General

  • Target

    Fast Text Scanner_1.0.0.apk

  • Size

    5.0MB

  • Sample

    221213-m8hershc2t

  • MD5

    335619ce5733155e5c978375de9b670b

  • SHA1

    e94a3a3792488e50afd774279e1b7b69a024fba6

  • SHA256

    e6efc3c44781a1f2c9e64ddf89cf63504651fa0fba7b386113d0d2651419654b

  • SHA512

    aad756892e12decdb18c3070c878b09307cee0b1a4baa3e72ae91c1a339cb07589ce501ab34a5165a6fc901b50f3ed3e427f8dd609d8655e7f90b8bea4fe9871

  • SSDEEP

    98304:mE3oFCGGsZW9l/Mqe2IeZ2Y6DLQoVg+5HxIAOoEYslGfrI3ZmZmq7:Lc1GsZonhZ2YmQAg+s3oEYzfkpmJ

Malware Config

Extracted

Family

joker

C2

https://cxjus.oss-ap-southeast-1.aliyuncs.com/af2

https://cxjus.oss-ap-southeast-1.aliyuncs.com/fbhx

Targets

    • Target

      Fast Text Scanner_1.0.0.apk

    • Size

      5.0MB

    • MD5

      335619ce5733155e5c978375de9b670b

    • SHA1

      e94a3a3792488e50afd774279e1b7b69a024fba6

    • SHA256

      e6efc3c44781a1f2c9e64ddf89cf63504651fa0fba7b386113d0d2651419654b

    • SHA512

      aad756892e12decdb18c3070c878b09307cee0b1a4baa3e72ae91c1a339cb07589ce501ab34a5165a6fc901b50f3ed3e427f8dd609d8655e7f90b8bea4fe9871

    • SSDEEP

      98304:mE3oFCGGsZW9l/Mqe2IeZ2Y6DLQoVg+5HxIAOoEYslGfrI3ZmZmq7:Lc1GsZonhZ2YmQAg+s3oEYzfkpmJ

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks