hxxp://URL | Triage

Sharing

General

Target

http://URL
Sample

230602-txnkzacd32

Score

9^/10

android evasion ransomware

Malware Config

Targets

- Target
  
  http://URL
Score

9^/10

evasion ransomware
- Renames multiple (100) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
- Requests cell location
  Uses Android APIs to to get current cell information.
- Removes a system notification.
  evasion
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

urlscan1

behavioral1

evasionransomware