Overview

overview

10

Static

static

0f90bb8600...7d.exe

windows7-x64

10

0f90bb8600...7d.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f90bb86007a525c51606f541d23f17d

  • Size

    124KB

  • Sample

    220818-1m4b1afcc3

  • MD5

    0f90bb86007a525c51606f541d23f17d

  • SHA1

    61b24dc1fe848eab720bc4f5371dd963afb1c22c

  • SHA256

    44aa2372d01d2f5199a9149debab54dc1ac6105b613cd145933d09f305ffb941

  • SHA512

    4c3e641db45fc829f9729ff20ccd3967cbc59f072638932fd712eae80243941ded9e2fc921b711a1a70d066a9997aec214cea3fb2e22216738b32a177343bdf9

  • SSDEEP

    3072:L1i/NU8bOMYcYYcmy5cU+gTn6HOjDhWrzvvQwlgOks5YmMOMYcYY51i/NU8F:pi/NjO5YBgegD0PHzSv3Oai/NN

Score
10/10
jokerinfostealerpersistencetrojan

Malware Config

Targets

    • Target

      0f90bb86007a525c51606f541d23f17d

    • Size

      124KB

    • MD5

      0f90bb86007a525c51606f541d23f17d

    • SHA1

      61b24dc1fe848eab720bc4f5371dd963afb1c22c

    • SHA256

      44aa2372d01d2f5199a9149debab54dc1ac6105b613cd145933d09f305ffb941

    • SHA512

      4c3e641db45fc829f9729ff20ccd3967cbc59f072638932fd712eae80243941ded9e2fc921b711a1a70d066a9997aec214cea3fb2e22216738b32a177343bdf9

    • SSDEEP

      3072:L1i/NU8bOMYcYYcmy5cU+gTn6HOjDhWrzvvQwlgOks5YmMOMYcYY51i/NU8F:pi/NjO5YBgegD0PHzSv3Oai/NN

    Score
    10/10
    jokerinfostealerpersistencetrojan

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

      infostealertrojanjoker

    • Modifies Installed Components in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks