General

  • Target

    http://waplus.me

  • Sample

    230614-2nalraea6s

Malware Config

Targets

    • Target

      http://waplus.me

    Score
    9/10
    • Renames multiple (100) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Renames multiple (56) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks