General

  • Target

    Smile Love Emoji_1.0.0.2.apk

  • Size

    12.4MB

  • Sample

    221107-szb5aaead5

  • MD5

    24bdec2923aa4153f6070df70a91066e

  • SHA1

    28b94479dfd3b7928872077bc967fe9a03b1d149

  • SHA256

    0a3d111b0f95702b6e8742ac551d566ba6046eff5faf7f56bcd01296bcd7bfce

  • SHA512

    431df1e1b86386d060df7d64322ccb642eba2e76be6585bda9b663d7e61d1fcd9921ee1c400ea9f45a6722e295c10a6918a6a585386d434465e139e02a8a0fc9

  • SSDEEP

    393216:wU4re7CtqmoocNKJlIE26mJt4wBjWyODyt:wU4re7CtqmoTNWIdODy

Malware Config

Extracted

Family

joker

C2

http://haziness.oss-ap-southeast-1.aliyuncs.com

http://cxjus.oss-ap-southeast-1.aliyuncs.com

Targets

    • Target

      Smile Love Emoji_1.0.0.2.apk

    • Size

      12.4MB

    • MD5

      24bdec2923aa4153f6070df70a91066e

    • SHA1

      28b94479dfd3b7928872077bc967fe9a03b1d149

    • SHA256

      0a3d111b0f95702b6e8742ac551d566ba6046eff5faf7f56bcd01296bcd7bfce

    • SHA512

      431df1e1b86386d060df7d64322ccb642eba2e76be6585bda9b663d7e61d1fcd9921ee1c400ea9f45a6722e295c10a6918a6a585386d434465e139e02a8a0fc9

    • SSDEEP

      393216:wU4re7CtqmoocNKJlIE26mJt4wBjWyODyt:wU4re7CtqmoTNWIdODy

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks