hxxps://x-airdrop[.]icu/ | Triage

Submit
Reports

Overview

overview

7

Static

static

1

URLScan

urlscan

1

https://x-airdrop.ic...

windows10-1703-x64

4

https://x-airdrop.ic...

windows7-x64

1

https://x-airdrop.ic...

windows10-1703-x64

4

https://x-airdrop.ic...

windows10-2004-x64

1

https://x-airdrop.ic...

windows11-21h2-x64

1

https://x-airdrop.ic...

android-13-x64

1

https://x-airdrop.ic...

android-10-x64

7

https://x-airdrop.ic...

android-11-x64

1

https://x-airdrop.ic...

android-13-x64

1

https://x-airdrop.ic...

android-9-x86

1

https://x-airdrop.ic...

macos-10.15-amd64

4

https://x-airdrop.ic...

macos-10.15-amd64

4

https://x-airdrop.ic...

debian-9-armhf

https://x-airdrop.ic...

debian-12-armhf

https://x-airdrop.ic...

debian-12-mipsel

https://x-airdrop.ic...

debian-9-armhf

https://x-airdrop.ic...

debian-9-mips

https://x-airdrop.ic...

debian-9-mipsel

https://x-airdrop.ic...

ubuntu-18.04-amd64

7

https://x-airdrop.ic...

ubuntu-20.04-amd64

7

Sharing

General

Target

https://x-airdrop.icu/
Sample

240330-wbky3abe65

Score

7^/10

android antivm collection evasion linux macos spyware stealer

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

https://x-airdrop.icu/

Resource

win10-20240319-en

windows10-1703-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

https://x-airdrop.icu/

Resource

win7-20240221-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

https://x-airdrop.icu/

Resource

win10-20240221-en

windows10-1703-x64

7 signatures

150 seconds

Behavioral task

behavioral4

Sample

https://x-airdrop.icu/

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

https://x-airdrop.icu/

Resource

win11-20240221-en

windows11-21h2-x64

6 signatures

150 seconds

Behavioral task

behavioral6

Sample

https://x-airdrop.icu/

Resource

android-33-x64-arm64-20240229-en

android-13-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

https://x-airdrop.icu/

Resource

android-x64-20240221-en

android-10-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

https://x-airdrop.icu/

Resource

android-x64-arm64-20240221-en

android-11-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

https://x-airdrop.icu/

Resource

android-33-x64-arm64-20240229-en

android-13-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

https://x-airdrop.icu/

Resource

android-x86-arm-20240221-en

android-9-x86

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

https://x-airdrop.icu/

Resource

macos-20240214-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

https://x-airdrop.icu/

Resource

macos-20240214-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

https://x-airdrop.icu/

Resource

debian9-armhf-20240226-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

https://x-airdrop.icu/

Resource

debian12-armhf-20240221-en

debian-12-armhf

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

https://x-airdrop.icu/

Resource

debian12-mipsel-20240221-en

debian-12-mipsel

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

https://x-airdrop.icu/

Resource

debian9-armhf-20240226-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

https://x-airdrop.icu/

Resource

debian9-mipsbe-20240226-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

https://x-airdrop.icu/

Resource

debian9-mipsel-20240226-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

https://x-airdrop.icu/

Resource

ubuntu1804-amd64-20240226-en

antivm spyware stealer

ubuntu-18.04-amd64

7 signatures

150 seconds

Behavioral task

behavioral20

Sample

https://x-airdrop.icu/

Resource

ubuntu2004-amd64-20240221-en

antivm spyware stealer

ubuntu-20.04-amd64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  https://x-airdrop.icu/
Score

7^/10

evasion antivm spyware stealer collection
- Changes its process name
- Reads the content of photos stored on the user's device.
  collection
- Reads user data of web browsers
  Reads stored browser data which can include saved credentials.
  spyware stealer
- Checks CPU configuration
  Checks CPU information which indicate if the system is a virtual machine.
  antivm
- Reads CPU attributes
behavioral1 behavioral10 behavioral11 behavioral12 behavioral13 behavioral14 behavioral15 behavioral16 behavioral17 behavioral18 behavioral19 behavioral2 behavioral20 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9

MITRE ATT&CK Matrix

Tasks

static1

urlscan1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

antivmspywarestealer

behavioral20

antivmspywarestealer

© 2018-2024

Terms | Privacy