Overview

overview

9

Static

static

1

URLScan

urlscan

1

https://xn----ftbbsa...

windows10-2004-x64

6

https://xn----ftbbsa...

android-9-x86

7

https://xn----ftbbsa...

android-10-x64

9

https://xn----ftbbsa...

android-11-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://xn----ftbbsagcdgwh6ai4m.xn--p1ai/WP/span

  • Sample

    230607-wywn3sef9y

Score
9/10
androidevasionransomware

Malware Config

Targets

    • Target

      https://xn----ftbbsagcdgwh6ai4m.xn--p1ai/WP/span

    Score
    9/10
    evasionransomware

    • Renames multiple (100) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Renames multiple (76) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Drops Chrome extension

    • Removes a system notification.

      evasion
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v6

Tasks