Resubmissions

06/10/2026, 02:02

261006-cgf3hsydjh10

06/10/2026, 01:38

261006-b2evhsybmc10

General

  • Target
    sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71.tar.gz
  • Size 281.1MB
  • Sample261006-b2evhsybmc
  • SHA256 71aff755cd6f972fd22e66f0dcec0d118d6d70be2961ce61b6b4819f8f4a725d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • gafgyt

C2
  • 10.237.197.61:63657

Targets

    • Target
      sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71.tar.gz
    • Size 281.1MB
    • SHA256 71aff755cd6f972fd22e66f0dcec0d118d6d70be2961ce61b6b4819f8f4a725d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71.tar
    • Size 633.5MB
    • SHA256 2a104859b3776b80ec33a05483766b24ca998f5f2df964d97b119d72bbb33ec8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._README.txt
    • Size 206B
    • SHA256 25b4c51784c890b2884d84afdf124148dc7c5165202137d6471ebd30955ccc2e
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._acdiagnose.txt
    • Size 206B
    • SHA256 25b4c51784c890b2884d84afdf124148dc7c5165202137d6471ebd30955ccc2e
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._apfs_stats.txt
    • Size 206B
    • SHA256 25b4c51784c890b2884d84afdf124148dc7c5165202137d6471ebd30955ccc2e
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._ckksctl_status.txt
    • Size 206B
    • SHA256 25b4c51784c890b2884d84afdf124148dc7c5165202137d6471ebd30955ccc2e
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._codecctl.txt
    • Size 206B
    • SHA256 25b4c51784c890b2884d84afdf124148dc7c5165202137d6471ebd30955ccc2e
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._disks.txt
    • Size 206B
    • SHA256 25b4c51784c890b2884d84afdf124148dc7c5165202137d6471ebd30955ccc2e
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._hpmDiagnose.txt
    • Size 206B
    • SHA256 25b4c51784c890b2884d84afdf124148dc7c5165202137d6471ebd30955ccc2e
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._jetsam_priority.csv
    • Size 206B
    • SHA256 25b4c51784c890b2884d84afdf124148dc7c5165202137d6471ebd30955ccc2e
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._jetsam_priority.txt
    • Size 206B
    • SHA256 25b4c51784c890b2884d84afdf124148dc7c5165202137d6471ebd30955ccc2e
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._kbdebug.txt
    • Size 206B
    • SHA256 25b4c51784c890b2884d84afdf124148dc7c5165202137d6471ebd30955ccc2e
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._lsaw.csstoredump
    • Size 206B
    • SHA256 25b4c51784c890b2884d84afdf124148dc7c5165202137d6471ebd30955ccc2e
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._ltop.txt
    • Size 206B
    • SHA256 25b4c51784c890b2884d84afdf124148dc7c5165202137d6471ebd30955ccc2e
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._mount.txt
    • Size 206B
    • SHA256 25b4c51784c890b2884d84afdf124148dc7c5165202137d6471ebd30955ccc2e
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._night-shift.log
    • Size 206B
    • SHA256 25b4c51784c890b2884d84afdf124148dc7c5165202137d6471ebd30955ccc2e
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks

static1

trojaninfostealerratphantomcardstealerluna_stealerbotnetgafgyt
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

ransomware
Score
1/10

behavioral6

ransomware
Score
1/10

behavioral7

ransomware
Score
1/10

behavioral8

ransomware
Score
1/10

behavioral9

ransomware
Score
1/10

behavioral10

ransomware
Score
1/10

behavioral11

ransomware
Score
1/10

behavioral12

ransomware
Score
1/10

behavioral13

ransomware
Score
1/10

behavioral14

ransomware
Score
1/10

behavioral15

ransomware
Score
1/10

behavioral16

ransomware
Score
1/10

behavioral17

ransomware
Score
1/10

behavioral18

ransomware
Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

ransomware
Score
1/10

behavioral22

ransomware
Score
1/10

behavioral23

ransomware
Score
1/10

behavioral24

ransomware
Score
1/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

ransomware
Score
1/10

behavioral28

ransomware
Score
1/10

behavioral29

ransomware
Score
1/10

behavioral30

ransomware
Score
1/10

behavioral31

ransomware
Score
1/10

behavioral32

ransomware
Score
1/10