Overview

overview

10

Static

static

2a14432b48...fd.exe

windows7-x64

8

2a14432b48...fd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a14432b488f09a0b63015ddafe085bb719c6f4e58aff625ab395f40d776abfd

  • Size

    74KB

  • Sample

    221020-vft7vsedg2

  • MD5

    90059977d4612ce89ce2d55d3318b10b

  • SHA1

    359c49c294aed1a9f1993f76418c63147bf78cc8

  • SHA256

    2a14432b488f09a0b63015ddafe085bb719c6f4e58aff625ab395f40d776abfd

  • SHA512

    e87fdfa94e5ad3de6e0f66c7096aeb220a2a37195542454cab1784e2c9e057f7f549d24b03c5cfdc2fe0e8c3452687958ed2d47edaeb853cc42989304d6ae2b2

  • SSDEEP

    1536:HJb7bstbnXgXSJJnxSWdXiF0x6KIiuLPjVtFi2eUNGPrbg0sc:tObnISJtx7yBiUWlsc

Score
10/10
jokerevasioninfostealerpersistencetrojan

Malware Config

Targets

    • Target

      2a14432b488f09a0b63015ddafe085bb719c6f4e58aff625ab395f40d776abfd

    • Size

      74KB

    • MD5

      90059977d4612ce89ce2d55d3318b10b

    • SHA1

      359c49c294aed1a9f1993f76418c63147bf78cc8

    • SHA256

      2a14432b488f09a0b63015ddafe085bb719c6f4e58aff625ab395f40d776abfd

    • SHA512

      e87fdfa94e5ad3de6e0f66c7096aeb220a2a37195542454cab1784e2c9e057f7f549d24b03c5cfdc2fe0e8c3452687958ed2d47edaeb853cc42989304d6ae2b2

    • SSDEEP

      1536:HJb7bstbnXgXSJJnxSWdXiF0x6KIiuLPjVtFi2eUNGPrbg0sc:tObnISJtx7yBiUWlsc

    Score
    10/10
    evasionjokerinfostealerpersistencetrojan

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

      infostealertrojanjoker

    • Executes dropped EXE

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks