Overview
overview
7Static
static
7ref/win-x8...xy.exe
windows10-2004-x64
3ref/win-x8...xy.exe
windows11-ltsc_2024-x64
3ref/win-x8...ir.exe
windows10-2004-x64
3ref/win-x8...ir.exe
windows11-ltsc_2024-x64
3ref/win-x8...on.exe
windows10-2004-x64
3ref/win-x8...on.exe
windows11-ltsc_2024-x64
3ref/win-x8...re.exe
windows10-2004-x64
3ref/win-x8...re.exe
windows11-ltsc_2024-x64
3ref/win-x8...ot.exe
windows10-2004-x64
3ref/win-x8...ot.exe
windows11-ltsc_2024-x64
3ref/win-x8...og.exe
windows10-2004-x64
3ref/win-x8...og.exe
windows11-ltsc_2024-x64
3ref/win-x8...ce.dll
windows10-2004-x64
3ref/win-x8...ce.dll
windows11-ltsc_2024-x64
3ref/win-x8...xy.exe
windows10-2004-x64
3ref/win-x8...xy.exe
windows11-ltsc_2024-x64
3ref/win-x8...xy.exe
windows10-2004-x64
3ref/win-x8...xy.exe
windows11-ltsc_2024-x64
3ref/win-x8...ry.dll
windows10-2004-x64
3ref/win-x8...ry.dll
windows11-ltsc_2024-x64
3ref/win-x8...ry.exe
windows10-2004-x64
3ref/win-x8...ry.exe
windows11-ltsc_2024-x64
3ref/win-x8...et.dll
windows10-2004-x64
3ref/win-x8...et.dll
windows11-ltsc_2024-x64
3ref/win-x8...rl.dll
windows10-2004-x64
3ref/win-x8...rl.dll
windows11-ltsc_2024-x64
3ref/win-x8...nv.dll
windows10-2004-x64
3ref/win-x8...nv.dll
windows11-ltsc_2024-x64
3ref/win-x8....0.dll
windows10-2004-x64
3ref/win-x8....0.dll
windows11-ltsc_2024-x64
3ref/win-x8...b0.dll
windows10-2004-x64
3ref/win-x8...b0.dll
windows11-ltsc_2024-x64
3General
- Target iFRPFILE AIO v2.8.6.zip
- Size 39.3MB
- Sample260801-d6tkksdp4v
- SHA256 767091a7c1294e9909cf14424ba538fb3a40569d4a1cbb86ffeed199e9745328
- MD5 f5825ab4eeacd50b9c4b6c64a7710328
- SHA1 4705f0dd80d39fe60b567364c8b61741ff1bb82b
- SHA512 7a1625e62f25c9939cded0383ad6377eddd05d891cfd415b352f8889b74065203aff12c6673bbb3cb4980350e2853af3855b0db9387b9626d76fddec5e7bf443
- SSDEEP 786432:ItoP1D75yaVcmporHM6O6+J1qZBJDEKmwODelibc8sycS7CY2aZa2gmGzB+fX:HP15y9mporZF0QNDVH9sbbsyW+ZaHBqX
- TLSH T1FC97338ECC35D6CECEEAEAB2704682D4E19593F34C3D7021B0D66BD8ED15A6508B4B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ref/win-x86/idevicenotificationproxy.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ref/win-x86/idevicenotificationproxy.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
ref/win-x86/idevicepair.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
ref/win-x86/idevicepair.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
ref/win-x86/ideviceprovision.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
ref/win-x86/ideviceprovision.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
ref/win-x86/idevicerestore.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
ref/win-x86/idevicerestore.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
ref/win-x86/idevicescreenshot.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
ref/win-x86/idevicescreenshot.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
ref/win-x86/idevicesyslog.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
ref/win-x86/idevicesyslog.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
ref/win-x86/imobiledevice.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
ref/win-x86/imobiledevice.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
ref/win-x86/ios_webkit_debug_proxy.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
ref/win-x86/ios_webkit_debug_proxy.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral17
Sample
ref/win-x86/iproxy.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
ref/win-x86/iproxy.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
ref/win-x86/irecovery.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
ref/win-x86/irecovery.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
ref/win-x86/irecovery.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
ref/win-x86/irecovery.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
ref/win-x86/libcharset.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
ref/win-x86/libcharset.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
ref/win-x86/libcurl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
ref/win-x86/libcurl.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
ref/win-x86/libiconv.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
ref/win-x86/libiconv.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
ref/win-x86/libusb-1.0.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
ref/win-x86/libusb-1.0.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
ref/win-x86/libusb0.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
ref/win-x86/libusb0.dll
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target ref/win-x86/idevicenotificationproxy.exe
- Size 12KB
- SHA256 e8f74c7114bbe8aca752397b10336bd4923586845c0fab8341c874622a9d6ac4
- MD5 7e8a07530769ee15a50f0a4959f4bda7
- SHA1 8ed34e46d13ef976c9030713e857dbfd3288f82e
- SHA512 9bfa71e7b3ddd63dbee8278ecb081c9df800d53fb4ee08845113c972f7c2f346046cf9b949f9f178cde76a77bfe0a6ebe493b396aa2130f266a2838ddb589512
- SSDEEP 192:9CQuNpUiMnGmIQcNg0zsgoLrzjOXvVj3aNHBHui9CevVyq7E5pzpVVSNT/1:bu7UioVIQcG0zsgwrzjwVeNhHppVV72s
- TLSH T158423A07E9818972CF974AF53833E9A6CA7B35265F10D9A377A0E4580EB54C2E11F06F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ref/win-x86/idevicepair.exe
- Size 17KB
- SHA256 b7d35bf4302154cdd4387ebc2d518380f2f35d9090225b8690439097e665a274
- MD5 01284ad330bbaba51308345fe213dbbf
- SHA1 735d3bc40e13ea0103205087feff9610aa7b6149
- SHA512 2b023b8c335b85343f6837798119272971a3d9a30fd5d15443241b66a5624c2a42f737fae0cde5b44ff8d16894dba7408e3bff332e8632cfae983ba6aedf780e
- SSDEEP 384:BjH+0hIdu/TfODsrcwrHja5H8Nj52b7FUwce38b27NaVl:NNIdu/TfOwgwrI8CbpEb27Na
- TLSH T179723B07E7618D72C7E604B23D79946B913FA6654B24FDDBBBA84D280A3C4D0F43C91A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ref/win-x86/ideviceprovision.exe
- Size 22KB
- SHA256 d162ed71f9e22774a888c10235705e36f4ce9a2c536c4f026c9d17579e5aabd1
- MD5 1b5e61266fd985abde9b2f666d90fbdd
- SHA1 005ca28d741f76e504251e80a4f2f7c928a33b11
- SHA512 30c81317585d3ed377b8589c13dec30cae37e2c1f41c8ee08fb2763f32c7a6dad455b7d75d828c3c06b40769d093e35f05e83d49dcf0e998e139a8a3ba9f24b6
- SSDEEP 384:zE4iZOnx/6KmFdUXC6WjX7KR61KK7yNIu3d8:qB5dUXCjk61KK7yNIu3u
- TLSH T153A25C06D99F9F32C9921DBB3976927A94BF7110BB1095EBFF844C9C065A0C4641F0AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ref/win-x86/idevicerestore.exe
- Size 175KB
- SHA256 16a31bc1cda3956c3ab1a15f5c332c379be3d8c09468e956895dceffcd2d85a6
- MD5 2acff3576495ee9709d724e87c312237
- SHA1 7a5fcd2a385219d20f160f5e0481f8fd413ee970
- SHA512 515a62412d278cbef04f8d8576803aa526a29f57ae801ff84c008c696badbe6f269a05f1204bdecdc570416a6702a67a043db315657d08a476de2636bda3fa45
- SSDEEP 3072:kbE1eRwFkL4JzjOLy31xslvnIp0UMkRPbvvObUtdj4flw3hnzqpnciP6BCGyhNi+:kb0esl9ie37wvIp0UfRDvvObUtdj4flR
- TLSH T1C4042A30A1C1A172F6A303F039445BB3FD65D434472227DFED9C4DE9925A8E429EDE2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ref/win-x86/idevicescreenshot.exe
- Size 12KB
- SHA256 3e1097b2ce878d46cc5a9d2e918a3e14a127de9ffe5e528d54e7b74eed3190e0
- MD5 07d4fd6cdf74588253d051d8cac28f2b
- SHA1 508dcbfeca76bb4748c16a792528e0b8703f7eb9
- SHA512 af6c53feb2be460218685c4ffd1c564fd629e2fe6b2942ba86e59dd29c08018652763bdf088653538732d7f332257208c0dda56962fd700482a9340d58494ab0
- SSDEEP 192:3nfKEpthYE5g9JkDlSpmIQcqkrGsgoLr/jOPrpIpmCEhO7E5pzp2VSN7M:XD5grkDIEIQchrGsgwr/jUrKuO72tN7
- TLSH T116424C87D5428D73CFD21AB17C3BE8EA813B36252F50F8A3AF6458440AE84D0E52A45F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ref/win-x86/idevicesyslog.exe
- Size 13KB
- SHA256 d89add00eb923d509fba5cc67056e41a82814fe2664ce3e9477868117745ee80
- MD5 8d7cb9686c8ce317ace3379c2ca6bce9
- SHA1 b09e59273e029d244665ce508637d71ce1229536
- SHA512 fad9f83f2c731911403d5508445c5295779794a94f2aa07a99d92dcf5300f47c6b3cd6e87e7ea79ae7603138f3b590183887a89b02e235b5896827f2dec52676
- SSDEEP 192:JbiV9zsZ5BOj/0nFUIozzHjOIBdDjdZ1JBCEPXuzX7E5pzpVVSNhC:J+7AZG/oFUIYzHjRljj12oeL72qNh
- TLSH T1F1524C03F88556F3CBE34D79A43358A6DABB6A244E50C9AB27D06C551EB60E1F01E84F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ref/win-x86/imobiledevice.dll
- Size 148KB
- SHA256 47ae8870b4fafb0caf5ca9d0ef64a2d0c7c60c3ef2de5e7d9a7ede0a8694c5fe
- MD5 e4d14e6b815d867ab3561acc8ba2b172
- SHA1 c104ec9f5b6f841824b21fe6e96306992a90faf5
- SHA512 d32419183a2cfb5968578179ab946998cdd9c72ff820c1b607494b489260e5e88d0e4d752260aa8a4f85c61390915e5cdf8f1fa4e02dfb71ba15e878aa262872
- SSDEEP 3072:mQ/j5RBYzx0WKFomyDvFRibpD+t5rd067WW4:97XBYzx0NomyD9UbmdVWW4
- TLSH T186E32813E4469673D4AF09FE79A96AF3C8BF00608F1965C3BAB05CC844588D3627F766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ref/win-x86/ios_webkit_debug_proxy.exe
- Size 78KB
- SHA256 ed70a825e46d8bb1cdbf318f7e230f93177ca8eecb7e504fe5daf2dde71d00d3
- MD5 df40b19c7a9b56701df2ed61bdd65b30
- SHA1 2d118178370d51428cb59954acaef9586f3dd8c4
- SHA512 0aef357532cf14d9ea91e4fed36fe276239af2a9cc6891be40ae4956c865f7945fdcedd5ef0a9b232d830905d51f88a8b3f68edb89f00ece47678479f63f5cb6
- SSDEEP 1536:N0xbqA3F9NhCShzI3vdzPIz4tzhb3hqQ4yF/m2K0JTp:N0xbqA3FlCSS3vNIQaQ4yFu2K0JTp
- TLSH T1FC736C46B9824174F2E7017229FA9EB799374109671548EBB28C0B958F40DC2B77DFCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ref/win-x86/iproxy.exe
- Size 14KB
- SHA256 ac5c4fc863596678995b2e61c78e0ddce003ffc6055b53e946aa211f8188d590
- MD5 4685edda69825d731815f27935361cea
- SHA1 9863cd710e509d716ac852fb0e720ca830341d4b
- SHA512 3277b22057a2993e23337fa80a9c8d856ae63f5282308f24ee713caa7a0bf7fa963a06f72a1454c9d65107bccb027bd0c3ddbdeb11516c94300b0b2ffb98ae02
- SSDEEP 192:ENGTX5Cx8XA842qjXAGhkUIozzLjOsMTL6aU+zpRtZWP44stRkJ7E5pz6lVSNIYM:jgWXQX7kUIYzLjJoZb3zAst07mNIYM
- TLSH T151525C03EAD152F2CFD20AB824779555C27B26341F96DDC7D7A41CA84DA68C0F43B20E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ref/win-x86/irecovery.dll
- Size 39KB
- SHA256 c8287b85e15a4e1df220bba4d584d644963d93471be6e92e5cdd19e53bfdbdc9
- MD5 94a50deeee318e653d74a62e03c56ea8
- SHA1 c33a9871dc0734b9a308aa927cafff88b0c29d38
- SHA512 526789c01dbee989eb6a8a1c251de7087c799d1f799104c23b6422985eba1e16331ae04f926c70d485eb93805c4c01aed64d03b67e70bdf177bc9862c2e72790
- SSDEEP 768:xZVdRtyNdddlSMg7tmEom5P9wofPoY7YFLrk3NWqVQ5L:xZyNdddlSMg7tmEtP2ofIryQ7
- TLSH T1A2035C03F782B6E2C3C90179619A6B22C82C761C17E820F39F7357517CB59D2B23A755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ref/win-x86/irecovery.exe
- Size 16KB
- SHA256 8bd96b8cefb4879b7ed01fdce0c089ac367029c9487c18a09947f1fdd99dbb9e
- MD5 ca52fbb5b845895c251987327e72641b
- SHA1 693862706956fff2b767bd58e9bee0a3ac2100b3
- SHA512 3d70190dffeb0a93c7572e66e4f9d24219434004a14ce3007e5a6abbb7f02c42952fbea6a19687d295b55c889a2bf88bb0501cef706d1694e7ec31d61d02ae2a
- SSDEEP 384:JJ6VwQ8ZTVtTrTw/hodOrsEXbsUIYzzj7TXIynJ5TL72fNeCS:JJZZZt/E/hoggEXbfIYzDDjJ5f72fNO
- TLSH T1B8724942E983EBB2D6E60CF5687FA916D57733244F53C6EBABA00C5446858C0B03B55E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ref/win-x86/libcharset.dll
- Size 9KB
- SHA256 5ee916f05d065e88295feb904dcee0dbb3f751f01cc9ccbaf6bdfc288ec25860
- MD5 e129ac7e6383c62465a25f552b4ca5a6
- SHA1 e8023048580ddd438fb595ff280ae1366ad9643f
- SHA512 56598caa971a2764a18ff6017a45a0a6037836f32007297e995d0b28df22acbf5a5aab2e630f6a9dbe27b64e626a6e4d54a767a990914c1d2d6877835a1a72b4
- SSDEEP 192:ROMeVSzVU+xWn2BxJldsFDj1IIyu95iV+m:ROTS6+hxJkFPGq95
- TLSH T115122B77FB9209B2DB2807702DB78C6E826CFE215F915612B793420A0E951D9FC62AC1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ref/win-x86/libcurl.dll
- Size 272KB
- SHA256 0726a887968f949e20b51cac55e35414e71b6bcc1160d7150de7792bb903f8eb
- MD5 d86129e4462ccaa02b69527dc1e563ce
- SHA1 f3b8e1051e31c91cc7394d1a630a764934c05301
- SHA512 fd1816bff9174ac833dd473c95f2ecfa3c4cc177e8d617fe35d61f8b6eb4249b9d83b977cb4f44ac447fd65032330237dd858f54267a7310e541bc01409be131
- SSDEEP 6144:cMRrrTXuGlqz0v7fdoPOeo9srmh2Vt05gdcQUR+N9wwCL2cMAF0AOjU9cJ:cgLXuGlqz0jfdH2VtNUInbQ25AYUO
- TLSH T113548E42FE6155F1E28211B861F7177B1D3C650BA720DED3EBA0986599203E3B67E38C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ref/win-x86/libiconv.dll
- Size 896KB
- SHA256 85b2b9439c03d710d4cbe14c89dd8b29466113074235c93228d4dc1568526112
- MD5 6e4b07861dfcfeb887a9a289fd67fb5d
- SHA1 2ac405d7f904bfdc6e596a11b9c7580231a23623
- SHA512 20d8106e1d273ecf96df944e25655b54a72cdeea2f1bfb1e3a6f9bb1982f2582be0fa4046d52fd4485fc63477de2221870102f3a14b4b9371b1de13909385e92
- SSDEEP 24576:VrWVUVGfVQf0llKuuGavkg3NyZqbbTvzhBAUZLYZ:VQuKlKuuGaXKKzhBAUZLYZ
- TLSH T1D415DF91F392CB27F567C1B448BAAB2B9916EC729F0A44E37671379E8E373E401D4106
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ref/win-x86/libusb-1.0.dll
- Size 132KB
- SHA256 eda7ec675e1502f725eb325e696b3bebd943d60e10dfdf0f739fe8f9dcc2d524
- MD5 7bbf88cd0d3a951d10fdf9528ba358ad
- SHA1 93475754b183f85a67961a3932b29c749d396faa
- SHA512 43cdf05730e9fca4e995b30352c4a507e5f8fc4ffab3a32ce953ea782481b703a6bf60bb96c054da40a00250672127407dab0cc70ac6c3f41a134ee263a0c8eb
- SSDEEP 1536:VFsnZMU9Nq64MvQSJDgXruk46zgT1awkr2SaL66/13otReS4yiGaPYmK:SGU9NyMYKg6ka1krTF6lo/LiGaPYmK
- TLSH T19BD37E2BF9C5C531F4F3023D5ABD2B2AC57F9120679A92E3A361148168954E3F73FA42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ref/win-x86/libusb0.dll
- Size 63KB
- SHA256 48b0d28840232019be8b56f88dbe1a544718431af4e5b7771673eda9fed4ef94
- MD5 f306d40c3122579ac4af973deb5650f0
- SHA1 5676a8ac46e15793de65d9bebea5f636f9953786
- SHA512 ec3a42cda54a0a855500a0c5f5154f49c5965fcdc4cbe4f8efc0ae9bff0694f931c887026f8eebf8c41b496e9b6f55c6a54fdd89707c725985bbc580626121b5
- SSDEEP 768:Bm7/H0yrNKmMG1tGXzjdDuJ6mRt35xFh6DLFTGEfkjdH+hcjRDZ6mooVRA5Yl3Lb:Q/Cmr3GXmb35nh+T0JQcR1oMRAGl3KY
- TLSH T1A7536B539E809CF2EAC200793477A736AC3990199B15A8C38BA70BA1D4175D1FE7F71E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10