f6264de49a85b646baaab99d45628cca77f563799072fe051ccf5664d4b1a458

Sharing

Copy URL Twitter E-mail

General

Target
Retouch_5.5.3-IPAOMTK.COM.ipa
Size 812.9MB
Sample260712-jw39xset3k
SHA256 f6264de49a85b646baaab99d45628cca77f563799072fe051ccf5664d4b1a458
MD5 189e850b9a97a1b335383861ea3b83f8
SHA1 bddf56a7ec84c20de24bd1df86c066cb851cacf1
SHA512 d0b717be7e2fa362ba27da2ad3a282807a64293f6dddd5dd022748feb6f21c648e0e9932f5e5c76ec64f766954146678f731a30bf13a673703215103a07016de
SSDEEP 25165824:8HCAM85gJC896hmlI/14kdQsZRl1ekMk/qzOcFALtxDel8:8Hlt5d898ml2ugQsrl1e5bOlzqa
TLSH
T1969933C75285D709E802B033604A23068524F53DB5AB6FEBDB06876A71B37D2BD7077A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Payload/TouchRetouchBasic.app/Frameworks/AmplitudeSessionReplay.framework/webview.js
- Size 180KB
- SHA256 d056d8b0c292d6394a6468e4fffaba0e973008b76fbf87e47a52ee952f3dd0ed
- MD5 ac79249f4ef515a0181bd241994f1f3b
- SHA1 4c76d974cfe69cda65ae2b4aeb0aaf8de106028e
- SHA512 006ee23e204ac45dbe34c860f37fb704f3b594f8717a50689944c5eabbc21c804731eeaa5d41ab4ac7d82bd0f140a4260c6cfd7f4b4a53d20ce5bee569cd3f53
- SSDEEP 3072:JuoHYy+YKQja0jyKqQOSR7aYik3d5gmoqT+:Juo4y+YKEakyKqQdoqC
- TLSH
  T1560408EA77A6A03397EA12A950B60241F73A1A5D304C547CF67C98EB387184311FBF79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Payload/TouchRetouchBasic.app/Frameworks/Sideloadbypass1.dylib
- Size 220KB
- SHA256 f00aea3a9627a2b580c9078b53b4d5b40543296ca29f177386276cdcf7fe9475
- MD5 62f75f239fc0115fcc80c3231f691ac3
- SHA1 be85ce50dd19cbde3eb1915d1cbec1c43985b9b8
- SHA512 8e63f5df0df1358c4eda23f4d2b4faa906075b032fcf644e096f60175b05f54de49ead8d9a4b11d3751e8640e50b4a5034a4e856dfabed3a9c08119059bce522
- SSDEEP 1536:P6I/BL6eG2+cylefaIJBtTiGc2tS9Vv7BW:b/Bu7wr
- TLSH
  T1AE241A5AFF581957C9CB02BD81188F1DF43EE378DB81C1D2A5F5C8A84E917A38E16A07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Payload/TouchRetouchBasic.app/Frameworks/Sideloadbypass2.dylib
- Size 89KB
- SHA256 80f1daaa1ea4b979e36a1f0a414bd8bbfb9e14cb57f76bd87ce0f332577c67ed
- MD5 058c85c2c911258f1181ec066a72c75c
- SHA1 9341b663e98e9ff5f6deb3bec4a470cd338f5212
- SHA512 43c7a9d26b82049b507ea151db2490e11c1398cae66f9d431d909bb137af1aeb48ec8cd3abfaf07925dd931b23dc231f90701a3d257c70b0f3c59161f2fab4f1
- SSDEEP 384:hQTOlMHBBcJQ4lsxHJC9LA2OmfUVGbbrZbL4bHmygaBqBGVLI8hm1Z3q1QrI8DPV:hQy2BBcJQPxHJC9LA2OmfUVFyNfng8T
- TLSH
  T1EC93B657BF8C1957C9CB42BD40488728B03FE778CB62C6E778B1C9AE4D817931A26617
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Payload/TouchRetouchBasic.app/Frameworks/TouchRetouchUnlocked.dylib
- Size 75KB
- SHA256 4d43d0574b62cbcc8085515a0c826f347d58192b300e2bdb51edb0c9b8f27077
- MD5 a36a5c2eb730b102972328759cf5423d
- SHA1 745d7c505011f30521467b6135d7bef385b852c5
- SHA512 fc6b0d6053120f2860f7a120a5e8ae9f0764842b91a90268d9abc500b2acc6662b216c536afde8d72b4eb12b00b6f6aa727bcf242e4bc14b4161255ffdd529c6
- SSDEEP 192:fbNOYzYeDMY4LNrsKjmr+M/xnrE8dprFPHGzn56rJIx8P0XAzEcF8v:fbNO2VDMYEpsOQ+cJr/dprJmz8l28TT
- TLSH
  T1A87317672F8C6A43D8CA217F15C89251B83FFE652B1282B21C5290BF0ED57F0655B40F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Payload/TouchRetouchBasic.app/Frameworks/libswift_Concurrency.dylib
- Size 407KB
- SHA256 2bb88d579fe86f6254ee6ebc4dd070e7d1c77a6601511cdadb488a7eeac1a03e
- MD5 e7db058db89316434cec4dd82aa4032f
- SHA1 3f33ec8b9080980cc41f889a2ca7ddd0be5ad77b
- SHA512 b90fd6b846c1b164267339de47b568bd2d6b13ef9ddb48832948fe2f3cbb00c91f9a94a805e995d8b05ece9be9584cf8c9ba5f2f0f6ed28af7723d4b988afd97
- SSDEEP 6144:mBwZLMFdm0QTb9U36ExXIY4ZZ0uZ8m3yQqpTMNZZlGNSNX:mKZ70QTb9U36E5eb0bmiQgToZ8NSNX
- TLSH
  T1E6942942AE4C5C26D9C4B3FFA8419674703FF954872180E3B876692EEDF76F280166B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Payload/TouchRetouchBasic.app/PlugIns/RetouchActionExtension.appex/[email protected]
- Size 729B
- SHA256 abd0e4b5e9fc323593c9efc1e8f699746e882fb16734efc1e4ba6dea0f13a145
- MD5 91b98838272df1e1d1b4f88d77ae61a1
- SHA1 552f164ac97e48807f28da51265707f8e7525094
- SHA512 3c4b3bfb258c44f43bd90ded6d10e4fbcc8ee152e0de851729fdf70e90a74456da901d0f0030165fd9831841f96dd7338a9b80d47862de59105f3283d3354bdf
- TLSH
  T1200194C5B86DAA90C88020780B034349EF35815B300F6CDA8B8F181C0980B8E97CFEEA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Payload/TouchRetouchBasic.app/PlugIns/RetouchActionExtension.appex/AppIconExtension-iOS20x20@2x~ipad.png
- Size 729B
- SHA256 abd0e4b5e9fc323593c9efc1e8f699746e882fb16734efc1e4ba6dea0f13a145
- MD5 91b98838272df1e1d1b4f88d77ae61a1
- SHA1 552f164ac97e48807f28da51265707f8e7525094
- SHA512 3c4b3bfb258c44f43bd90ded6d10e4fbcc8ee152e0de851729fdf70e90a74456da901d0f0030165fd9831841f96dd7338a9b80d47862de59105f3283d3354bdf
- TLSH
  T1200194C5B86DAA90C88020780B034349EF35815B300F6CDA8B8F181C0980B8E97CFEEA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Payload/TouchRetouchBasic.app/PlugIns/RetouchActionExtension.appex/[email protected]
- Size 996B
- SHA256 5a79bb08ca5e81a1e93e62fd86216e327d6b96768499174023f4aeecf542d93c
- MD5 2b9301a1cd4c593d9605b9a8a904a4fe
- SHA1 c903a8a14c829e050b4099edf5c04c229c04bd92
- SHA512 66f6f707cda41876f5669cd38a97e6a1bbaa6a60f79467f42c93e046cd888e21ea364aa9eb7822f0b12f351f10c7eec31826967e36ffb92a2b898fdf96f68299
- TLSH
  T11B11886320A839E5DF1C0B76763202019DBFC9369A94BB1CD66EFC2D1974D71D31E458
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Payload/TouchRetouchBasic.app/PlugIns/RetouchActionExtension.appex/AppIconExtension-iOS20x20~ipad.png
- Size 424B
- SHA256 f2746179edfb16ceb69661df2be10c268ae56819e0baeed6fd8f25695e5c9fb2
- MD5 8e096559099057bea048bef770fa7e14
- SHA1 3bcee14c9f8805b6dd4ba9e7d2637a0db6c7990a
- SHA512 b237c16a40421992d77211692c66d2932242259ec4e2d819ba7e33a5248e646bf8f5e2bcb6733dcea74ce82525f8c7fe9d3f17cac2e2389cff5efb20890d33d7
- TLSH
  T184E0ABA252065E98CE882E766B7B1320FC7DB12D235A148C0E85DC2D0C7198051D2263
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Payload/TouchRetouchBasic.app/PlugIns/RetouchActionExtension.appex/[email protected]
- Size 937B
- SHA256 8c1c9cf648f6cce40f0e70de94aaea7bc0e4b1b90f6ba5c474b02d33962ba99d
- MD5 648b5cb623de9bab8ae2082a55658391
- SHA1 a781a25e6420d66c322b32ca217c4ab00d539e78
- SHA512 e45b5a31be0adb14411711ca9bbe3a1bc1096408b59f8a77d12c46f7e67b6fb307e358f6b6754526cffdcba81a374ccce53d1fb05ff76b0b0c3480466af0be00
- TLSH
  T1F4118447532AEC57C24E06381903F3019E3BF5822624460AECA9BDACE9A0F624447301
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Payload/TouchRetouchBasic.app/PlugIns/RetouchActionExtension.appex/AppIconExtension-iOS29x29@2x~ipad.png
- Size 937B
- SHA256 8c1c9cf648f6cce40f0e70de94aaea7bc0e4b1b90f6ba5c474b02d33962ba99d
- MD5 648b5cb623de9bab8ae2082a55658391
- SHA1 a781a25e6420d66c322b32ca217c4ab00d539e78
- SHA512 e45b5a31be0adb14411711ca9bbe3a1bc1096408b59f8a77d12c46f7e67b6fb307e358f6b6754526cffdcba81a374ccce53d1fb05ff76b0b0c3480466af0be00
- TLSH
  T1F4118447532AEC57C24E06381903F3019E3BF5822624460AECA9BDACE9A0F624447301
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Payload/TouchRetouchBasic.app/PlugIns/RetouchActionExtension.appex/[email protected]
- Size 1KB
- SHA256 4804102fe8f53ae9d689ad35eda85da12458ae021e5f9c6cfa15bc7f4a245417
- MD5 b1c0b4e7785cec764bdab020e867e4b8
- SHA1 fc040737bd756defcc425dd2f46bd6ff01d20c17
- SHA512 16c20dc979464ec24dcdb156b67ad13e8c4198fe9caf81cc3ff138a11fb3008003434c34203fcb5aed6473bffe585069a5c95e7c183c2dc827fdccc38cac70b5
- TLSH
  T13F31C619E4C4A900E8D63F345B134FD1E67A93034656C90DC615EF1F4ED104E2B85E64
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Payload/TouchRetouchBasic.app/PlugIns/RetouchActionExtension.appex/AppIconExtension-iOS29x29~ipad.png
- Size 561B
- SHA256 3bfe98c8f2b195d8ab3b64a2f7f2e97268f5ab7bd19051a85302ef2f5e0e47af
- MD5 ec397c89eb4e0cbffd66f5595ebe686c
- SHA1 cdc2992b57a91df1bec39d294ec0f84d77819c8f
- SHA512 c327ef2b23330b89973c146eb62722d34383416d20ac35544d515751345f1145af647f81d46ab52e9cb918e1925cb15ea55efb5b7b384b442685570d2a6bbb65
- TLSH
  T1E5F026E2B31C2C7DCFC917328567C7305F701175425520DC1E694858DE52645068B1A1
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Payload/TouchRetouchBasic.app/PlugIns/RetouchActionExtension.appex/[email protected]
- Size 1KB
- SHA256 ffbe139c76baa069ca2db9d3be195504149f9fb1b0d4490ee197af2944eb341d
- MD5 85f3ece8250177c5c16e04a6268089ad
- SHA1 a31a52274e41ed564a939a14bac2dd21a14dc3aa
- SHA512 4331629dbbaab805857cec8f4c7d113e7d1a9aa02a159c5959895c9e270453558915d269f671ce32535cc42caf80ea420c99ee3f51b41a81abe1bbce72b09293
- TLSH
  T12521FBA73E28F7D5D846E7BF279B339375F041475A0BD40C0BC544129C4F114009BA48
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Payload/TouchRetouchBasic.app/PlugIns/RetouchActionExtension.appex/AppIconExtension-iOS40x40@2x~ipad.png
- Size 1KB
- SHA256 ffbe139c76baa069ca2db9d3be195504149f9fb1b0d4490ee197af2944eb341d
- MD5 85f3ece8250177c5c16e04a6268089ad
- SHA1 a31a52274e41ed564a939a14bac2dd21a14dc3aa
- SHA512 4331629dbbaab805857cec8f4c7d113e7d1a9aa02a159c5959895c9e270453558915d269f671ce32535cc42caf80ea420c99ee3f51b41a81abe1bbce72b09293
- TLSH
  T12521FBA73E28F7D5D846E7BF279B339375F041475A0BD40C0BC544129C4F114009BA48
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Payload/TouchRetouchBasic.app/PlugIns/RetouchActionExtension.appex/[email protected]
- Size 1KB
- SHA256 14a90e289dbe9f49fbe4b6b5dd2c773f858439e183bec4063aea1df3fdd7df2f
- MD5 dab39ea9050ba4c5e06753d07ef67dcd
- SHA1 971aa4cc003a972b7af60a736b547f820cb8a3fc
- SHA512 6dea1c3842b8caff2ca964ed057755204905d74b473ddd2aafc172cbeb1428df4f72774c7cbe87d1235dcea1b8e435ea16e5c88808efa0d2a1967fc5c763009d
- TLSH
  T1A0412A4757F36656C747993F10A3828EEC2CC802C33B6418254CDC389503C94ECC2BB6
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Payload/TouchRetouchBasic.app/PlugIns/RetouchActionExtension.appex/AppIconExtension-iOS40x40~ipad.png
- Size 693B
- SHA256 5e5374bcdb22e96ad0ce1f5bca132af7a0b21eb402bd8aa30881ecfe790ae860
- MD5 84f9757ac14fc5561e2caac4af742859
- SHA1 00f236b0556f35deb45c2bb0e605d6d40c0f2722
- SHA512 8c85de8d34601dd7fcc01c5336ceea487b83fdd01712484f48f0e2260ecb89f21ccaf5f5bc9b83d046ae5a166300be5414b097cb329baa6e4ad2a66debd606d8
- TLSH
  T1030144929739E406CC94A438834316B8DB364E67139C371D0849BC090D0161C2B9FEA0
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Payload/TouchRetouchBasic.app/PlugIns/RetouchActionExtension.appex/[email protected]
- Size 1KB
- SHA256 eea17b4c15156488147011bcebcfd20f2be74ca0e6f6ad351af62c1a990a8d53
- MD5 0ac0df20e83a4a2425d904cdb608d6a8
- SHA1 2d19c0aaf40265967d1a79161294863742ad3db7
- SHA512 fac274bfe0274954b79ed91c5770b698f02ba22915f6371490ab19d6517ec20f120beadf072f457b69407bac8eb7dd7eb359756d2764c0079440ac849b63bb8b
- TLSH
  T170411B164F44F9CAEDEC5C70F47129696A3CA1E127171A5C0F19A41D4C4E31D8B4D475
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32