Analysis
-
max time kernel
43s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
08-09-2022 14:28
General
-
Target
fbe37aea95850f9a35887f43688b32e536a4cb2be82183838f35ffab998e25bb.exe
-
Size
616KB
-
MD5
a7c62ec5a42112d64f92847dfa22f7be
-
SHA1
00ce70a5975b5c444117e594763fec75f55993b1
-
SHA256
fbe37aea95850f9a35887f43688b32e536a4cb2be82183838f35ffab998e25bb
-
SHA512
35a1f8ebe4971f6875b3bad3564a294644735d9d718e2ee348458a855ebac9d20b4bd069ba3b486869cc1051b0706ea9d0b9cc75ed5548e70cadfbabe79af11b
-
SSDEEP
12288:sqrCM4py3uoajY0E3Hvkvi3kMXaKPzzYZ/intMZO/XDldGHEzrGoju1oeDucj:sqmMmy3upF8kqdvzgStMUBdWOrrUoij
Score
10/10
Malware Config
Extracted
Family
joker
C2
https://kexiao.oss-cn-shanghai.aliyuncs.com
Signatures
-
joker
Joker is an Android malware that targets billing and SMS fraud.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fbe37aea95850f9a35887f43688b32e536a4cb2be82183838f35ffab998e25bb.exe"C:\Users\Admin\AppData\Local\Temp\fbe37aea95850f9a35887f43688b32e536a4cb2be82183838f35ffab998e25bb.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
1.5MB
-
Filesize
1.5MB