Overview

overview

10

Static

static

3929357b6c...36.exe

windows7-x64

10

3929357b6c...36.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3929357b6cee06394d35b69e6474ce36

  • Size

    129KB

  • Sample

    220830-xx5e9sgbf8

  • MD5

    3929357b6cee06394d35b69e6474ce36

  • SHA1

    85b819baa918b2ea9d101d1b7cd374a2da078fa6

  • SHA256

    9cc84bb303b0681c01f9a35cd2c04462f55a76fed4608d3eafe45b74a84c4775

  • SHA512

    872e7fd5eabd6ec8bccf342bb6ccd5284c3c64b98d62074d8177a7a8c01765aad7a3dc52802d831a4edf2d0c3b4973110f3472087c4a8572264936177f8a3ef4

  • SSDEEP

    3072:M1i/NU8bOMYcYYcmy51VRgiFCpCIXUWOLTsEsigcL3P6xxc1gs5YmMOMYcYY51i/:6i/NjO5xbg/CSUFLTwMjs6y3Oai/NDt

Score
10/10
jokerinfostealerpersistencetrojan

Malware Config

Targets

    • Target

      3929357b6cee06394d35b69e6474ce36

    • Size

      129KB

    • MD5

      3929357b6cee06394d35b69e6474ce36

    • SHA1

      85b819baa918b2ea9d101d1b7cd374a2da078fa6

    • SHA256

      9cc84bb303b0681c01f9a35cd2c04462f55a76fed4608d3eafe45b74a84c4775

    • SHA512

      872e7fd5eabd6ec8bccf342bb6ccd5284c3c64b98d62074d8177a7a8c01765aad7a3dc52802d831a4edf2d0c3b4973110f3472087c4a8572264936177f8a3ef4

    • SSDEEP

      3072:M1i/NU8bOMYcYYcmy51VRgiFCpCIXUWOLTsEsigcL3P6xxc1gs5YmMOMYcYY51i/:6i/NjO5xbg/CSUFLTwMjs6y3Oai/NDt

    Score
    10/10
    jokerinfostealerpersistencetrojan

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

      infostealertrojanjoker

    • Modifies Installed Components in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks