Overview

overview

10

Static

static

7

Document P...er.apk

android-9-x86

10

Document P...er.apk

android-10-x64

6

Document P...er.apk

android-11-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Document PDF Scanner.apk

  • Size

    8.5MB

  • Sample

    221213-kpavgaec89

  • MD5

    d369bbc5d7cb8dfcc987e0ea5547a50e

  • SHA1

    511eddc66847446dc992fd081419c653cc3249b5

  • SHA256

    ff8c2bcbe5beafcaf4aca4b1078d755e26e584b9e8cf5473a021b06dab84d48a

  • SHA512

    7d00500009d254ed5369826383660584f275d64d9a88f24bf4fd97e03f54ec4f21dd46ede815edf37448981a26c80a2d117669746fcf9c0ac61d413474f37b07

  • SSDEEP

    196608:9+GCjxVA0s8tWLJiV8dlKJTcnMAdRPWncI:4ZkXdwJTCF0z

Score
10/10
jokerandroidevasioninfostealertrojan

Malware Config

Extracted

Family

joker

C2

http://sightly.oss-ap-northeast-1.aliyuncs.com/either

Grant permission to use all features

https://cxjus.oss-ap-southeast-1.aliyuncs.com/af2

https://cxjus.oss-ap-southeast-1.aliyuncs.com/fbhx

Targets

    • Target

      Document PDF Scanner.apk

    • Size

      8.5MB

    • MD5

      d369bbc5d7cb8dfcc987e0ea5547a50e

    • SHA1

      511eddc66847446dc992fd081419c653cc3249b5

    • SHA256

      ff8c2bcbe5beafcaf4aca4b1078d755e26e584b9e8cf5473a021b06dab84d48a

    • SHA512

      7d00500009d254ed5369826383660584f275d64d9a88f24bf4fd97e03f54ec4f21dd46ede815edf37448981a26c80a2d117669746fcf9c0ac61d413474f37b07

    • SSDEEP

      196608:9+GCjxVA0s8tWLJiV8dlKJTcnMAdRPWncI:4ZkXdwJTCF0z

    Score
    10/10
    jokerevasioninfostealertrojan

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

      infostealertrojanjoker

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Legitimate hosting services abused for malware hosting/C2

    • Reads information about phone network operator.

    • Removes a system notification.

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v6

Tasks