General

  • Target

    b43e2d18e524d7eef5e89f5c40b9f3f5c13785d860f4c4aad0df025a18363d01

  • Size

    54KB

  • Sample

    221031-a8hpbahbb3

  • MD5

    a0bbbea98ddbea59cbb3b8e7c33dcb3e

  • SHA1

    93c0b5eaf9856cd098b7fd31682af944ea014948

  • SHA256

    b43e2d18e524d7eef5e89f5c40b9f3f5c13785d860f4c4aad0df025a18363d01

  • SHA512

    46ea5856374f70d81097a02cedf8667e12a62d311bc98292f11ed997ddde546f80aac4e93a151e1705490572c2894149c1a6efaf8808cfd86f203ba27174a766

  • SSDEEP

    1536:BLiSTK2DKfhw/kmBjMEWt1gKWSgfcmjxWNGl:BLiST9D2CMmBoE+gKOfnjJl

Malware Config

Targets

    • Target

      b43e2d18e524d7eef5e89f5c40b9f3f5c13785d860f4c4aad0df025a18363d01

    • Size

      54KB

    • MD5

      a0bbbea98ddbea59cbb3b8e7c33dcb3e

    • SHA1

      93c0b5eaf9856cd098b7fd31682af944ea014948

    • SHA256

      b43e2d18e524d7eef5e89f5c40b9f3f5c13785d860f4c4aad0df025a18363d01

    • SHA512

      46ea5856374f70d81097a02cedf8667e12a62d311bc98292f11ed997ddde546f80aac4e93a151e1705490572c2894149c1a6efaf8808cfd86f203ba27174a766

    • SSDEEP

      1536:BLiSTK2DKfhw/kmBjMEWt1gKWSgfcmjxWNGl:BLiST9D2CMmBoE+gKOfnjJl

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

    • Executes dropped EXE

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks