hxxps://llaun[.]ch/en | Triage

Sharing

General

Target

https://llaun.ch/en
Sample

230610-hlvz5aec92

Score

9^/10

android evasion ransomware

Malware Config

Targets

- Target
  
  https://llaun.ch/en
Score

9^/10

evasion ransomware
- Renames multiple (142) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Acquires the wake lock.
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
- Requests cell location
  Uses Android APIs to to get current cell information.
- Removes a system notification.
  evasion
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

urlscan1

behavioral1

evasionransomware