Resubmissions

29-09-2022 02:28

220929-cx45aaafcp 10

26-09-2022 03:52

220926-ee3jvahcd9 10

General

  • Target

    base.apk

  • Size

    21.3MB

  • Sample

    220926-ee3jvahcd9

  • MD5

    e64eb87a1a5f0a4e08311799c89845c5

  • SHA1

    ca7447547322836464162c89bbce11471da0dfb6

  • SHA256

    d8c04583ad8c552a91197d639f8aa2726e7dd1269c0633968c4bc7fe34ebd39d

  • SHA512

    ae928c520abcfc79f7df6be4ef014caf221ebe0c8e0b96281919499f3722c7bc1503b8dca7be311675d3b9a424351a76d9aff02746567204e51dca4e43a97046

  • SSDEEP

    393216:vaQpsFFnyUYK+IsyTYxoCYRx3e+/gLo0LHnqytYGqjMorCY97gHts2Wx9u+U438:vMnGbIaxF25eYmnHqgYGAneHa22Fs

Malware Config

Extracted

Family

joker

C2

https://dubai-common.oss-accelerate-overseas.aliyuncs.com

Targets

    • Target

      base.apk

    • Size

      21.3MB

    • MD5

      e64eb87a1a5f0a4e08311799c89845c5

    • SHA1

      ca7447547322836464162c89bbce11471da0dfb6

    • SHA256

      d8c04583ad8c552a91197d639f8aa2726e7dd1269c0633968c4bc7fe34ebd39d

    • SHA512

      ae928c520abcfc79f7df6be4ef014caf221ebe0c8e0b96281919499f3722c7bc1503b8dca7be311675d3b9a424351a76d9aff02746567204e51dca4e43a97046

    • SSDEEP

      393216:vaQpsFFnyUYK+IsyTYxoCYRx3e+/gLo0LHnqytYGqjMorCY97gHts2Wx9u+U438:vMnGbIaxF25eYmnHqgYGAneHa22Fs

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

    • Reads information about phone network operator.

    • Removes a system notification.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks