Overview

overview

6

Static

static

6

Payload/Du...ng.pdf

windows10-2004-x64

3

Payload/Du...ng.pdf

windows11-ltsc_2024-x64

3

Payload/Du...ct.pdf

windows10-2004-x64

3

Payload/Du...ct.pdf

windows11-ltsc_2024-x64

3

Payload/Du...rk.pdf

windows10-2004-x64

3

Payload/Du...rk.pdf

windows11-ltsc_2024-x64

3

Payload/Du...ed.pdf

windows10-2004-x64

3

Payload/Du...ed.pdf

windows11-ltsc_2024-x64

3

Payload/Du...ng.pdf

windows10-2004-x64

3

Payload/Du...ng.pdf

windows11-ltsc_2024-x64

3

Payload/Du...ct.pdf

windows10-2004-x64

3

Payload/Du...ct.pdf

windows11-ltsc_2024-x64

3

Payload/Du...rk.pdf

windows10-2004-x64

3

Payload/Du...rk.pdf

windows11-ltsc_2024-x64

3

Payload/Du...ed.pdf

windows10-2004-x64

3

Payload/Du...ed.pdf

windows11-ltsc_2024-x64

3

Payload/Du...nd.pdf

windows10-2004-x64

3

Payload/Du...nd.pdf

windows11-ltsc_2024-x64

3

Payload/Du...ng.pdf

windows10-2004-x64

3

Payload/Du...ng.pdf

windows11-ltsc_2024-x64

3

Payload/Du...ng.pdf

windows10-2004-x64

3

Payload/Du...ng.pdf

windows11-ltsc_2024-x64

3

Payload/Du...ct.pdf

windows10-2004-x64

3

Payload/Du...ct.pdf

windows11-ltsc_2024-x64

3

Payload/Du...rk.pdf

windows10-2004-x64

3

Payload/Du...rk.pdf

windows11-ltsc_2024-x64

3

Payload/Du...ed.pdf

windows10-2004-x64

3

Payload/Du...ed.pdf

windows11-ltsc_2024-x64

3

Payload/Du...ze.pdf

windows10-2004-x64

3

Payload/Du...ze.pdf

windows11-ltsc_2024-x64

3

Payload/Du...ct.pdf

windows10-2004-x64

3

Payload/Du...ct.pdf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Duolingo_Language_Lessons_IPAOMTK.com.ipa
  • Size 197.7MB
  • Sample260710-d22qdsdy4v
  • SHA256 50ecdace8ee9515b23c4fc6f0789be1d071fbcee1cb6ff603cdbbf3a7e833550
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwarediscoveryevasionpdfspyware

Malware Config

Targets

    • Target
      Payload/DuolingoMobile.app/Frameworks/CoreUIJuicy.framework/falstaff_eating.pdf
    • Size 10KB
    • SHA256 e5ed458e1edf451b79aed5cbadda1f8eb6d230e16233012941d30613bb97bff2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral1behavioral2
    • Target
      Payload/DuolingoMobile.app/Frameworks/CoreUIJuicy.framework/falstaff_eating_compact.pdf
    • Size 10KB
    • SHA256 5b2b1e75f8cbad5cdcd091b7123a4687303a1fb9d51a67132beae16b331e0d37
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral3behavioral4
    • Target
      Payload/DuolingoMobile.app/Frameworks/CoreUIJuicy.framework/falstaff_eating_dark.pdf
    • Size 10KB
    • SHA256 bf049f7c4c0b9221fe8f0f94673e79508f42d91067ae510095a02c3e66a79651
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral5behavioral6
    • Target
      Payload/DuolingoMobile.app/Frameworks/CoreUIJuicy.framework/falstaff_eating_locked.pdf
    • Size 10KB
    • SHA256 b46cc622fb79741868e0058b84b4df19b317ff805901ee61ae32b8b15636a2fd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral7behavioral8
    • Target
      Payload/DuolingoMobile.app/Frameworks/CoreUIJuicy.framework/falstaff_fishing.pdf
    • Size 11KB
    • SHA256 f5cd113d8ad7231dec9521d59359489ded282d2d190022679febcbb45c464f80
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral10behavioral9
    • Target
      Payload/DuolingoMobile.app/Frameworks/CoreUIJuicy.framework/falstaff_fishing_compact.pdf
    • Size 11KB
    • SHA256 695e83266d649f45de9dabbeaa35fcf95922d3b46ebb314944531f7675dcdde5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral11behavioral12
    • Target
      Payload/DuolingoMobile.app/Frameworks/CoreUIJuicy.framework/falstaff_fishing_dark.pdf
    • Size 11KB
    • SHA256 4331bd9d4813db5e5558a2b60ac4cdb707226c4c64679193a5f117f2552ca260
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral13behavioral14
    • Target
      Payload/DuolingoMobile.app/Frameworks/CoreUIJuicy.framework/falstaff_fishing_locked.pdf
    • Size 11KB
    • SHA256 6d259043fe9534aae0e28e6e3a514fe2569637f64a87068d7d06e140f4b65bb7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral15behavioral16
    • Target
      Payload/DuolingoMobile.app/Frameworks/CoreUIJuicy.framework/falstaff_guided_call_forest_background.pdf
    • Size 52KB
    • SHA256 a34e4b2f6b9a9fbba163765df1ff3620e416f032080982a74bda922f0d8a2f0d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral17behavioral18
    • Target
      Payload/DuolingoMobile.app/Frameworks/CoreUIJuicy.framework/falstaff_showering.pdf
    • Size 14KB
    • SHA256 79db94f72fb6e62a2025d3ec6d0c27189a806c26620566dc5cfff16e41f7becc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral19behavioral20
    • Target
      Payload/DuolingoMobile.app/Frameworks/CoreUIJuicy.framework/falstaff_sneezing.pdf
    • Size 6KB
    • SHA256 71c035336c05adcfb9e7a7f1527a260aff07200425daa8b4c3299e2db6cd3e61
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral21behavioral22
    • Target
      Payload/DuolingoMobile.app/Frameworks/CoreUIJuicy.framework/falstaff_sneezing_compact.pdf
    • Size 6KB
    • SHA256 0e101a65c14623f32eb6f41e0311fafaee703d6464c23927cc9021c06b7ebb0f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral23behavioral24
    • Target
      Payload/DuolingoMobile.app/Frameworks/CoreUIJuicy.framework/falstaff_sneezing_dark.pdf
    • Size 6KB
    • SHA256 b9ec6c8ee036e1b1d42bdc96facbc56654f6f285bc3b08ba6550371c0d36d228
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral25behavioral26
    • Target
      Payload/DuolingoMobile.app/Frameworks/CoreUIJuicy.framework/falstaff_sneezing_locked.pdf
    • Size 6KB
    • SHA256 f3f18b6a2e779b98ff3b1339b00caee9122ae5fb593580083c29891042e92274
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral27behavioral28
    • Target
      Payload/DuolingoMobile.app/Frameworks/CoreUIJuicy.framework/falstaff_snooze.pdf
    • Size 8KB
    • SHA256 11336c05c445e0bc24fa836b43a101d12c4074001d4854e23fdce8a76801ac0a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral29behavioral30
    • Target
      Payload/DuolingoMobile.app/Frameworks/CoreUIJuicy.framework/falstaff_snooze_compact.pdf
    • Size 8KB
    • SHA256 1a36163f769b2dd662c256afdeb83b4c84179bbfc4ba04b540df7082c842ed5a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

pdfevasion
Score
6/10

behavioral1

adwarediscoveryspyware
Score
3/10

behavioral2

adwarediscoveryspyware
Score
3/10

behavioral3

adwarediscoveryspyware
Score
3/10

behavioral4

adwarediscoveryspyware
Score
3/10

behavioral5

adwarediscoveryspyware
Score
3/10

behavioral6

adwarediscoveryspyware
Score
3/10

behavioral7

adwarediscoveryspyware
Score
3/10

behavioral8

adwarediscoveryspyware
Score
3/10

behavioral9

adwarediscoveryspyware
Score
3/10

behavioral10

adwarediscoveryspyware
Score
3/10

behavioral11

adwarediscoveryspyware
Score
3/10

behavioral12

adwarediscoveryspyware
Score
3/10

behavioral13

adwarediscoveryspyware
Score
3/10

behavioral14

adwarediscoveryspyware
Score
3/10

behavioral15

adwarediscoveryspyware
Score
3/10

behavioral16

adwarediscoveryspyware
Score
3/10

behavioral17

adwarediscoveryspyware
Score
3/10

behavioral18

adwarediscoveryspyware
Score
3/10

behavioral19

adwarediscoveryspyware
Score
3/10

behavioral20

adwarediscoveryspyware
Score
3/10

behavioral21

adwarediscoveryspyware
Score
3/10

behavioral22

adwarediscoveryspyware
Score
3/10

behavioral23

adwarediscoveryspyware
Score
3/10

behavioral24

adwarediscoveryspyware
Score
3/10

behavioral25

adwarediscoveryspyware
Score
3/10

behavioral26

adwarediscoveryspyware
Score
3/10

behavioral27

adwarediscoveryspyware
Score
3/10

behavioral28

adwarediscoveryspyware
Score
3/10

behavioral29

adwarediscoveryspyware
Score
3/10

behavioral30

adwarediscoveryspyware
Score
3/10

behavioral31

adwarediscoveryspyware
Score
3/10

behavioral32

adwarediscoveryspyware
Score
3/10