General

  • Target

    Amazement Messenger_14.123.2.apk

  • Size

    11.1MB

  • Sample

    221110-srpqeaagh9

  • MD5

    670ccbaf27adbec5d547c31908cb7f4b

  • SHA1

    d0e7c3a1bf5cbbf4d03b998a938aa9fc1740141e

  • SHA256

    60622a1413fa581b0b89103c3103a3ff7ef4a83f6b6e561aab2cf7e1f88842f0

  • SHA512

    4e9159ee69793b3ff72caf35950c1daac5b0de79d66f2f5d2e8f92cb12d975d5464a930bb240c61989a92159b74a142f8dd12a5c5ede570d64c113aae9e8c7a8

  • SSDEEP

    196608:rlJbMW6gJcV5lD1VYULiVobKbVUenKvLVo1rVH2dOk9+iCL+rbGau:rlJ1tmVP0aiVemVUenK4H2hCafK

Malware Config

Extracted

Family

joker

C2

http://imperceptibly.oss-eu-central-1.aliyuncs.com

Targets

    • Target

      Amazement Messenger_14.123.2.apk

    • Size

      11.1MB

    • MD5

      670ccbaf27adbec5d547c31908cb7f4b

    • SHA1

      d0e7c3a1bf5cbbf4d03b998a938aa9fc1740141e

    • SHA256

      60622a1413fa581b0b89103c3103a3ff7ef4a83f6b6e561aab2cf7e1f88842f0

    • SHA512

      4e9159ee69793b3ff72caf35950c1daac5b0de79d66f2f5d2e8f92cb12d975d5464a930bb240c61989a92159b74a142f8dd12a5c5ede570d64c113aae9e8c7a8

    • SSDEEP

      196608:rlJbMW6gJcV5lD1VYULiVobKbVUenKvLVo1rVH2dOk9+iCL+rbGau:rlJ1tmVP0aiVemVUenK4H2hCafK

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks