General
- Target com.mini.screen.tvcast-32-apksos.com.apk
- Size 6.5MB
- Sample230108-jvdymsda79
- SHA256 41298824cd00b282517c797830be2979ace038d26f39a4deab7fc2c4da716c4c
- MD5 69ddf2cd7d8c777c17eb22ca1a71e8fe
- SHA1 39d5e27bb52c066d54f97064c03f9f5c763862d1
- SHA512 122aaa1ae8b6a25cbd4533509f52a5f979394e8b640a7911b62ec50f372bbddecebaed2880d5cd1b084d303fb5b7157af9e13ec81c885b6ee1bfc02ab65fe88c
- SSDEEP 196608:UiZXA9cWASC9+NsPW5L9thc0Zo2cCo1hLvKgvqTHRNGy:UilM5d7NEW5L9thc0sWmy
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
com.mini.screen.tvcast-32-apksos.com.apk
Resource
android-x86-arm-20220823-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
com.mini.screen.tvcast-32-apksos.com.apk
Resource
android-x64-20220823-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
com.mini.screen.tvcast-32-apksos.com.apk
Resource
android-x64-arm64-20220823-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
joker
C2
-
http://packup.oss-us-east-1.aliyuncs.com/miniscreen
-
https://cxjus.oss-ap-southeast-1.aliyuncs.com/af2
-
https://cxjus.oss-ap-southeast-1.aliyuncs.com/fbhx
Targets
-
- Target com.mini.screen.tvcast-32-apksos.com.apk
- Size 6.5MB
- SHA256 41298824cd00b282517c797830be2979ace038d26f39a4deab7fc2c4da716c4c
- MD5 69ddf2cd7d8c777c17eb22ca1a71e8fe
- SHA1 39d5e27bb52c066d54f97064c03f9f5c763862d1
- SHA512 122aaa1ae8b6a25cbd4533509f52a5f979394e8b640a7911b62ec50f372bbddecebaed2880d5cd1b084d303fb5b7157af9e13ec81c885b6ee1bfc02ab65fe88c
- SSDEEP 196608:UiZXA9cWASC9+NsPW5L9thc0Zo2cCo1hLvKgvqTHRNGy:UilM5d7NEW5L9thc0sWmy
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Legitimate hosting services abused for malware hosting/C2
-
Reads information about phone network operator.
-
Removes a system notification.
-
Uses Crypto APIs (Might try to encrypt user data).