42
- MD5 d104d3bb67e99a0c9ca16bafbef3d754
- SHA1 71dc0c5862b5f67e48e1090f5fbd7651f842e523
- SHA512 d939edc9d97aa41819db9080bfb275c358b38cdd0efd4e66da423342244674e58abcaefaba8bdcf98c6b07a5a1878289918f870961db6f1e51c9ec227de14c69
- SSDEEP 6144:+xyo8MxSTEZmIPR0wvoG9JreUZG5Ue9TEZ0hyL0wvoG/+fPiVTEZ0hyL0wvoGC:+3NwTEZmIPG5Ue9TEZ0hyT+fmTEZ0hy
- TLSH
  T129A4F855AE0C2E0BC1CEF17FCD4085AA168FB62247958772BC22121DCDE1AF16D2BD76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Payload/Spotify.app/Frameworks/SposifyFix.dylib
- Size 180KB
- SHA256 d1d25e5b36d224c98c17d120530b4f0091bcd2dc5d4ff5d30f8a95497c0e27fd
- MD5 4da5b522417b1ae800a9f760ec330d7d
- SHA1 71746a6be4cb819a8b581f1b383fa58ca2bb87ef
- SHA512 3c8ae443d42ef9add75f0bf78d0297acf90be2af8ce077612305ca45e410f9ff78cdd7fbbe2fb61def978d0d5d9389ead9b0d0b83fdd2b013829e4a790d1c408
- SSDEEP 1536:ReXsSpN7Jtbxgr/TCp8aM55e2q98F2jOxlphLZT0cG:GSdlqVcG
- TLSH
  T1E00485967F0CEBF9E8DD257F18C0914DE02BFC4172459A793C24096E9BE16BD2063A4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Payload/Spotify.app/PlugIns/IntentsExtension.appex/IntentsExtension
- Size 166KB
- SHA256 b4297cb3a4506caa55cd688e3265b6740e1f9738a34761cef4c30c81b5b2208d
- MD5 0627edee8aa19d36ed6467316301d0bb
- SHA1 9476c7de316fea0ee1fc51026cb2cd46526eb038
- SHA512 73aef11b01bfd0394bc43056ad49ab01656d27cd65f6f0b960bfb23e6f893942f1f058204b511f7849575f9cf451ba2cb075ca885f69b45c56c6eccbc972771e
- SSDEEP 1536:16bNDTrfW7OZGt+Nq/jpuS2K/JDLr8HJ+t/ZwLY9YtcQzoXrUuJqwL8y2LUFtRm:gbV0t+Y7MTpoXLX
- TLSH
  T109F31A76234C1C76C089F13CDA8397206236FD6097A292B57F62571ECE7A3916C3AE71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Payload/Spotify.app/PlugIns/NotificationContentExtension.appex/NotificationContentExtension
- Size 212KB
- SHA256 ee4c94b12aee6982cb9cab21f8fb5404ff6cd8a318725ca4cdd44e7f7304fdb7
- MD5 0e5d2f5ae97433b6af2c0dede7f3baa6
- SHA1 e35efd969506d9052db1e84cc0b577afa0a2d9a7
- SHA512 ab7c143dff6d64b51389f9afd58d2353496aee51ad5ce8d2b7e2deedb7c72c7ce8f34bdce14165aef14647797935837f31bc908e9ad3db30084acb4918c99653
- SSDEEP 3072:Pj5jxPchn8fmrcP822SdxeV+CbfrFO2Bg:Pj5VPhE22S4FFBg
- TLSH
  T131242936721C2C35D084F13C6A425360223AFE1897B1C3BA7E92565ECE5E7A6253DFB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Payload/Spotify.app/PlugIns/NotificationServiceExtension.appex/NotificationServiceExtension
- Size 234KB
- SHA256 2ecf9700b59870debc2a0bb15d0fafb09ac390aabc7f311515c36e75c453ca4a
- MD5 4b29572a8d8d0ce98bd886b30b41ac72
- SHA1 a0cfd491d3cf0bf180ea387cf876ac3688c3b955
- SHA512 497832cf85b291cbf2ef2a7aa995241814c88b8f9e4f27402daa33d1da5925530339c1e34cb0e762d0131db3d055bf109a7fbb979e3f516aae773155b1ce214e
- SSDEEP 3072:L0q25sSRN3JE9kmHU4MbT/OgMP2Q+Iuq1qo:Hws5bHsijdUo
- TLSH
  T1D3342963325C1C75D088F17C9A9213603537BE2487B182F97E62166EDEAE7B2613DE70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Payload/Spotify.app/PlugIns/OpenSpotifySafariExtension.appex/OpenSpotifySafariExtension
- Size 88KB
- SHA256 4a68de81ac3f17526ee16dd52a8f386ee60012bd7a1637ad67ce62ba89eacbb4
- MD5 d064958f6ea3c88391934e6704f6b4ff
- SHA1 567f5e109572c331fc2a9bb801c3b8559b5b51de
- SHA512 8e4d85e9217cc6f17887e27ee9d277aeb87a13d3e58696fd1ca69e4b225b053d00cef84326332cb654a47ff3dfff039f28eb36eca8ce2a8d941bf07c691fc134
- SSDEEP 384:SMotAxgS+DvIF2CkRweO07mpLRCKShPcLWCe28B:S9t+uvIQweO08LAmLWCB8
- TLSH
  T126934A121B8C0876D89C627C64C64340943BFA892FA25376B762976D2F777F1103AF92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Payload/Spotify.app/PlugIns/OpenSpotifySafariExtension.appex/background.js
- Size 213B
- SHA256 d92ece358bdd906b2bc846afcab47b9cc093c2c8cd1aa315d8149623158b4988
- MD5 9c07133d99da2d2a7979aada97730f27
- SHA1 b42945c5b9d49b42fae508fe42ef0593d6ac2f6a
- SHA512 ba063ff57773e41a2a8520adde641d6aae77a3fa07069c950c5adc053124bb45b5e8487de4cab4cd5bee790b927edd6b087480adf53e61e382a3a9d0ce07e801
- TLSH
  T1F8D0A9836CF82012C6B554C9EC026B1B3520E8423328AA34BE8E839A2FA90200C403AA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral8
- Target
  Payload/Spotify.app/PlugIns/OpenSpotifySafariExtension.appex/content.js
- Size 705B
- SHA256 aefd1da777bdf88636ce0effc9436a26c80e90b036e55653e63a1832f8182c3d
- MD5 076786b1892648bec2f4144bf72f8033
- SHA1 39dfde285f013ffed48c99f6e9eac6eb1661a8a9
- SHA512 cb3177784c818ee131fc3ae4a033e585219a71aeff1718375eb1771b9efb0aeef8d1159bf53f251478469f4f028f673464ba42e1a25ea2dd917099c6932721ca
- TLSH
  T10B01C05B09E4010164F312497E1A3B5D323240D32749B214BD0C47C47F66FAF4639BDE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral9
- Target
  Payload/Spotify.app/PlugIns/OpenSpotifySafariExtension.appex/popup.html
- Size 218B
- SHA256 573dab28c58054c855a9ee1a79862e6d6874164d9bfd6549d005354cea8082e7
- MD5 1aad5458c00e49ae2025cf1447e960b2
- SHA1 36fe1c9ac2d25919546fea464bc502243c6c09fc
- SHA512 912d0c69415ce6cecfb6f4da9bda388db3c23d8b28bae9623e3be7bbae1d68d001b2c0c3d43b9d5d34a18eb8b0f19cd2d937261888fcac18f2e7efd09679dab4
- TLSH
  T12AD023460870D605042845411C94F9590C8B518A75404D5034DFF0313F84345747FD7C
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10
- Target
  Payload/Spotify.app/PlugIns/OpenSpotifySafariExtension.appex/popup.js
- Size 38B
- SHA256 aee2d700e444faf0e82ca3c6052925ee19d7bfc57e65ec42a17dcabc9c87c419
- MD5 24d79bfee9ea2b5bc70dcc0e8944fa29
- SHA1 82b9924018356916c6cc71e37774d61d2fc76ce6
- SHA512 74af58546dc54e7192eb436328cf1bab0c8db20dabd2b3fd6ec075e68a90a1ea99b634fe4619b310c1b86c2b81bf032b7a79ccde0af20152ef776d2babde51ba
- MD5 SHA1 SHA512
Score

1^/10
behavioral11
- Target
  Payload/Spotify.app/PlugIns/WidgetExtension.appex/WidgetExtension
- Size 1.2MB
- SHA256 3072401f9f87f18c8a8b135904e480f4affa59ff5679238c978e51bd7a47c2c2
- MD5 bdf8952af565287bb48c71d4115792e7
- SHA1 50747db13b5d5ebae016e3348f76602bc4d11eaf
- SHA512 c4e277852e5ed9817aa72e39ff566669dbadb426a031daaad459d0d37656fc139deea95832d52534c3ec9bb3938293fd06be8128f92529bbd8a38bb4411a5636
- SSDEEP 12288:ZLbsoUe+NqSysI8kH3EnLOob4RngWH1xj982fCXDFmBNTbQRHqTvpvxkXBRf:vUhNo/7j98sbvpQBR
- TLSH
  T1B4456B51634D1C30E099B2BCAC998710B53BBAA45660C2F5BF2B522FFD56AD2813DF70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Payload/Spotify.app/Spotify
- Size 167.0MB
- SHA256 a879775afc65197b23a9e482d5558933fc067513f2e75655d0f82bd92ab2678b
- MD5 19ac53b4426bcd4e60a4bfa8ecbe51c0
- SHA1 6395c6b0fd79c3a8d879702c07a02b0c1f56e415
- SHA512 b6123292e6e0328dbdb25b9548166578f8d85ff18e3647805618f372c73793bcb4ced0e1eefa491318afb014ad09c508fbd7a35144e9aaf2533d8a04bdb07441
- SSDEEP 786432:jtwdJrJCCJ4x7fV6R8wUnOCyCBxZowqnxCsnlY0aB0N5ZP+IG1QCFcOiiZvIMKM3:Bwj6xI0pTeZG09G1PfqyxtIMLqBo
- TLSH
  T1BE884A51A25C2834E1C9F3BC6C868BE8752BF6A08671C2967D77025EED427D6813EF70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Payload/Spotify.app/licenses.xhtml
- Size 135KB
- SHA256 61ceda40347f53dca15653bea2e12b47bbf536a51dee09b24d97d649184f90c9
- MD5 1bd7aed27ab761941678b06e67cc514c
- SHA1 2acd1e82d724656e8f5faa49e868edfb09ac51af
- SHA512 7c0bcd56786b892e529c10608cb855abaa9fb7d92a007f92526032cce392ddadda9348fcc59ef55429f1350981c6b2bbf4250897727ae36d86848462f4a7cecf
- SSDEEP 3072:Ju7fFX6tTpBW+LjzC5/2IWY4xykq7b/Zgo1Zl01:wQLjGsID4YdZgoq1
- TLSH
  T12AD3E82A76442B3306C342ED5A9A27DEF2D750A8A31A1D4C32FCD1D8175BD6382FF196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14