Analysis
-
max time kernel
48s -
max time network
157s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
12-10-2022 15:53
Static task
static1
Behavioral task
behavioral1
Sample
b61bdc295133a491314f706c513aec2f2a88a0235c3483e2137903fb4ab9fc6f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b61bdc295133a491314f706c513aec2f2a88a0235c3483e2137903fb4ab9fc6f.exe
Resource
win10v2004-20220812-en
General
-
Target
b61bdc295133a491314f706c513aec2f2a88a0235c3483e2137903fb4ab9fc6f.exe
-
Size
5.3MB
-
MD5
e3b0df2abc353670ccd5b2c53d8b8ebe
-
SHA1
bf47983fa8022a5e4a44e0b300660fab01ce6e29
-
SHA256
b61bdc295133a491314f706c513aec2f2a88a0235c3483e2137903fb4ab9fc6f
-
SHA512
1c82e23a59fb8b3e920f10b701cabb01ba95ae9ab7aafd86830ae482ef259d216af3d518f65d11ff4f950082edc07c79407e34fc7cd2f25643afa1fbc4cc48a1
-
SSDEEP
49152:IIdualPUxZwxV/7GHt2He74cdP2llZw77LQ0soNF2He74cdr27lZw77LQ0soNcIi:RblPUmHzc4wWHzcAwHblPU
Malware Config
Signatures
-
joker
Joker is an Android malware that targets billing and SMS fraud.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1088 b61bdc295133a491314f706c513aec2f2a88a0235c3483e2137903fb4ab9fc6f.exe