General

  • Target

    891693e5109fedf8fa7b58e4dab3b13887a54afe60aaf10356ad73da5f486bcd

  • Size

    1.2MB

  • Sample

    221014-ffbm7agha4

  • MD5

    612e646b51561df3a3f7b52e513ad5d6

  • SHA1

    d8de003cf8a3b4f5e85bcebae108a3589fb458bd

  • SHA256

    891693e5109fedf8fa7b58e4dab3b13887a54afe60aaf10356ad73da5f486bcd

  • SHA512

    80d9bcf04407666dbb503ac71b40f51cdbceb406982e94e0fa97d0adbd244c36e9c765b62065db2c32a02c32a495132e43fcdd5627b6195a78973c8bd87b3f0b

  • SSDEEP

    24576:n84Fb6PHUotlxRz0rs2U62W5su0S7sBpbum:n/6PHpMA2U6L0S7sBpKm

Malware Config

Targets

    • Target

      891693e5109fedf8fa7b58e4dab3b13887a54afe60aaf10356ad73da5f486bcd

    • Size

      1.2MB

    • MD5

      612e646b51561df3a3f7b52e513ad5d6

    • SHA1

      d8de003cf8a3b4f5e85bcebae108a3589fb458bd

    • SHA256

      891693e5109fedf8fa7b58e4dab3b13887a54afe60aaf10356ad73da5f486bcd

    • SHA512

      80d9bcf04407666dbb503ac71b40f51cdbceb406982e94e0fa97d0adbd244c36e9c765b62065db2c32a02c32a495132e43fcdd5627b6195a78973c8bd87b3f0b

    • SSDEEP

      24576:n84Fb6PHUotlxRz0rs2U62W5su0S7sBpbum:n/6PHpMA2U6L0S7sBpKm

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks