General

  • Target

    04a1801226588a5dc85429674f3bdf7a798f31aa37ef1a16fff39b48c525808f

  • Size

    3.1MB

  • Sample

    220731-g49essdder

  • MD5

    855df0d3ecae8faf5e984b52ea213e13

  • SHA1

    95678c3bc95add7b3e80f0f7fd2c4296f6feaaf9

  • SHA256

    04a1801226588a5dc85429674f3bdf7a798f31aa37ef1a16fff39b48c525808f

  • SHA512

    4c8184391668f671916c4046cbd78dde6dc2d8b4708c91e4eae05c9f4fcc81102c72e2f00fce894987a3d7bffb0c341ad130a6b052726021c766f665109a8705

Malware Config

Extracted

Family

joker

C2

http://daohang1.oss-cn-beijing.aliyuncs.com

http://bbyz.oss-cn-shanghai.aliyuncs.com

Targets

    • Target

      04a1801226588a5dc85429674f3bdf7a798f31aa37ef1a16fff39b48c525808f

    • Size

      3.1MB

    • MD5

      855df0d3ecae8faf5e984b52ea213e13

    • SHA1

      95678c3bc95add7b3e80f0f7fd2c4296f6feaaf9

    • SHA256

      04a1801226588a5dc85429674f3bdf7a798f31aa37ef1a16fff39b48c525808f

    • SHA512

      4c8184391668f671916c4046cbd78dde6dc2d8b4708c91e4eae05c9f4fcc81102c72e2f00fce894987a3d7bffb0c341ad130a6b052726021c766f665109a8705

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks