joker | 24309b2ba65b27c007918670dd4deb6e90ddc9e629303d8c92efc04f34e16c77 | Triage

Submit
Reports

Overview

overview

Static

static

8

24309b2ba6...77.exe

windows7-x64

24309b2ba6...77.exe

windows10-2004-x64

Sharing

General

Target

24309b2ba65b27c007918670dd4deb6e90ddc9e629303d8c92efc04f34e16c77
Size

5.3MB
Sample

221104-zflb6sahb4
MD5

7978902246a0c485295d89f408f37cfc
SHA1

ec0a15b66771f87066e4639d5139037fcd8a56d7
SHA256

24309b2ba65b27c007918670dd4deb6e90ddc9e629303d8c92efc04f34e16c77
SHA512

5db9379140c32458cd8e158e48e2dbdeb06cce7d83d7f21686f9c659ef6087c605250d6f45d2644d8bba2fec81b26dc4ca1265a19686a8c367a46536a4460fd1
SSDEEP

98304:ro/zlSaCeKvz1pIguaSvAiC949yFWoWcVR8kxtUbE34CgX1:rezrCTb1ugua7T0CpHmoY

Score

10^/10

joker infostealer trojan vmprotect

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

24309b2ba65b27c007918670dd4deb6e90ddc9e629303d8c92efc04f34e16c77.exe

Resource

win7-20220812-en

joker infostealer trojan vmprotect

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

24309b2ba65b27c007918670dd4deb6e90ddc9e629303d8c92efc04f34e16c77.exe

Resource

win10v2004-20220901-en

joker infostealer trojan vmprotect

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  24309b2ba65b27c007918670dd4deb6e90ddc9e629303d8c92efc04f34e16c77
- Size
  
  5.3MB
- MD5
  
  7978902246a0c485295d89f408f37cfc
- SHA1
  
  ec0a15b66771f87066e4639d5139037fcd8a56d7
- SHA256
  
  24309b2ba65b27c007918670dd4deb6e90ddc9e629303d8c92efc04f34e16c77
- SHA512
  
  5db9379140c32458cd8e158e48e2dbdeb06cce7d83d7f21686f9c659ef6087c605250d6f45d2644d8bba2fec81b26dc4ca1265a19686a8c367a46536a4460fd1
- SSDEEP
  
  98304:ro/zlSaCeKvz1pIguaSvAiC949yFWoWcVR8kxtUbE34CgX1:rezrCTb1ugua7T0CpHmoY
Score

10^/10

joker infostealer trojan vmprotect
- joker
  Joker is an Android malware that targets billing and SMS fraud.
  infostealer trojan joker
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

jokerinfostealertrojanvmprotect

behavioral2

jokerinfostealertrojanvmprotect

© 2018-2025

Terms | Privacy