General

  • Target

    http://battlegame.vercel.app/minecraft/download

  • Sample

    230615-mpymmsga3x

Malware Config

Targets

    • Target

      http://battlegame.vercel.app/minecraft/download

    Score
    9/10
    • Renames multiple (104) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Enterprise v6

Tasks