Overview

overview

10

Static

static

5566d02e2d...3a.exe

windows7-x64

5

5566d02e2d...3a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5566d02e2d12620eae12646f88b90e6e496ece50a8dabb97abfce4ef9b79b13a

  • Size

    308KB

  • Sample

    221107-yj2mwsehe7

  • MD5

    02de132e50973a1217dffc0f67fcd865

  • SHA1

    a61ca76ef1d61e18d23245ebd72059ac8b2b6bac

  • SHA256

    5566d02e2d12620eae12646f88b90e6e496ece50a8dabb97abfce4ef9b79b13a

  • SHA512

    b57d4241dc71ee7d9f75b435a9525fb0734b85e6ac257067fb706315f02e94ffa3f5c1734faeacba66bad115764a4270e55439e0af983f3ce84df4f916bb3205

  • SSDEEP

    6144:n9Ufckd8VjhiAn4ORc4zCvVRsUz2olv+YXaht8+ajFfP2F/kg/xzetmh/:9NkQuvdRsUaolfaht8+UdRgJumd

Score
10/10
jokerinfostealerpersistencetrojan

Malware Config

Targets

    • Target

      5566d02e2d12620eae12646f88b90e6e496ece50a8dabb97abfce4ef9b79b13a

    • Size

      308KB

    • MD5

      02de132e50973a1217dffc0f67fcd865

    • SHA1

      a61ca76ef1d61e18d23245ebd72059ac8b2b6bac

    • SHA256

      5566d02e2d12620eae12646f88b90e6e496ece50a8dabb97abfce4ef9b79b13a

    • SHA512

      b57d4241dc71ee7d9f75b435a9525fb0734b85e6ac257067fb706315f02e94ffa3f5c1734faeacba66bad115764a4270e55439e0af983f3ce84df4f916bb3205

    • SSDEEP

      6144:n9Ufckd8VjhiAn4ORc4zCvVRsUz2olv+YXaht8+ajFfP2F/kg/xzetmh/:9NkQuvdRsUaolfaht8+UdRgJumd

    Score
    10/10
    jokerinfostealerpersistencetrojan

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

      infostealertrojanjoker

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks