General

  • Target

    https://gov-onlinedocs.live

  • Sample

    230711-c8nlnseb82

Malware Config

Targets

    • Target

      https://gov-onlinedocs.live

    Score
    9/10
    • Renames multiple (56) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks