Overview

overview

10

Static

static

f075c52ce0...2b.exe

windows7-x64

10

f075c52ce0...2b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f075c52ce064768d7567c841f269712b

  • Size

    137KB

  • Sample

    221004-x46a5scbd8

  • MD5

    f075c52ce064768d7567c841f269712b

  • SHA1

    993d250b26e4660b93ba8e29af6cc9a46420e772

  • SHA256

    65e48138eeec15a0fad5c341f62ecc31552c01db04db0fd2e8c39ac3e45fcff7

  • SHA512

    59813726e98b1d889759e28391b9d82a596a9a37ba98f5e2fd9ddce7dcf15ed8d8a72037d01531a26d496fa891b0f67b3d0880f6fec09aa8f0c74488a45bda22

  • SSDEEP

    3072:71i/NU8bOMYcYYcmy5d048g3nan3vx9kGSYng7+s5YmMOMYcYY51i/NU81:Zi/NjO5x0Xg+UGSYnuy3Oai/Nd

Score
10/10
jokerinfostealerpersistencetrojan

Malware Config

Targets

    • Target

      f075c52ce064768d7567c841f269712b

    • Size

      137KB

    • MD5

      f075c52ce064768d7567c841f269712b

    • SHA1

      993d250b26e4660b93ba8e29af6cc9a46420e772

    • SHA256

      65e48138eeec15a0fad5c341f62ecc31552c01db04db0fd2e8c39ac3e45fcff7

    • SHA512

      59813726e98b1d889759e28391b9d82a596a9a37ba98f5e2fd9ddce7dcf15ed8d8a72037d01531a26d496fa891b0f67b3d0880f6fec09aa8f0c74488a45bda22

    • SSDEEP

      3072:71i/NU8bOMYcYYcmy5d048g3nan3vx9kGSYng7+s5YmMOMYcYY51i/NU81:Zi/NjO5x0Xg+UGSYnuy3Oai/Nd

    Score
    10/10
    jokerinfostealerpersistencetrojan

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

      infostealertrojanjoker

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks