Overview

overview

10

Static

static

0a582632d3...e5.exe

windows7-x64

5

0a582632d3...e5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a582632d313ad72c793bb45fd36a31efaf7c03e7a35c37aad7cf0cc2cf522e5

  • Size

    1.3MB

  • Sample

    221003-nxn9lseca6

  • MD5

    64c1dbb3a3cef7560342c9cc8018ea63

  • SHA1

    a3221bc9d1ebea3832785088317b9fea68772c6a

  • SHA256

    0a582632d313ad72c793bb45fd36a31efaf7c03e7a35c37aad7cf0cc2cf522e5

  • SHA512

    ddce9e45d275cab66e9d76f15563aac26e28aeadcb7b1628be3f3296c5091ef13974027456b2aa19e8345cb4febc94bf6bfc421046273c62199abe0417613c63

  • SSDEEP

    12288:HGrHG7Wvc1t1oPG7qTBHtQzBC2bNmx7ENkkHqEGRcoMegNI6J74zdvgvF01Nz:HGsYcX1omqTBHt32bNXxHqELmk4zd4uv

Score
10/10
jokerinfostealerpersistencetrojan

Malware Config

Targets

    • Target

      0a582632d313ad72c793bb45fd36a31efaf7c03e7a35c37aad7cf0cc2cf522e5

    • Size

      1.3MB

    • MD5

      64c1dbb3a3cef7560342c9cc8018ea63

    • SHA1

      a3221bc9d1ebea3832785088317b9fea68772c6a

    • SHA256

      0a582632d313ad72c793bb45fd36a31efaf7c03e7a35c37aad7cf0cc2cf522e5

    • SHA512

      ddce9e45d275cab66e9d76f15563aac26e28aeadcb7b1628be3f3296c5091ef13974027456b2aa19e8345cb4febc94bf6bfc421046273c62199abe0417613c63

    • SSDEEP

      12288:HGrHG7Wvc1t1oPG7qTBHtQzBC2bNmx7ENkkHqEGRcoMegNI6J74zdvgvF01Nz:HGsYcX1omqTBHt32bNXxHqELmk4zd4uv

    Score
    10/10
    jokerinfostealerpersistencetrojan

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

      infostealertrojanjoker

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks