General

  • Target

    240b8caa66100e6055321b904b19fe9eb7ff2d9dc84732f886d0a8ce06e25827

  • Size

    1.2MB

  • Sample

    221014-fe9tlagggm

  • MD5

    7b159c899ab5c3fdeb2a0a0aebfe280b

  • SHA1

    b80f784e5e7b0f8d44e63a01f0221b429fc5afdc

  • SHA256

    240b8caa66100e6055321b904b19fe9eb7ff2d9dc84732f886d0a8ce06e25827

  • SHA512

    659c3c3d2859086bd901978f7ab8381eff312f161c41634b07b0c80fde395920a7142a81e26756c927f70bfd5d6cf4c7ae6df0e2bb7e297a7dc5206fefa3dba9

  • SSDEEP

    12288:/z7PzGXyhTE3xn8QLHxqr7pCDRFLP7uNrGuXyA9GSEXFBckIR:/z7bGXyh6xntLRqvpCTLP7s7RQlcNR

Malware Config

Targets

    • Target

      240b8caa66100e6055321b904b19fe9eb7ff2d9dc84732f886d0a8ce06e25827

    • Size

      1.2MB

    • MD5

      7b159c899ab5c3fdeb2a0a0aebfe280b

    • SHA1

      b80f784e5e7b0f8d44e63a01f0221b429fc5afdc

    • SHA256

      240b8caa66100e6055321b904b19fe9eb7ff2d9dc84732f886d0a8ce06e25827

    • SHA512

      659c3c3d2859086bd901978f7ab8381eff312f161c41634b07b0c80fde395920a7142a81e26756c927f70bfd5d6cf4c7ae6df0e2bb7e297a7dc5206fefa3dba9

    • SSDEEP

      12288:/z7PzGXyhTE3xn8QLHxqr7pCDRFLP7uNrGuXyA9GSEXFBckIR:/z7bGXyh6xntLRqvpCTLP7s7RQlcNR

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks