S1215 Binary Validator

malwareMobile

platformsiOS

also known asBinary Validator

Binary Validator is a Mach-O binary file used during Operation Triangulation. Binary Validator first collects information about the device, such as the device's phone number and a list of installed applications, before the deployment of the TriangleDB implant. After the actions are completed and the data is collected, Binary Validator encrypts and sends the data to the C2 server, and in turn, the C2 server sends the TriangleDB implant.

techniques used (7)

ATT&CK techniques this enables or maps to.

T1418Software Discovery
T1422System Network Configuration Discovery
T1424Process Discovery
T1533Data from Local System
T1627Execution Guardrails
T1630.002File Deletion
T1646Exfiltration Over C2 Channel

used by campaigns (1)

Campaigns that use this.

C0054Operation Triangulation

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan