Overview

overview

10

Static

static

fbc97e576d...44.exe

windows7-x64

10

fbc97e576d...44.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbc97e576d8894f6fc7249dd5f6b3a553a57e14d659b731a9d5011aa81758344

  • Size

    1.3MB

  • Sample

    220804-q51zgsfef4

  • MD5

    505395fed6f0d92efd4584f5b9327ac8

  • SHA1

    82e2d416ce0dc5f7bbf858751c710df9aa686940

  • SHA256

    fbc97e576d8894f6fc7249dd5f6b3a553a57e14d659b731a9d5011aa81758344

  • SHA512

    ffc656e967a0d56d8663275f31e7538b95b00e22d14e84a6b819ce3f4e7f2d30b82c293cd6046c046bf0a76dd7b05be28e93f6f77ab8bb7cc03b6a8e27bcc2ad

Score
10/10
jokerinfostealertrojan

Malware Config

Targets

    • Target

      fbc97e576d8894f6fc7249dd5f6b3a553a57e14d659b731a9d5011aa81758344

    • Size

      1.3MB

    • MD5

      505395fed6f0d92efd4584f5b9327ac8

    • SHA1

      82e2d416ce0dc5f7bbf858751c710df9aa686940

    • SHA256

      fbc97e576d8894f6fc7249dd5f6b3a553a57e14d659b731a9d5011aa81758344

    • SHA512

      ffc656e967a0d56d8663275f31e7538b95b00e22d14e84a6b819ce3f4e7f2d30b82c293cd6046c046bf0a76dd7b05be28e93f6f77ab8bb7cc03b6a8e27bcc2ad

    Score
    10/10
    jokerinfostealertrojan

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

      infostealertrojanjoker

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks