General

  • Target

    DDABE5999DBC9FFBC8B804A7EA6BB61415BC88E346B2D2C0D53BFFF9DCC88D32.apk

  • Size

    4.0MB

  • MD5

    23e49cc28a5feeed4b9e362aa43e158a

  • SHA1

    dede2bbf3c768f425f8aa33e4cc84b54d2c420de

  • SHA256

    ddabe5999dbc9ffbc8b804a7ea6bb61415bc88e346b2d2c0d53bfff9dcc88d32

  • SHA512

    cd823991e244861ab11d9157406e2a8fc10d0818670524766a1b26090848b2ad269aa3e9e305bcb79672c609486818a2eb4c63258835aa5e0c845696aa70c678

  • SSDEEP

    98304:znWe8B4SyAR3u9E48GT3WC9ricWgyqTG+IicpcpYUBvBON:T829GmE4T59ricWgDTGjn/UBvU

Score
10/10

Malware Config

Extracted

Family

joker

C2

http://meglivesdk.oss-cn-hangzhou.aliyuncs.com

Signatures

  • Joker family
  • Requests dangerous framework permissions 5 IoCs

Files

  • DDABE5999DBC9FFBC8B804A7EA6BB61415BC88E346B2D2C0D53BFFF9DCC88D32.apk
    .apk android

    com.rmowa.wpamz

    com.rmowa.wpamz.WNiudwabNUDIba


Android Permissions

DDABE5999DBC9FFBC8B804A7EA6BB61415BC88E346B2D2C0D53BFFF9DCC88D32.apk

Permissions

android.permission.REQUEST_PASSWORD_COMPLEXITY

android.permission.FOREGROUND_SERVICE

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.RECEIVE_MMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SMS

android.permission.USE_BIOMETRIC

android.permission.INTERNET

android.permission.QUERY_ALL_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SEND_SMS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_SMS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS