Analysis

  • max time kernel
    113s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-10-2022 07:21

General

  • Target

    4068808b4f1e73769a6e8fb5ae5e1f1b5fb3d45809ab29e201ff5e89d2642814.exe

  • Size

    1.4MB

  • MD5

    9660a1160731c479d1989772c123a41a

  • SHA1

    33e781965aaa7185044d55d2ef0de5845b24409d

  • SHA256

    4068808b4f1e73769a6e8fb5ae5e1f1b5fb3d45809ab29e201ff5e89d2642814

  • SHA512

    a435c302378ce8f3367215e536062001e4d943a6f7572d546391ad4b0c87c66b6ad41207e1e46e4be96cd62526869556e9c0ca263911d36d42e06fedcdcfd40b

  • SSDEEP

    24576:ihDKBR3SbEF/su/cN931UaUgM5tmpayvUCUddu:iKp/cN9nUgM5CUf

Malware Config

Signatures

  • joker

    Joker is an Android malware that targets billing and SMS fraud.

  • Suspicious behavior: EnumeratesProcesses 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4068808b4f1e73769a6e8fb5ae5e1f1b5fb3d45809ab29e201ff5e89d2642814.exe
    "C:\Users\Admin\AppData\Local\Temp\4068808b4f1e73769a6e8fb5ae5e1f1b5fb3d45809ab29e201ff5e89d2642814.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:3036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads