joker | c2ddb8682f3dd8e0ac1ff5e874708c0f101ba218be8a0e00ce383e403ec43956 | Triage

Submit
Reports

Overview

overview

Static

static

8

c2ddb8682f...56.exe

windows7-x64

8

c2ddb8682f...56.exe

windows10-2004-x64

Sharing

General

Target

c2ddb8682f3dd8e0ac1ff5e874708c0f101ba218be8a0e00ce383e403ec43956
Size

1016KB
Sample

221011-hlchsaagb5
MD5

6430199776a029aa36764561459a773d
SHA1

4f2cab2545974f57308494d93c71508b033c5cc1
SHA256

c2ddb8682f3dd8e0ac1ff5e874708c0f101ba218be8a0e00ce383e403ec43956
SHA512

248ef54868814dd0bfcd58360b0ca615720a2fedc6f0bce94294a70894e773e07dca5de6e492025dd8359f8afdc5a01c05906d108a92e7c440e0cdb63b3127a1
SSDEEP

24576:T3ox4L4KUcISEWOwP9+qC9IAIbpcIvJxXUpMm:rrL4K9qWVltsdI1Nv/K

Score

10^/10

joker infostealer trojan upx vmprotect

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

c2ddb8682f3dd8e0ac1ff5e874708c0f101ba218be8a0e00ce383e403ec43956.exe

Resource

win7-20220812-en

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

c2ddb8682f3dd8e0ac1ff5e874708c0f101ba218be8a0e00ce383e403ec43956.exe

Resource

win10v2004-20220901-en

joker infostealer trojan upx vmprotect

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  c2ddb8682f3dd8e0ac1ff5e874708c0f101ba218be8a0e00ce383e403ec43956
- Size
  
  1016KB
- MD5
  
  6430199776a029aa36764561459a773d
- SHA1
  
  4f2cab2545974f57308494d93c71508b033c5cc1
- SHA256
  
  c2ddb8682f3dd8e0ac1ff5e874708c0f101ba218be8a0e00ce383e403ec43956
- SHA512
  
  248ef54868814dd0bfcd58360b0ca615720a2fedc6f0bce94294a70894e773e07dca5de6e492025dd8359f8afdc5a01c05906d108a92e7c440e0cdb63b3127a1
- SSDEEP
  
  24576:T3ox4L4KUcISEWOwP9+qC9IAIbpcIvJxXUpMm:rrL4K9qWVltsdI1Nv/K
Score

10^/10

upx vmprotect joker infostealer trojan
- joker
  Joker is an Android malware that targets billing and SMS fraud.
  infostealer trojan joker
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

jokerinfostealertrojanupxvmprotect

© 2018-2025

Terms | Privacy