General

  • Target

    Secret Messenger_2.10.1.apk

  • Size

    9.8MB

  • Sample

    221028-smp6dafhd2

  • MD5

    08fbd11bd313f3230888d9bf6ba419e4

  • SHA1

    71c99e0acc45d8d5a972a49fdb4ed189e6d9ddc6

  • SHA256

    6b41ef8c7d958233a3a31f8535f453c7fb8db4ff76933989b46e73a653ec940c

  • SHA512

    25377838c4cec9369397dfb27f8cf423ebf89644a954b94a4919a886ac2a396b4661451617a5998bd61010b2c9f8724c2ffae96ac2d434d8a07f378f99d5d3f3

  • SSDEEP

    196608:3BvZ4WSEc3bDvizTG5PYibx2l4fcQ9r6Otkj6Urc3c1:RvZ4WMDvizTGdYG6kcbjhc3E

Malware Config

Extracted

Family

joker

C2

https://cxjus.oss-accelerate.aliyuncs.com

Targets

    • Target

      Secret Messenger_2.10.1.apk

    • Size

      9.8MB

    • MD5

      08fbd11bd313f3230888d9bf6ba419e4

    • SHA1

      71c99e0acc45d8d5a972a49fdb4ed189e6d9ddc6

    • SHA256

      6b41ef8c7d958233a3a31f8535f453c7fb8db4ff76933989b46e73a653ec940c

    • SHA512

      25377838c4cec9369397dfb27f8cf423ebf89644a954b94a4919a886ac2a396b4661451617a5998bd61010b2c9f8724c2ffae96ac2d434d8a07f378f99d5d3f3

    • SSDEEP

      196608:3BvZ4WSEc3bDvizTG5PYibx2l4fcQ9r6Otkj6Urc3c1:RvZ4WMDvizTGdYG6kcbjhc3E

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks