Analysis
-
max time kernel
113s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02-10-2022 07:21
Static task
static1
Behavioral task
behavioral1
Sample
4068808b4f1e73769a6e8fb5ae5e1f1b5fb3d45809ab29e201ff5e89d2642814.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4068808b4f1e73769a6e8fb5ae5e1f1b5fb3d45809ab29e201ff5e89d2642814.exe
Resource
win10v2004-20220812-en
General
-
Target
4068808b4f1e73769a6e8fb5ae5e1f1b5fb3d45809ab29e201ff5e89d2642814.exe
-
Size
1.4MB
-
MD5
9660a1160731c479d1989772c123a41a
-
SHA1
33e781965aaa7185044d55d2ef0de5845b24409d
-
SHA256
4068808b4f1e73769a6e8fb5ae5e1f1b5fb3d45809ab29e201ff5e89d2642814
-
SHA512
a435c302378ce8f3367215e536062001e4d943a6f7572d546391ad4b0c87c66b6ad41207e1e46e4be96cd62526869556e9c0ca263911d36d42e06fedcdcfd40b
-
SSDEEP
24576:ihDKBR3SbEF/su/cN931UaUgM5tmpayvUCUddu:iKp/cN9nUgM5CUf
Malware Config
Signatures
-
joker
Joker is an Android malware that targets billing and SMS fraud.
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
pid Process 3036 4068808b4f1e73769a6e8fb5ae5e1f1b5fb3d45809ab29e201ff5e89d2642814.exe 3036 4068808b4f1e73769a6e8fb5ae5e1f1b5fb3d45809ab29e201ff5e89d2642814.exe 3036 4068808b4f1e73769a6e8fb5ae5e1f1b5fb3d45809ab29e201ff5e89d2642814.exe 3036 4068808b4f1e73769a6e8fb5ae5e1f1b5fb3d45809ab29e201ff5e89d2642814.exe 3036 4068808b4f1e73769a6e8fb5ae5e1f1b5fb3d45809ab29e201ff5e89d2642814.exe 3036 4068808b4f1e73769a6e8fb5ae5e1f1b5fb3d45809ab29e201ff5e89d2642814.exe 3036 4068808b4f1e73769a6e8fb5ae5e1f1b5fb3d45809ab29e201ff5e89d2642814.exe 3036 4068808b4f1e73769a6e8fb5ae5e1f1b5fb3d45809ab29e201ff5e89d2642814.exe