hxxp://stripchat[.]com | Triage

Sharing

Copy URL Twitter E-mail

General

Target

http://stripchat.com
Sample

230520-qb5qkscd44

Score

9^/10

android evasion ransomware

Malware Config

Targets

- Target
  
  http://stripchat.com
Score

9^/10

evasion ransomware
- Renames multiple (124) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Acquires the wake lock.
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
- Requests cell location
  Uses Android APIs to to get current cell information.
- Removes a system notification.
  evasion
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

urlscan1

behavioral1

evasionransomware