f260683f4fd50012aec668b710ffbf214280fac46f61ad94cde9e52bbf865530

Sharing

Copy URL Twitter E-mail

General

Target
Shootflow.ipa
Size 5.2MB
Sample260812-tl5ecabm2v
SHA256 f260683f4fd50012aec668b710ffbf214280fac46f61ad94cde9e52bbf865530
MD5 02ea585bb8319e2227dded4880b4b45d
SHA1 b612b9c2444bc1e04f3c97bb9cb8cdab61a04f27
SHA512 36ff744e0829922435c47da624b22dfbe618df26799054d75b5f9cdcd9ec60f5d73c079ef6c3c1df916a41246186bd87e93d9ae5ee0e0d7bed60183fa76e5f8b
SSDEEP 98304:LJ3qWSjumrYTPmc0cFl8c4sEFu4LzDaJsImf1KfpBaVFBbMcIb2dP5z:LJ3qLjhrTelMu43csREaVFycIb2Bz
TLSH
T11C463355C09EB182E83F913EF0A6530502D3DF666EA28F51B6635025CEEBF0B935462F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  Payload/App.app/App
- Size 99KB
- SHA256 d816d8608aae069bc75a9efd4a4d133a80c8d2781ab9e0292580aca575911a98
- MD5 bffeeace49bc2523282737d562933dea
- SHA1 4a16c75eea04a6749b25163ffa7d6d429d716f2a
- SHA512 2ea167ab918ced1df33071c3d188846d221ccf35da4e8e90bbde288f68b58da03b4da3d2a1c13408720f38883eab2a6fa839a757b90527ed0dbe31d47884e5f5
- SSDEEP 1536:xS6Th6QGuW0HIrTZCHgYpIDTxrmJ06pA:xSsLHNIDTD6
- TLSH
  T158A3F9D3530C1971D16F227CD4830B901932FE8C9BD3A36DBE15A6489E273A25E77E62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Payload/App.app/Frameworks/Capacitor.framework/native-bridge.js
- Size 51KB
- SHA256 48b589d954751db7ebad3f5ef6983b523f96bab4c2db0b0f85b8a311b0123a5e
- MD5 7ddc813a3deb9905a71a94828ac083a5
- SHA1 fab70e3f51f7cd9c5dda723aa69582fdd07d6f74
- SHA512 0fbe03eacb2ec226c1ad5648c2be579cd2ab78424c9dd70f6a16eeec949e90c9a71ba07da41e825f8b3698aeb840158bd54e04ee522a631fc31a618134746267
- SSDEEP 768:tRa8BeK2Agle+lFlPle4k+nrutjJPQQzke:7a8BeTTndAj+gtPDwe
- TLSH
  T1B73385896AF710224A63B0F98B5B20157339E017225CCD697E9C87542FC5439D7F2BFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2 behavioral3
- Target
  Payload/App.app/Frameworks/Cordova.framework/Cordova
- Size 125KB
- SHA256 efa35800b816f6c227246b5d97145e28a72766c0ddf015230d9e3a638620bd8e
- MD5 939ab040903418a2b4abdf4c375bd695
- SHA1 c7fc9d2a08ea920757999119df4cce279135f305
- SHA512 5b1f7521202a76228a1064fde2f6447d29ca959bc2eb7a1243cec2674a7ae6fa92e4ec882ae2636b6cb084bf1aeedbb05bb830e2d8cbbf480da513da008600d6
- SSDEEP 3072:KbAcI3Cp3+eBxFO2bTrSb6lFdL7i70XzACCsUaViBB6TXlnV9HTErNgMwS0IipRl:K63yBxFO2bTrSb6lFdL7i70XzACCsUah
- TLSH
  T14AC3B453A35C0D27C1D8233E961A0704569AFB70C6F1D3B32CBCA5492F9B6925E3AF64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Payload/App.app/Frameworks/libswift_Concurrency.dylib
- Size 7.4MB
- SHA256 45211caa644bf80ba71543dd0e46c98f91066495125ccd2f59fceec2b42a5cae
- MD5 0f2b2aa11fa7a62a61a1d4a69dcea016
- SHA1 c50a609b13734a204dea9b8a5bd11a00c47db5bf
- SHA512 cd218ddccbd05867c932def65b7febaf52a5ccdeee05c66c3a398044b01c23fb3edd2adbdaa06d9ccaa96c392471a7d58b5ca8d5ece0fc0ae193bccb42ec68a6
- SSDEEP 98304:C7wWR31hyqkNVqEdAm0pXYOifagn700AgLCX2O4o9bUj:UjhyqIqEdAFYOifagno0AgLCGax
- TLSH
  T195766E47BA4BFCE2C1CE77B564A5A16305352C912FA1707099FCB75C88E328B9912BC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Payload/App.app/public/assets/ServerSetup-CidXQrvO.js
- Size 1KB
- SHA256 c5916220597664812cdd94363b9a1f20e06bb4c40eefa203d0c43ca7b15bd3a9
- MD5 a89f6af839dbfffdbf41b9dd427b0d08
- SHA1 eed94ee5306ffd4003c263a2b2be80bc3d659c68
- SHA512 5e4841fb2611432c3caffd4b9bf5c40b3487dc8351b21d856848fa34debcf16281586710251ef8e94948ff42d1d1662029fbb9c54d8fef30ddadb0b6504c1bc5
- TLSH
  T179318388F021D3FAB95A2860E57F9001B0311B9CCF37C4B0517818016EAC5D5BF67BC8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6 behavioral7
- Target
  Payload/App.app/public/assets/index-C8J_owwk.js
- Size 19KB
- SHA256 3a4b9d6216fc12d189c52dc236da7b4a2d0e78396a4db9b14d19806f0a44b1de
- MD5 7d20e0ce963dbec94cbb6f08cb683e7a
- SHA1 5d21d58305d7f603d6da06f1b128ce351b25646a
- SHA512 e7fcb31db81de6fbd78df7ab0344243541fe2b8876fbe8d843509f1cc8db57f899dfb6c75c0b40d5f06eb4cd5f46b7b17dbee6682606c4353e4c6662f3b0e5f7
- SSDEEP 384:Q+npkLjeGdHS2TwthWSCpzLqrR6uLHLiUUyb0guU2YXmd76bEhAL9DcRMhJp9VjO:QEpkHfTbzL24uLPAguU2amd76ohAL9Dw
- TLSH
  T1E4922B8533A66432C1F415E9A1BD1322F23A5A14B44DD0B0F26CAE6A3D65C47D33EFB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8 behavioral9
- Target
  Payload/App.app/public/assets/index-OwBu7MPr.js
- Size 487KB
- SHA256 06c1e38533268d318ee9981cad7e721406d04b0bbe14b31bd5b0307782653f74
- MD5 66ca8021176da2e62b897d491b2e2d31
- SHA1 a83b4007e4aff46db13563f5990e145fd6d80852
- SHA512 d3e0ffa6a6ef6c1fccee59b7df15cf16adfae3ba2c4690d52a094d2c24bd519943e962099777f825491bbb1bb340162a97d8476c7aabf6b9473b47c60290d8b2
- SSDEEP 6144:ofLr2zVCZb7CpDq+JruRjtfhmWTzervKKwNJZLl5eMq9C4XwBFNgLN6:ofHLjKBrIJZLl5eMq9CzBq6
- TLSH
  T1B8B42BC8726AB5799B7711B0516F500BB23E1E15EC0D8460F12CEC9639B9409B2BBFED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral11
- Target
  Payload/App.app/public/assets/web-BTb3tDpm.js
- Size 5KB
- SHA256 8536ed26e5445b6139b3c38c1d368a450476fcbb313eefbba3b9b2f6523600bf
- MD5 17cdd1e6978dec806ad1bdb4c3ec2c1d
- SHA1 3da53db7a5f470de3f910fcde0ce504fa65c9fa0
- SHA512 8d39684fa38b91680fb959904f947235ec4e4146fe40c9db86a9182ff1c1f09dcf714cf443bbcb1949127b2371fdca6fa9af8e294ccf236dbb6a7271f948839e
- SSDEEP 96:VZJMWXhM0+m6PK656PFF2413mwCsHbdZJDWluxJW8MHG1UWsDWomWF/WaPv:V3MWGoUXUjn8lKY8MHGlsiGAM
- TLSH
  T1ADB1B18D97D0A2F186683CF9FC6A1557BF203A460D1BD26DE02CF94C6F98811B29ED74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12 behavioral13
- Target
  Payload/App.app/public/assets/web-Blm-7lSe.js
- Size 3KB
- SHA256 4bb187df6b3372ecf11a0b933622544497ee471c3c2211256deca7d67b526383
- MD5 fe7c21a21bc872f1e24747959559b34d
- SHA1 840a8e2f9ff79fd99782608a572172e09a9b80d3
- SHA512 b25cf6105f32f2104a012cc3c6f32878e309eb52401ea996dc2f7b5bee98437cdf3d13989852ab64caee7e1618cb24d6bddb25a28ee08b70d0aff350672af610
- TLSH
  T16561E9EFB18603A06BCA90F7A47B02D1513B153C3C2B41E9AB9F7896AA84744E357D71
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14 behavioral15
- Target
  Payload/App.app/public/assets/web-DlLrWFJd.js
- Size 786B
- SHA256 79aae6ed8e7d1de3bcd421e1113614aa571bcac7dc3889bb514313b0213a3d63
- MD5 28c9cd3287bb6850300b0f660c0b6035
- SHA1 a601a871236e0493fc51060c2c91e60d0a34c4b9
- SHA512 1bbd66047bd4d2a10d06060909e56380b61ea212dcd1f0c20e2e1bba596e955fadb7a14a9e3c49e0972d7ebd9d0c3e9369e8663125126ecdfdd976af6605b31f
- TLSH
  T15E01BDA6264288B0048CD6C3782AA6F8AC0706887D3FC8C7B73C3FC508D4E5E539EC54
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16 behavioral17
- Target
  Payload/App.app/public/assets/web-PTHbTCZr.js
- Size 921B
- SHA256 d6854c1f3169d030dda504c3fa4da0c71756969d51def3d0484a271cf392a0d8
- MD5 1d0c3b2eb1be2e28798aec50041a7eb6
- SHA1 3d3ebe56a0faa2df0248e0e5d150a0c3097bfeb6
- SHA512 c3a02adf87bd87fc1352124823c2c992fc57e963a28d5ed674031436f7e215b8db225c000010eb67db09f6cf95517ded79e9428717ef5da646770845f2868d27
- TLSH
  T18A117AA3377B23708480A4EA79B462424121D4ACFE16D485F9EE7D051D1906487BBF7E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18 behavioral19
- Target
  Payload/App.app/public/icons/icon.svg
- Size 851B
- SHA256 bea5abd814c8b909d5ddbd24420bffb0e65b43fa0a632c0ff8a9d38f5c196eff
- MD5 0b5db2c01b940d1144059fb1e175fa39
- SHA1 c842cd6155ad3bf7f8d1317899cff2281ad60aea
- SHA512 1666ec573a9bcca0972bf327e1d51499cfb07963885f0b23f22af7acb7faca569e48cd563ce81cf88543fff8a06579f652e5313c7265a1aa6e7d03c9a1abbf54
- TLSH
  T18B01C82EA5EFA617E316906DDF1164752D1F50E3438E8360B0287D641F0E6C3A8231FC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral20 behavioral21
- Target
  Payload/App.app/public/index.html
- Size 1KB
- SHA256 61085ec280dbdfefd93dd3a243e577bd6c98b839c825bb684947c1299091f5eb
- MD5 7715c136667aed806be7bbeba685d920
- SHA1 422af82c29d13f76e2d18a68d4f961d9663f3583
- SHA512 d82d691caa45e1c94322afe69b721c61336ed68ae1eb5360eb0b45b56b4bcbcd4fb654aa8e6d23f3dd9867ccf402e8e4b9c55f2ee83de27689255133ec5cc347
- TLSH
  T19D21B143C0B09D0A2220462D9FD1F0584E51A5C7C795A99C79D970BD8FD1FE08AD75B7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral22 behavioral23
- Target
  Payload/App.app/public/push-sw.js
- Size 1KB
- SHA256 5f27543db3f1c6279063416c5cd79f5f1dab52256c6a225d36768ebb4fbf0433
- MD5 f6fdaaad4914831f4248c306c339d720
- SHA1 fc321ffaf8d1d5571fe8bd92ce5678c146e9d847
- SHA512 cdf61092304cbe0ecda3833b6fe69671a20244e067c7928e5a641517c2e5ada40b1333d53588ef02305469b3d06272c1de3c577250a1c1be5e8ab5ebbec91eff
- TLSH
  T1D911F356557816B7079B517D868B50813533E483374B1831BA4C0E68AF58930D2FBB84
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral24 behavioral25

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25