Overview
overview
5Static
static
1URLScan
urlscan
1https://edi.blackboa...
windows10-2004-x64
5https://edi.blackboa...
android-9-x86
1https://edi.blackboa...
android-10-x64
1https://edi.blackboa...
android-11-x64
1https://edi.blackboa...
macos-10.15-amd64
1https://edi.blackboa...
ubuntu-18.04-amd64
3https://edi.blackboa...
debian-9-armhf
https://edi.blackboa...
debian-9-mips
https://edi.blackboa...
debian-9-mipsel
Analysis
-
max time kernel
309s -
max time network
314s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
22/08/2024, 05:03
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://edi.blackboard.com/webapps/login/?action=login&new_loc=%2Fultra%2Fredirect%3FredirectType%3Dnautilus%26userId%3D_3167_1%26courseId%3D_376_1%26contentId%3D_5029_1%26sourceId%3D_5029_1%257Cblackboard.data.content.Content%257CTE%257C_2800_1%257CNON_CALCULATED%26parentId%3Dnull%26sourceType%3DSC%26eventType%3DDUE%26disable_promiscuous_decodes%3Dtrue
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
https://edi.blackboard.com/webapps/login/?action=login&new_loc=%2Fultra%2Fredirect%3FredirectType%3Dnautilus%26userId%3D_3167_1%26courseId%3D_376_1%26contentId%3D_5029_1%26sourceId%3D_5029_1%257Cblackboard.data.content.Content%257CTE%257C_2800_1%257CNON_CALCULATED%26parentId%3Dnull%26sourceType%3DSC%26eventType%3DDUE%26disable_promiscuous_decodes%3Dtrue
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral3
Sample
https://edi.blackboard.com/webapps/login/?action=login&new_loc=%2Fultra%2Fredirect%3FredirectType%3Dnautilus%26userId%3D_3167_1%26courseId%3D_376_1%26contentId%3D_5029_1%26sourceId%3D_5029_1%257Cblackboard.data.content.Content%257CTE%257C_2800_1%257CNON_CALCULATED%26parentId%3Dnull%26sourceType%3DSC%26eventType%3DDUE%26disable_promiscuous_decodes%3Dtrue
Resource
android-x64-20240624-en
Behavioral task
behavioral4
Sample
https://edi.blackboard.com/webapps/login/?action=login&new_loc=%2Fultra%2Fredirect%3FredirectType%3Dnautilus%26userId%3D_3167_1%26courseId%3D_376_1%26contentId%3D_5029_1%26sourceId%3D_5029_1%257Cblackboard.data.content.Content%257CTE%257C_2800_1%257CNON_CALCULATED%26parentId%3Dnull%26sourceType%3DSC%26eventType%3DDUE%26disable_promiscuous_decodes%3Dtrue
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral5
Sample
https://edi.blackboard.com/webapps/login/?action=login&new_loc=%2Fultra%2Fredirect%3FredirectType%3Dnautilus%26userId%3D_3167_1%26courseId%3D_376_1%26contentId%3D_5029_1%26sourceId%3D_5029_1%257Cblackboard.data.content.Content%257CTE%257C_2800_1%257CNON_CALCULATED%26parentId%3Dnull%26sourceType%3DSC%26eventType%3DDUE%26disable_promiscuous_decodes%3Dtrue
Resource
macos-20240711.1-en
Behavioral task
behavioral6
Sample
https://edi.blackboard.com/webapps/login/?action=login&new_loc=%2Fultra%2Fredirect%3FredirectType%3Dnautilus%26userId%3D_3167_1%26courseId%3D_376_1%26contentId%3D_5029_1%26sourceId%3D_5029_1%257Cblackboard.data.content.Content%257CTE%257C_2800_1%257CNON_CALCULATED%26parentId%3Dnull%26sourceType%3DSC%26eventType%3DDUE%26disable_promiscuous_decodes%3Dtrue
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral7
Sample
https://edi.blackboard.com/webapps/login/?action=login&new_loc=%2Fultra%2Fredirect%3FredirectType%3Dnautilus%26userId%3D_3167_1%26courseId%3D_376_1%26contentId%3D_5029_1%26sourceId%3D_5029_1%257Cblackboard.data.content.Content%257CTE%257C_2800_1%257CNON_CALCULATED%26parentId%3Dnull%26sourceType%3DSC%26eventType%3DDUE%26disable_promiscuous_decodes%3Dtrue
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral8
Sample
https://edi.blackboard.com/webapps/login/?action=login&new_loc=%2Fultra%2Fredirect%3FredirectType%3Dnautilus%26userId%3D_3167_1%26courseId%3D_376_1%26contentId%3D_5029_1%26sourceId%3D_5029_1%257Cblackboard.data.content.Content%257CTE%257C_2800_1%257CNON_CALCULATED%26parentId%3Dnull%26sourceType%3DSC%26eventType%3DDUE%26disable_promiscuous_decodes%3Dtrue
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral9
Sample
https://edi.blackboard.com/webapps/login/?action=login&new_loc=%2Fultra%2Fredirect%3FredirectType%3Dnautilus%26userId%3D_3167_1%26courseId%3D_376_1%26contentId%3D_5029_1%26sourceId%3D_5029_1%257Cblackboard.data.content.Content%257CTE%257C_2800_1%257CNON_CALCULATED%26parentId%3Dnull%26sourceType%3DSC%26eventType%3DDUE%26disable_promiscuous_decodes%3Dtrue
Resource
debian9-mipsel-20240611-en
General
-
Target
https://edi.blackboard.com/webapps/login/?action=login&new_loc=%2Fultra%2Fredirect%3FredirectType%3Dnautilus%26userId%3D_3167_1%26courseId%3D_376_1%26contentId%3D_5029_1%26sourceId%3D_5029_1%257Cblackboard.data.content.Content%257CTE%257C_2800_1%257CNON_CALCULATED%26parentId%3Dnull%26sourceType%3DSC%26eventType%3DDUE%26disable_promiscuous_decodes%3Dtrue
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.android.chrome -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.android.chrome
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
84KB
MD59ef0a57a22d4958717c074284befcbca
SHA143228341c856e4bc16421df3db1e18098396c127
SHA256ecd1dd78178b1cc687a2e3e58065746b6c78ed6c7625579f613eb1d12d1139ad
SHA5122b93fa0d1cf3a2ddaa6964177fcce631a6c2bc44b13d21a15451c661aaf340094963d1a50e55d523776dc2185093ebac483abb170ab844f167130c352b8d35da