Analysis

  • max time kernel
    145s
  • max time network
    138s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-08-2022 08:59

General

  • Target

    22bceedb941bf77bfb7dbde1c2959da2732d68bef4cae33d5f0ef845218dfb41.exe

  • Size

    5.3MB

  • MD5

    dc776c91ae1356eb50606c0e49915908

  • SHA1

    f67046ceb584f64151ef00215c5899a525ba55b9

  • SHA256

    22bceedb941bf77bfb7dbde1c2959da2732d68bef4cae33d5f0ef845218dfb41

  • SHA512

    915e39691c7307fcde7ef894dec05967382a1b9ed6d8cafc9206e488b56fd01abe94f938bc041ecd5fd2ffadeb3a2958df488bbd38b6da5a14f364db8bc3e63a

  • SSDEEP

    49152:tIdualPUxZwxV/7GHt2He74cdP2llZw77LQ0soNF2He74cdr27lZw77LQ0soNcIi:QblPUmHzc4wWHzcAwHblPU

Malware Config

Signatures

  • joker

    Joker is an Android malware that targets billing and SMS fraud.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\22bceedb941bf77bfb7dbde1c2959da2732d68bef4cae33d5f0ef845218dfb41.exe
    "C:\Users\Admin\AppData\Local\Temp\22bceedb941bf77bfb7dbde1c2959da2732d68bef4cae33d5f0ef845218dfb41.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4648-132-0x0000021C3EAF0000-0x0000021C3F046000-memory.dmp

    Filesize

    5.3MB

  • memory/4648-133-0x00007FF8B39E0000-0x00007FF8B44A1000-memory.dmp

    Filesize

    10.8MB

  • memory/4648-134-0x0000021C40E20000-0x0000021C40E2A000-memory.dmp

    Filesize

    40KB

  • memory/4648-135-0x0000021C596C0000-0x0000021C596C8000-memory.dmp

    Filesize

    32KB

  • memory/4648-136-0x0000021C596E0000-0x0000021C596E8000-memory.dmp

    Filesize

    32KB

  • memory/4648-137-0x0000021C5B3D0000-0x0000021C5B3D8000-memory.dmp

    Filesize

    32KB

  • memory/4648-138-0x0000021C5B3E0000-0x0000021C5B3E8000-memory.dmp

    Filesize

    32KB

  • memory/4648-139-0x0000021C5B3F0000-0x0000021C5B3F8000-memory.dmp

    Filesize

    32KB

  • memory/4648-140-0x0000021C5B400000-0x0000021C5B408000-memory.dmp

    Filesize

    32KB

  • memory/4648-141-0x0000021C5B410000-0x0000021C5B418000-memory.dmp

    Filesize

    32KB

  • memory/4648-142-0x0000021C5B420000-0x0000021C5B428000-memory.dmp

    Filesize

    32KB

  • memory/4648-143-0x0000021C5D930000-0x0000021C5D938000-memory.dmp

    Filesize

    32KB

  • memory/4648-144-0x00007FF8B39E0000-0x00007FF8B44A1000-memory.dmp

    Filesize

    10.8MB

  • memory/4648-145-0x0000021C604C0000-0x0000021C604F8000-memory.dmp

    Filesize

    224KB

  • memory/4648-146-0x0000021C60490000-0x0000021C6049E000-memory.dmp

    Filesize

    56KB