hxxps://my[.]incomes-return-secure[.]com | Triage

Sharing

General

Target

https://my.incomes-return-secure.com
Sample

230711-dh1nzsfc81

Score

9^/10

android evasion macos ransomware

Malware Config

Targets

- Target
  
  https://my.incomes-return-secure.com
Score

9^/10

evasion ransomware
- Renames multiple (58) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
- Removes a system notification.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

urlscan1

behavioral1

evasionransomware

behavioral2