General

  • Target

    Provide Emoji Keyboard_5.8.0.apk

  • Size

    49.9MB

  • Sample

    221104-ttqk6aggc4

  • MD5

    be93f9d3e4d424fbc63f2eafd1f4fee9

  • SHA1

    7d5c3e56027f2847da1cf3fe65445b2335305051

  • SHA256

    e9f2ae993259b79ce37e5c502ee817f28c737325c9542ebc88281a1709d901ed

  • SHA512

    b979e4f84e4d4727bfb3359aecfc032f5450337bb5ea956b7d891cc24bb9c6a2dad9fae1b5bc0fb4645fdd6231c2d89789a18c811083c31a60a4e764eb797d90

  • SSDEEP

    786432:v6dvAaVXzi/Y3v5+MYoIZ/YkOy0l+x+EoiuEVzHiXv1z:iRNs85+MYoQwkO9U0EoiVHiXdz

Malware Config

Targets

    • Target

      Provide Emoji Keyboard_5.8.0.apk

    • Size

      49.9MB

    • MD5

      be93f9d3e4d424fbc63f2eafd1f4fee9

    • SHA1

      7d5c3e56027f2847da1cf3fe65445b2335305051

    • SHA256

      e9f2ae993259b79ce37e5c502ee817f28c737325c9542ebc88281a1709d901ed

    • SHA512

      b979e4f84e4d4727bfb3359aecfc032f5450337bb5ea956b7d891cc24bb9c6a2dad9fae1b5bc0fb4645fdd6231c2d89789a18c811083c31a60a4e764eb797d90

    • SSDEEP

      786432:v6dvAaVXzi/Y3v5+MYoIZ/YkOy0l+x+EoiuEVzHiXv1z:iRNs85+MYoQwkO9U0EoiVHiXdz

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Removes a system notification.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks