General

  • Target

    https://due02date00ato.info/assist

  • Sample

    230710-gsar4agh67

Malware Config

Targets

    • Target

      https://due02date00ato.info/assist

    Score
    9/10
    • Renames multiple (58) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks