joker | aacf3d4a52d20f71a8f5a78505145d24fe378b23aa2008fb0197557ca28a1ac7 | Triage

Submit
Reports

Overview

overview

Static

static

aacf3d4a52...c7.exe

windows7-x64

aacf3d4a52...c7.exe

windows10-2004-x64

Sharing

General

Target

aacf3d4a52d20f71a8f5a78505145d24fe378b23aa2008fb0197557ca28a1ac7
Size

678KB
Sample

221021-hrdyssgfa3
MD5

459a7c65a7356c462d338762a9a9a310
SHA1

50d6a90197394e589ced3008fe2c65abc13635b2
SHA256

aacf3d4a52d20f71a8f5a78505145d24fe378b23aa2008fb0197557ca28a1ac7
SHA512

2c4054de1a040c4cb3150880e1804870973bf0e6edcecb3ef513ab76dbf69cf6051dabe67b4811f4ee91a9059170e69c8245f67cacc1d0f1ea3eae089109e82e
SSDEEP

12288:0eOtTM7xyL7Irnc9UtTsDvMLafJCqRLQn3PRvX+PghHMpH6KR5M:MtTsxSMX8MOfJCqJW/IEsI

Score

10^/10

joker infostealer trojan upx

Static task

static1

Behavioral task

behavioral1

Sample

aacf3d4a52d20f71a8f5a78505145d24fe378b23aa2008fb0197557ca28a1ac7.exe

Resource

win7-20220812-en

joker infostealer trojan upx

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

aacf3d4a52d20f71a8f5a78505145d24fe378b23aa2008fb0197557ca28a1ac7.exe

Resource

win10v2004-20220812-en

joker infostealer trojan upx

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  aacf3d4a52d20f71a8f5a78505145d24fe378b23aa2008fb0197557ca28a1ac7
- Size
  
  678KB
- MD5
  
  459a7c65a7356c462d338762a9a9a310
- SHA1
  
  50d6a90197394e589ced3008fe2c65abc13635b2
- SHA256
  
  aacf3d4a52d20f71a8f5a78505145d24fe378b23aa2008fb0197557ca28a1ac7
- SHA512
  
  2c4054de1a040c4cb3150880e1804870973bf0e6edcecb3ef513ab76dbf69cf6051dabe67b4811f4ee91a9059170e69c8245f67cacc1d0f1ea3eae089109e82e
- SSDEEP
  
  12288:0eOtTM7xyL7Irnc9UtTsDvMLafJCqRLQn3PRvX+PghHMpH6KR5M:MtTsxSMX8MOfJCqJW/IEsI
Score

10^/10

joker infostealer trojan upx
- joker
  Joker is an Android malware that targets billing and SMS fraud.
  infostealer trojan joker
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

jokerinfostealertrojanupx

behavioral2

jokerinfostealertrojanupx

© 2018-2025

Terms | Privacy