SSD Advisory – Galaxy Store Applications Installation/Launching without User Interaction - SSD Secure Disclosure
Tags
attack-pattern: Direct Python - T1059.006 Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID b75fe854-ef59-4f0d-8c5d-9b1fa6c3a63b
Fingerprint 5d7ab5b07c5751d8
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 26, 2022, 9:55 a.m.
Added to db Feb. 17, 2023, 9:41 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline SSD Advisory – Galaxy Store Applications Installation/Launching without User Interaction
Title SSD Advisory – Galaxy Store Applications Installation/Launching without User Interaction - SSD Secure Disclosure
Detected Hints/Tags/Attributes 29/1/13
Source URLs
Redirection Url
Details Source https://ssd-disclosure.com/ssd-advisory-galaxy-store-applications-installation-launching-without-user-interaction/
URL Provider
Details Provider Source level domain
Details ssd-disclosure.com ssd-disclosure.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
us.mcsvc.samsung.com
Details Domain 5 
com.sec.android.app
Details Domain 3 
https.py
Details File 3 
redirect.html
Details File 3 
open.js
Details File 1 
download.js
Details File 1 
down_and_open.js
Details File 3 
https.py
Details File 21 
ngrok.exe
Details File 816 
index.html
Details IPv4 2 
4.5.32.4
Details Url 1 
https://us.mcsvc.samsung.com/mcp25/devops/redirect.html
Details Url 1 
https://us.mcsvc.samsung.com/mcp25/devops/redirect.html?mcs_ru=a&testmode=1&