joker | f9d5b5400ce0fe17e4a74af093ba051ad98b8eae5fb96087a89bef5c84817bf7

General

Target

f9d5b5400ce0fe17e4a74af093ba051ad98b8eae5fb96087a89bef5c84817bf7
Size

29.1MB
MD5

339359eb1f92baeda3d7851007021a1d
SHA1

ebd3a9e760e74fbfb7c333ac4ce0ef8ae557e51b
SHA256

f9d5b5400ce0fe17e4a74af093ba051ad98b8eae5fb96087a89bef5c84817bf7
SHA512

b601b5a4956e1e329e40840cfe36c714df6833be5890c6ec5d02039f55eb92826cf27c75204eded069750e9412ba59383e8ecbff706e7bb0a5875dac3de383e9
SSDEEP

786432:Tpevmx3H/iutVFAHMEbYOm+lJHQncVYmi1LlOfn:Tpe+wMFAsEbYb4YpllQ

Score

10^/10

joker

Malware Config

Extracted

Family

joker

C2

http://foodfighter.oss-cn-hangzhou.aliyuncs.com

Signatures

Joker family
joker

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

f9d5b5400ce0fe17e4a74af093ba051ad98b8eae5fb96087a89bef5c84817bf7
.apk android arch:arm arch:x86

com.syntc.FoodFighter

.FoodFighter

Activities

.FoodFighter

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_ACCOUNTS
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

Receivers

net.umipay.android.poll.Push_Boot_Receiver

android.net.conn.CONNECTIVITY_CHANGE

net.umipay.android.poll.Push_Alarm_Receiver

net.umipay.android.poll.push_alarm

net.youmi.android.AdReceiver

android.intent.action.PACKAGE_ADDED

FreeCoinCompYoumiReceiver

ep_8db3d7273d987206
vp_8db3d7273d987206

Services

Android Permissions

f9d5b5400ce0fe17e4a74af093ba051ad98b8eae5fb96087a89bef5c84817bf7

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_ACCOUNTS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

Sharing

General

Malware Config

Extracted

Signatures

Files

com.syntc.FoodFighter

.FoodFighter

Activities

.FoodFighter

Permissions

Receivers

net.umipay.android.poll.Push_Boot_Receiver

net.umipay.android.poll.Push_Alarm_Receiver

net.youmi.android.AdReceiver

FreeCoinCompYoumiReceiver

Services

Android Permissions

f9d5b5400ce0fe17e4a74af093ba051ad98b8eae5fb96087a89bef5c84817bf7