Overview

overview

10

Static

static

10

0cf1abfa17...e9.apk

android-9-x86

1

0cf1abfa17...e9.apk

android-10-x64

1

0cf1abfa17...e9.apk

android-11-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0cf1abfa178287dbf9cf2f34b0f322e9.apk

  • Size

    5.2MB

  • MD5

    0cf1abfa178287dbf9cf2f34b0f322e9

  • SHA1

    2db21b400efff47612b661c5260cd92f85a9e4a5

  • SHA256

    4f12d155c85b00c07ad4534aca02ac1444ef23e6f073e137d81e6ac996012de8

  • SHA512

    98a248b9d383e99e1308c742e7f9477d981d25a26d02214af941306e9b8e74cd5c5f79826e9130254b30347e466c8d067d03d103b646e51541a5869c63a5e136

  • SSDEEP

    98304:FfOSc0fmDolWjnBawdw0Zt526GQzDSlu1+6O1PSFUD8qCZTjgvfb3GcXt5q:FfOSmM0ad0Zt5jGy6uygsXCZA72cXi

Score
10/10
joker

Malware Config

Extracted

Family

joker

C2

http://meglivesdk.oss-cn-hangzhou.aliyuncs.com

Signatures

  • Joker family
    joker
  • Requests dangerous framework permissions 6 IoCs

Files

  • 0cf1abfa178287dbf9cf2f34b0f322e9.apk
    .apk android

    com.iqiyi.i18n

    com.iqiyi.i18n.p407b2628


Android Permissions

0cf1abfa178287dbf9cf2f34b0f322e9.apk

Permissions

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.VIBRATE

android.permission.READ_CONTACTS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.READ_SMS

android.permission.QUERY_ALL_PACKAGES

android.permission.WAKE_LOCK

android.permission.REQUEST_DELETE_PACKAGES