Overview

overview

10

Static

static

119968377c...dd.exe

windows7-x64

5

119968377c...dd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    119968377cd04f8b469a577f87bc71da7f3e734aab86a5067dafe6d84e49d1dd

  • Size

    1.2MB

  • Sample

    221021-frcpmadaem

  • MD5

    5f666bd3759c70d9e6ab59cad547dca1

  • SHA1

    85c22c89aaff94dba3f4ae24ccb47c6a148750d6

  • SHA256

    119968377cd04f8b469a577f87bc71da7f3e734aab86a5067dafe6d84e49d1dd

  • SHA512

    f496124b29a9a58cb1fb90910cd1ea0eacb3dcaabdd7a4da1b20e9778fe67e115d51f9895a6ec7b865d41075ba96a2d0c7b21c72624d2826a40d517acbc41f51

  • SSDEEP

    24576:W84Fb6PHUotlxRz0rs2u62W5su0S7sBpbum:W/6PHpMA2u6L0S7sBpKm

Score
10/10
jokerinfostealerpersistencetrojan

Malware Config

Targets

    • Target

      119968377cd04f8b469a577f87bc71da7f3e734aab86a5067dafe6d84e49d1dd

    • Size

      1.2MB

    • MD5

      5f666bd3759c70d9e6ab59cad547dca1

    • SHA1

      85c22c89aaff94dba3f4ae24ccb47c6a148750d6

    • SHA256

      119968377cd04f8b469a577f87bc71da7f3e734aab86a5067dafe6d84e49d1dd

    • SHA512

      f496124b29a9a58cb1fb90910cd1ea0eacb3dcaabdd7a4da1b20e9778fe67e115d51f9895a6ec7b865d41075ba96a2d0c7b21c72624d2826a40d517acbc41f51

    • SSDEEP

      24576:W84Fb6PHUotlxRz0rs2u62W5su0S7sBpbum:W/6PHpMA2u6L0S7sBpKm

    Score
    10/10
    jokerinfostealerpersistencetrojan

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

      infostealertrojanjoker

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks