joker | 44d19fc60c791727ec324b57e02b79a17ce22a9a80674887f79b31383a63a187 | Triage

Submit
Reports

Overview

overview

Static

static

44d19fc60c...87.exe

windows7-x64

44d19fc60c...87.exe

windows10-2004-x64

Sharing

General

Target

44d19fc60c791727ec324b57e02b79a17ce22a9a80674887f79b31383a63a187
Size

310KB
Sample

220919-hl6fvsghdm
MD5

d41167879a48205b6875e364eed85a43
SHA1

0ef92fbe70386c3e0217a2b3ba2231136fa4499d
SHA256

44d19fc60c791727ec324b57e02b79a17ce22a9a80674887f79b31383a63a187
SHA512

28e2315e46af62bbbedc39a0ccb6f50b6e440a73f8c35b7a959702b31efec479da5308afd0cf31ee6e3a1a7eac5f1ac635b0c5a21163d136a7308c0b467c0f05
SSDEEP

6144:v9UfckVda6MixnO7a+yjjIZy7dWtIJmYIoC8MRzLn9/EIn4trabt:1NkVdHkaxCyJVFiPzL9O1aZ

Score

10^/10

joker infostealer persistence trojan

Static task

static1

Behavioral task

behavioral1

Sample

44d19fc60c791727ec324b57e02b79a17ce22a9a80674887f79b31383a63a187.exe

Resource

win7-20220812-en

joker infostealer trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

44d19fc60c791727ec324b57e02b79a17ce22a9a80674887f79b31383a63a187.exe

Resource

win10v2004-20220901-en

joker infostealer persistence trojan

windows10-2004-x64

16 signatures

150 seconds

Malware Config

Targets

- Target
  
  44d19fc60c791727ec324b57e02b79a17ce22a9a80674887f79b31383a63a187
- Size
  
  310KB
- MD5
  
  d41167879a48205b6875e364eed85a43
- SHA1
  
  0ef92fbe70386c3e0217a2b3ba2231136fa4499d
- SHA256
  
  44d19fc60c791727ec324b57e02b79a17ce22a9a80674887f79b31383a63a187
- SHA512
  
  28e2315e46af62bbbedc39a0ccb6f50b6e440a73f8c35b7a959702b31efec479da5308afd0cf31ee6e3a1a7eac5f1ac635b0c5a21163d136a7308c0b467c0f05
- SSDEEP
  
  6144:v9UfckVda6MixnO7a+yjjIZy7dWtIJmYIoC8MRzLn9/EIn4trabt:1NkVdHkaxCyJVFiPzL9O1aZ
Score

10^/10

joker infostealer trojan persistence
- joker
  Joker is an Android malware that targets billing and SMS fraud.
  infostealer trojan joker
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

jokerinfostealertrojan

behavioral2

jokerinfostealerpersistencetrojan

© 2018-2025

Terms | Privacy