General

  • Target

    8075ad48949e97a242c33eefd208411bc693e077df895331bf637e8d5581baf3

  • Size

    1.4MB

  • Sample

    220724-vaak9sbdhj

  • MD5

    a4dbb08ea279a189b13ae5eb926a82fa

  • SHA1

    c1f0c28b659b534167c8887a29e74e11b3497974

  • SHA256

    8075ad48949e97a242c33eefd208411bc693e077df895331bf637e8d5581baf3

  • SHA512

    cf265dc1576c383f7248b7c44fd8e029972e816f06d07b23cf861547989774f4f821a9d0b62bcecf77eac1fa507696b503c8309ce7324d54b3502e8c9d95947a

Malware Config

Extracted

Family

joker

C2

http://daohang1.oss-cn-beijing.aliyuncs.com

http://bbyz.oss-cn-shanghai.aliyuncs.com

Targets

    • Target

      8075ad48949e97a242c33eefd208411bc693e077df895331bf637e8d5581baf3

    • Size

      1.4MB

    • MD5

      a4dbb08ea279a189b13ae5eb926a82fa

    • SHA1

      c1f0c28b659b534167c8887a29e74e11b3497974

    • SHA256

      8075ad48949e97a242c33eefd208411bc693e077df895331bf637e8d5581baf3

    • SHA512

      cf265dc1576c383f7248b7c44fd8e029972e816f06d07b23cf861547989774f4f821a9d0b62bcecf77eac1fa507696b503c8309ce7324d54b3502e8c9d95947a

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks