Overview

overview

10

Static

static

0cd45dcef3...93.exe

windows7-x64

1

0cd45dcef3...93.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0cd45dcef3b7b933e14fd7a744e415be73e7d804bdab8ee60c1e75f1b6bf8b93

  • Size

    160KB

  • Sample

    221028-v1l2zsgce4

  • MD5

    0b0fa1a26080d49ed0325f117b37c484

  • SHA1

    9273569901579e712472ca2596a1164456f6421c

  • SHA256

    0cd45dcef3b7b933e14fd7a744e415be73e7d804bdab8ee60c1e75f1b6bf8b93

  • SHA512

    ab10261f9e224739b3a3afc4cf56f5a672f54417ec6aea419bb27197fdcf60c20ae6359482fdb46774928ba9bf21cc6cae90bcaa4a44ac20e2f8086e3f5c887d

  • SSDEEP

    1536:g7+KBWXmvsoqT1hkIec05XRsFdHzxIb8LfV7AoFCjYDrvV2wePDlNOkg+H:wNWXmfc1hwhsPZLdIweuu

Score
10/10
jokerevasioninfostealerpersistencetrojan

Malware Config

Targets

    • Target

      0cd45dcef3b7b933e14fd7a744e415be73e7d804bdab8ee60c1e75f1b6bf8b93

    • Size

      160KB

    • MD5

      0b0fa1a26080d49ed0325f117b37c484

    • SHA1

      9273569901579e712472ca2596a1164456f6421c

    • SHA256

      0cd45dcef3b7b933e14fd7a744e415be73e7d804bdab8ee60c1e75f1b6bf8b93

    • SHA512

      ab10261f9e224739b3a3afc4cf56f5a672f54417ec6aea419bb27197fdcf60c20ae6359482fdb46774928ba9bf21cc6cae90bcaa4a44ac20e2f8086e3f5c887d

    • SSDEEP

      1536:g7+KBWXmvsoqT1hkIec05XRsFdHzxIb8LfV7AoFCjYDrvV2wePDlNOkg+H:wNWXmfc1hwhsPZLdIweuu

    Score
    10/10
    jokerevasioninfostealerpersistencetrojan

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

      infostealertrojanjoker

    • Executes dropped EXE

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks