General

  • Target

    https://aka.ms/o0ukef

  • Sample

    230606-lgthaada37

Malware Config

Targets

    • Target

      https://aka.ms/o0ukef

    • Renames multiple (124) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Detected potential entity reuse from brand microsoft.

MITRE ATT&CK Matrix

Tasks