Overview

overview

10

Static

static

f3007778ec...ac.exe

windows7-x64

10

f3007778ec...ac.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3007778ec659ec76241e71ab09e0c7a40d801418fffde33bee1b87773818dac

  • Size

    1.3MB

  • Sample

    220829-jt8fvsfbh6

  • MD5

    6f6fe3082600940a78ee6177f0c24345

  • SHA1

    a25b69230b2e2c31241b28d2f9bba184e50e20fa

  • SHA256

    f3007778ec659ec76241e71ab09e0c7a40d801418fffde33bee1b87773818dac

  • SHA512

    c2774338c16b53d757820d6cb769cf620a58c3ccd598ade80b77e26ef2b9bf1382a88606238942cf4ba94c82003fee5f515d32758b196557d5736a357166dfd0

  • SSDEEP

    24576:P4jswSqHWR4a/oGcmXZ3YkHwzdBCHtqGVF1j1drldIL0rZbUwYh:wobq2iscmXZ3YkHwzdUAKnbbFbUXh

Score
10/10
jokerinfostealertrojan

Malware Config

Targets

    • Target

      f3007778ec659ec76241e71ab09e0c7a40d801418fffde33bee1b87773818dac

    • Size

      1.3MB

    • MD5

      6f6fe3082600940a78ee6177f0c24345

    • SHA1

      a25b69230b2e2c31241b28d2f9bba184e50e20fa

    • SHA256

      f3007778ec659ec76241e71ab09e0c7a40d801418fffde33bee1b87773818dac

    • SHA512

      c2774338c16b53d757820d6cb769cf620a58c3ccd598ade80b77e26ef2b9bf1382a88606238942cf4ba94c82003fee5f515d32758b196557d5736a357166dfd0

    • SSDEEP

      24576:P4jswSqHWR4a/oGcmXZ3YkHwzdBCHtqGVF1j1drldIL0rZbUwYh:wobq2iscmXZ3YkHwzdUAKnbbFbUXh

    Score
    10/10
    jokerinfostealertrojan

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

      infostealertrojanjoker

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks