Extracted

• • Target

    上号器/上号器.exe

  • Size

    6.0MB

  • MD5

    cd14f9dae4d69b7b1976cc53caa91c46

  • SHA1

    678711b546d421f8060e7716ec89a1cee55a607b

  • SHA256

    dd6b755f56b754ca4cd44389d559fd5155146248e69f1d3294e23763367b6efa

  • SHA512

    066269d8ed32a40d793b5dd999423fa52be9cf4bfcdd0b92e3f249ab8882910b9cab076768befd2e8bb9bdc43cb8f530d5e721e6c478089dac4117b21866c544

  • SSDEEP

    196608:m8K+ET5aFHHFymf/X8AKfjNxHjiw5e6nvNkyPuoEoHV6Q:fK+IaBFtXX8AKfRxHji76nlkymoEoHQQ

  Score

  10^/10

  jokerinfostealertrojanvmprotect

  • joker

    Joker is an Android malware that targets billing and SMS fraud.

    infostealertrojanjoker

  • Drops file in Drivers directory

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

    vmprotect

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2