Analysis
-
max time kernel
104s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
04-11-2022 03:12
Static task
static1
Behavioral task
behavioral1
Sample
269b34432ab930125dc9987b96efd2a058701e20a42781019f3244d03754d59a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
269b34432ab930125dc9987b96efd2a058701e20a42781019f3244d03754d59a.exe
Resource
win10v2004-20220901-en
General
-
Target
269b34432ab930125dc9987b96efd2a058701e20a42781019f3244d03754d59a.exe
-
Size
5.3MB
-
MD5
19c8e1f70d5885f428792fa834ce1a0c
-
SHA1
3bd02dc0506965cc88003d0a2c52a4bbf05bca63
-
SHA256
269b34432ab930125dc9987b96efd2a058701e20a42781019f3244d03754d59a
-
SHA512
778aa08de39e89d35dd07b5e5130f297ddbebb207feb5bfb05fe51df51cfe48221c1a3dad02225a996b9b47eb3a0cf8d360ee483de8d62e23e1679b7e3447996
-
SSDEEP
49152:riBIdualPUxZwxV/7GHt2He74cdP2llZw77LQ0soNf2He74cdr27lZw77LQ0soNa:nblPUmHzc4wcHzcAwHblPU
Malware Config
Signatures
-
joker
Joker is an Android malware that targets billing and SMS fraud.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3544 269b34432ab930125dc9987b96efd2a058701e20a42781019f3244d03754d59a.exe