Overview

overview

10

Static

static

4f83c86f95...69.exe

windows7-x64

10

4f83c86f95...69.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f83c86f9521612aa230bb87e59006d4899512cd2eaae38be8b94a90f6fc6869

  • Size

    59KB

  • Sample

    221029-y6vsvsdfh2

  • MD5

    845269075993ee0aaf6974dc9bd7db18

  • SHA1

    1458b641bcb480d18175d12b851fef19445e443c

  • SHA256

    4f83c86f9521612aa230bb87e59006d4899512cd2eaae38be8b94a90f6fc6869

  • SHA512

    ce714f56593cef5011ab08cd9ba2ab3704b3b9c8faf1672a21b0815eec25efe1431497fe76bdfe97bccb2e215e517998a0f1cab3a4283046a559cb07f70a158e

  • SSDEEP

    1536:/UAjSLwWvAdgnMYd3SjdhayznOxkXrHgZpb+Pr7t5UnYru:/HjSvGsfipMtxmHgZpCUneu

Score
10/10
jokerevasioninfostealerpersistencetrojan

Malware Config

Targets

    • Target

      4f83c86f9521612aa230bb87e59006d4899512cd2eaae38be8b94a90f6fc6869

    • Size

      59KB

    • MD5

      845269075993ee0aaf6974dc9bd7db18

    • SHA1

      1458b641bcb480d18175d12b851fef19445e443c

    • SHA256

      4f83c86f9521612aa230bb87e59006d4899512cd2eaae38be8b94a90f6fc6869

    • SHA512

      ce714f56593cef5011ab08cd9ba2ab3704b3b9c8faf1672a21b0815eec25efe1431497fe76bdfe97bccb2e215e517998a0f1cab3a4283046a559cb07f70a158e

    • SSDEEP

      1536:/UAjSLwWvAdgnMYd3SjdhayznOxkXrHgZpb+Pr7t5UnYru:/HjSvGsfipMtxmHgZpCUneu

    Score
    10/10
    jokerevasioninfostealerpersistencetrojan

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

      infostealertrojanjoker

    • Executes dropped EXE

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks