joker | 13dac1411071b5544c844a0020aa52c6fbb70d2dcec734d7ff98aa576c46170f | Triage

Submit
Reports

Overview

overview

Static

static

1

13dac14110...0f.exe

windows7-x64

13dac14110...0f.exe

windows10-2004-x64

Sharing

General

Target

13dac1411071b5544c844a0020aa52c6fbb70d2dcec734d7ff98aa576c46170f
Size

279KB
Sample

221011-gxv9lahfa5
MD5

61757e19ee3569e896b8564f9841ba00
SHA1

79c44fd9e70f31d055330fa14e025b04b11ddba5
SHA256

13dac1411071b5544c844a0020aa52c6fbb70d2dcec734d7ff98aa576c46170f
SHA512

557e70f42ca4adfc22a19cfa2903a49bdd4df39da98469874b6458bfcafda15b8520cd9969884b0a9b2536048972cc13d24a05a560a632bea69a19248aa900b3
SSDEEP

6144:Se341ts48boeKkaRSft2PXMs7ETRhLPQSE0KkF1p60KkF7:H4cawft4R7QhDpokn4kh

Score

10^/10

joker infostealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

13dac1411071b5544c844a0020aa52c6fbb70d2dcec734d7ff98aa576c46170f.exe

Resource

win7-20220901-en

joker infostealer trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

13dac1411071b5544c844a0020aa52c6fbb70d2dcec734d7ff98aa576c46170f.exe

Resource

win10v2004-20220812-en

joker infostealer trojan

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  13dac1411071b5544c844a0020aa52c6fbb70d2dcec734d7ff98aa576c46170f
- Size
  
  279KB
- MD5
  
  61757e19ee3569e896b8564f9841ba00
- SHA1
  
  79c44fd9e70f31d055330fa14e025b04b11ddba5
- SHA256
  
  13dac1411071b5544c844a0020aa52c6fbb70d2dcec734d7ff98aa576c46170f
- SHA512
  
  557e70f42ca4adfc22a19cfa2903a49bdd4df39da98469874b6458bfcafda15b8520cd9969884b0a9b2536048972cc13d24a05a560a632bea69a19248aa900b3
- SSDEEP
  
  6144:Se341ts48boeKkaRSft2PXMs7ETRhLPQSE0KkF1p60KkF7:H4cawft4R7QhDpokn4kh
Score

10^/10

joker infostealer trojan
- joker
  Joker is an Android malware that targets billing and SMS fraud.
  infostealer trojan joker
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

jokerinfostealertrojan

behavioral2

jokerinfostealertrojan

© 2018-2025

Terms | Privacy