Part 1 – SingPass RASP Analysis | Romain Thomas
Tags
cmtmf-attack-pattern: Native Code
attack-pattern: Data Code Signing - T1553.002 Hooking - T1617 Launchd - T1053.004 Python - T1059.006 Thread Local Storage - T1055.005 Trap - T1546.005 Tool - T1588.002 Code Signing - T1116 Hooking - T1179 Trap - T1154 Hooking
Show in Graph
Common Information
Type Value
UUID b77ca0cc-6a6b-4f5b-8d36-c428775d7ca7
Fingerprint a23f98122d35b3a4
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 29, 2022, midnight
Added to db Jan. 19, 2023, 12:14 a.m.
Last updated Nov. 12, 2024, 11:51 a.m.
Headline Part 1 – SingPass RASP Analysis
Title Part 1 – SingPass RASP Analysis | Romain Thomas
Detected Hints/Tags/Attributes 61/2/20
Source URLs
Redirection Url
Details Source http://www.romainthomas.fr/post/22-08-singpass-rasp-analysis/
URL Provider
Details Provider Source level domain
Details romainthomas.fr www.romainthomas.fr
Attributes
Details Type #Events CTI Value
Details Domain 1 
singpass.app
Details Domain 359 
com.apple
Details Domain 1 
bio-stream.singpass.gov.sg
Details Domain 1 
api.myinfo.gov.sg
Details Domain 21 
xcode.app
Details Domain 1 
metadata.origins
Details Domain 1 
lib.name
Details Domain 1 
autotouch.app
Details Domain 1 
igamegod.app
Details Domain 1 
zxtouch.app
Details File 1 
dump_analysis.py
Details File 1 
__data_0.raw
Details File 1 
__data_392.raw
Details File 1 
__data_393.raw
Details File 5 
api.myi
Details File 1 
cydia.log
Details File 1 
rocketbootstrapd.pl
Details File 3 
helper.pl
Details Url 1 
https://bio-stream.singpass.gov.sg
Details Url 1 
https://api.myinfo.gov.sg/spm/v3