Overview

overview

10

Static

static

7af9193a36...f1.exe

windows7-x64

10

7af9193a36...f1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7af9193a3605beb4175bbeca714ac1287047deb47ab0aa5099781a115e2b97f1

  • Size

    1.5MB

  • Sample

    220919-hmfltsche6

  • MD5

    d372ea851aa97a62eadd09e5c9cc8de7

  • SHA1

    6edd9c411a66eb700d244664d12d5e4eda850461

  • SHA256

    7af9193a3605beb4175bbeca714ac1287047deb47ab0aa5099781a115e2b97f1

  • SHA512

    dea02bb4c0314de3aea3b0c2f0bf2e0c6bc3e18e748bf2eccc5ac101ee544c37232d081c7e41ff4deaa718621689e15676cd489dd21516c03e8b7c1869660f05

  • SSDEEP

    24576:5HJ+TBzraCXb8zsMbTkE+bsqsVToIa0FYRrvnejnyZm0nxysBuk6d++ao7iC5ITW:5M4zsM0EnoIa0yrvmifyuoN2jDrtg9

Score
10/10
jokerinfostealertrojan

Malware Config

Targets

    • Target

      7af9193a3605beb4175bbeca714ac1287047deb47ab0aa5099781a115e2b97f1

    • Size

      1.5MB

    • MD5

      d372ea851aa97a62eadd09e5c9cc8de7

    • SHA1

      6edd9c411a66eb700d244664d12d5e4eda850461

    • SHA256

      7af9193a3605beb4175bbeca714ac1287047deb47ab0aa5099781a115e2b97f1

    • SHA512

      dea02bb4c0314de3aea3b0c2f0bf2e0c6bc3e18e748bf2eccc5ac101ee544c37232d081c7e41ff4deaa718621689e15676cd489dd21516c03e8b7c1869660f05

    • SSDEEP

      24576:5HJ+TBzraCXb8zsMbTkE+bsqsVToIa0FYRrvnejnyZm0nxysBuk6d++ao7iC5ITW:5M4zsM0EnoIa0yrvmifyuoN2jDrtg9

    Score
    10/10
    jokerinfostealertrojan

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

      infostealertrojanjoker

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks