Overview

overview

10

Static

static

7

Effect Voi....2.apk

android-10-x64

Effect Voi....2.apk

android-11-x64

10

Effect Voi....2.apk

android-9-x86

10

Analysis

  • max time kernel
    2535622s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    09/01/2023, 15:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Effect Voice Changer_30.12.2.apk
  • Size 26.5MB
  • Sample230109-sr3x2aef74
  • SHA256 4b3a1ead0e69cfede004b0fdc25e3bb4c8ebb0481671a97844311526f47e21b7
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
jokerinfostealertrojan

Malware Config

Extracted

Family

  • joker

C2

  • https://adcbk.oss-eu-central-1.aliyuncs.com/af2

  • https://adcbk.oss-eu-central-1.aliyuncs.com/fbhx

Signatures

  • joker

    Joker is an Android malware that targets billing and SMS fraud.

    infostealertrojanjoker
  • Loads dropped Dex/Jar 5 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.changevoice.voice.effect.sounds
    1⤵
    • Loads dropped Dex/Jar
    PID:4457

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        [email protected]
        • Path /data/user/0/com.changevoice.voice.effect.sounds/[email protected]
        • Size 3.0MB
        • SHA256 bee390afa2267bc48829ee7a0f4286895bf32ba2443ff447451f515818f7203b
        • MD5 SHA1 SHA512 SSDEEP
        Download

        Web Data
        • Path /data/user/0/com.changevoice.voice.effect.sounds/app_webview/Default/Web Data
        • Size 120KB
        • SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Web Data-journal
        • Path /data/user/0/com.changevoice.voice.effect.sounds/app_webview/Default/Web Data-journal
        • Size 2KB
        • SHA256 07c52c3e36ee9daa4358568fe5c3a0f789ab78ba14254bab367379f33068180f
        • MD5 SHA1 SHA512
        Submit Download

        webview_data.lock
        • Path /data/user/0/com.changevoice.voice.effect.sounds/app_webview/webview_data.lock
        • Size 41B
        • SHA256 fe140d05b0e65b83786dc519be946939073bd60999db8b9d266f74895ec63acd
        • MD5 SHA1 SHA512
        Submit Download

        settings.dat
        • Path /data/user/0/com.changevoice.voice.effect.sounds/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 55ffc408532cd6f2bbc7e9c62d76d741b629e48a1eae8079dda2a2029e41ff7c
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.changevoice.voice.effect.sounds/cache/WebView/Default/HTTP Cache/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.changevoice.voice.effect.sounds/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 e409bbeaebe91d821b6bece9e1a82b7908c10c2dfa43ba6bad68e1817f6f1126
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.changevoice.voice.effect.sounds/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.changevoice.voice.effect.sounds/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
        • Size 96B
        • SHA256 ebb997de83068fd9bf6bd40c58ca4d5e4f6c4710b16e94f5274b3dfa0cd68a5b
        • MD5 SHA1 SHA512
        Submit Download

        font_unique_name_table.pb
        • Path /data/user/0/com.changevoice.voice.effect.sounds/cache/WebView/font_unique_name_table.pb
        • Size 57KB
        • SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events
        • Path /data/user/0/com.changevoice.voice.effect.sounds/databases/com.google.android.datatransport.events
        • Size 144KB
        • SHA256 29caa2cf9814bbeddd6b6c3b6abc158fcdc91c8cfb319404fc100fbda13a234d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.changevoice.voice.effect.sounds/databases/com.google.android.datatransport.events-journal
        • Size 1KB
        • SHA256 9a147a1eb0861a8ad1029ce188e9ab2a46b7fadf866c78862fad0a7a77bf3590
        • MD5 SHA1 SHA512
        Submit Download

        effectaudio-db
        • Path /data/user/0/com.changevoice.voice.effect.sounds/databases/effectaudio-db
        • Size 72KB
        • SHA256 e098f18e10ae377ee4736d3abb9120ab47198db9f898d6faf299082e5471ec98
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        effectaudio-db-journal
        • Path /data/user/0/com.changevoice.voice.effect.sounds/databases/effectaudio-db-journal
        • Size 1KB
        • SHA256 e66c632ec59da6c231a24ba35f718731bdffa844cee5e5234d961ec15987416b
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.changevoice.voice.effect.sounds/databases/google_app_measurement_local.db
        • Size 88KB
        • SHA256 a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.changevoice.voice.effect.sounds/databases/google_app_measurement_local.db-journal
        • Size 1KB
        • SHA256 fbc28e5efd2cdb48512925960c7ac0dbb5f9f2f182e5ec0b8328612092b8283b
        • MD5 SHA1 SHA512
        Submit Download

        com.crashlytics.settings.json
        • Path /data/user/0/com.changevoice.voice.effect.sounds/files/.com.google.firebase.crashlytics.files.v2:com.changevoice.voice.effect.sounds/com.crashlytics.settings.json
        • Size 746B
        • SHA256 adcbe42dd19daa47a14f99d6fd5e24abfbd50f1ae7968b8f38e8aa0c624f7831
        • MD5 SHA1 SHA512
        Submit Download

        report
        • Path /data/user/0/com.changevoice.voice.effect.sounds/files/.com.google.firebase.crashlytics.files.v2:com.changevoice.voice.effect.sounds/open-sessions/63BC31660224000111693AAE7604D527/report
        • Size 764B
        • SHA256 5ff8e2ed769912ad223c8b990f3d2c7f451990b20798db7b9d2ebb2325a95756
        • MD5 SHA1 SHA512
        Submit Download

        userlog.tmp
        • Path /data/user/0/com.changevoice.voice.effect.sounds/files/.com.google.firebase.crashlytics.files.v2:com.changevoice.voice.effect.sounds/open-sessions/63BC31660224000111693AAE7604D527/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        persistent_postback_cache.json
        • Path /data/user/0/com.changevoice.voice.effect.sounds/files/al/persistent_postback_cache.json
        • Size 9B
        • SHA256 4e89c765f879a6052bf02aaed88823281bbeaf0e713f91faecc643d6d31326db
        • MD5 SHA1 SHA512
        Submit Download

        frc_1:556893689946:android:badba1a06c0b45dfc86063_firebase_defaults.json
        • Path /data/user/0/com.changevoice.voice.effect.sounds/files/frc_1:556893689946:android:badba1a06c0b45dfc86063_firebase_defaults.json
        • Size 504B
        • SHA256 4a0d74c4833cfdba179a3d32d0c40c657ec50a10ee4622803db2cf144e5c4953
        • MD5 SHA1 SHA512
        Submit Download

        ionsxg
        • Path /data/user/0/com.changevoice.voice.effect.sounds/files/ionsxg
        • Size 22KB
        • SHA256 263562079f6d86c5888171586229d2f1440e9f576f0b159bff25dc44df4b54f7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ionsxg
        • Path /data/user/0/com.changevoice.voice.effect.sounds/files/ionsxg
        • Size 46KB
        • SHA256 5f26a6eb8f372e1658a373a980ee4e2770beee4a15b4d103753635bd33b6a085
        • MD5 SHA1 SHA512 SSDEEP
        Download

        playground
        • Path /data/user/0/com.changevoice.voice.effect.sounds/files/playground
        • Size 8KB
        • SHA256 83e83474d4ed32c66cc128a1160acab8e0aba1c9868d48ed498abad73648dfd7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        playground
        • Path /data/user/0/com.changevoice.voice.effect.sounds/files/playground
        • Size 14KB
        • SHA256 85e41bb865eac61e16e45d61a12834a126d428b6d53480be8d7b1abdeebe9212
        • MD5 SHA1 SHA512 SSDEEP
        Download

        androidx.work.workdb
        • Path /data/user/0/com.changevoice.voice.effect.sounds/no_backup/androidx.work.workdb
        • Size 8KB
        • SHA256 4b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-journal
        • Path /data/user/0/com.changevoice.voice.effect.sounds/no_backup/androidx.work.workdb-journal
        • Size 1KB
        • SHA256 ac1bc1a28124a8963b2775e418ac7fbb7b6ef9fd42d0101a531a592ebc946818
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/user/0/com.changevoice.voice.effect.sounds/no_backup/androidx.work.workdb-shm
        • Size 16B
        • SHA256 374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.changevoice.voice.effect.sounds/no_backup/androidx.work.workdb-wal
        • Size 217KB
        • SHA256 b9529822791a4862d15e5b8d098686592763ab7b6b776af31ac17d8489f39b46
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        nonxa
        • Path /data/user/0/com.changevoice.voice.effect.sounds/nonxa
        • Size 5KB
        • SHA256 4d68e35da5892d462b7045b7fbf5726e2d23e3984728a4f22234ad73abaaa406
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        nonxa
        • Path /data/user/0/com.changevoice.voice.effect.sounds/nonxa
        • Size 5KB
        • SHA256 4d68e35da5892d462b7045b7fbf5726e2d23e3984728a4f22234ad73abaaa406
        • MD5 SHA1 SHA512 SSDEEP
        Download

        nonxa
        • Path /data/user/0/com.changevoice.voice.effect.sounds/nonxa
        • Size 5KB
        • SHA256 4d68e35da5892d462b7045b7fbf5726e2d23e3984728a4f22234ad73abaaa406
        • MD5 SHA1 SHA512 SSDEEP
        Download

        [email protected]
        • Path /data/user/0/com.changevoice.voice.effect.sounds/oat/x86_64/[email protected]
        • Size 622B
        • SHA256 a983b4158bbb6f1cc0b32e5b7af927dbac6d0f19874ddf923b2d149b3f515e29
        • MD5 SHA1 SHA512
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo1NTY4OTM2ODk5NDY6YW5kcm9pZDpiYWRiYTFhMDZjMGI0NWRmYzg2MDYz.xml
        • Path /data/user/0/com.changevoice.voice.effect.sounds/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo1NTY4OTM2ODk5NDY6YW5kcm9pZDpiYWRiYTFhMDZjMGI0NWRmYzg2MDYz.xml
        • Size 603B
        • SHA256 0fff6efd525f1808338947c2c624071cca63fde3fc0be4d62974d1be35c7cf50
        • MD5 SHA1 SHA512
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo1NTY4OTM2ODk5NDY6YW5kcm9pZDpiYWRiYTFhMDZjMGI0NWRmYzg2MDYz.xml
        • Path /data/user/0/com.changevoice.voice.effect.sounds/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo1NTY4OTM2ODk5NDY6YW5kcm9pZDpiYWRiYTFhMDZjMGI0NWRmYzg2MDYz.xml
        • Size 124B
        • SHA256 18b7389dfb7e6287a68049b45a5381c8e978bc40fbdfc9397cbef1563d256ad9
        • MD5 SHA1 SHA512
        Submit Download

        WebViewChromiumPrefs.xml
        • Path /data/user/0/com.changevoice.voice.effect.sounds/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
        • MD5 SHA1 SHA512
        Submit Download

        app_set_id_storage.xml
        • Path /data/user/0/com.changevoice.voice.effect.sounds/shared_prefs/app_set_id_storage.xml
        • Size 146B
        • SHA256 7596d18f6dd49091d9206048eb321ccde60b466f1446a85618ec1e2b293b5357
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.measurement.prefs.xml
        • Path /data/user/0/com.changevoice.voice.effect.sounds/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 395B
        • SHA256 1a9ee550587233014c08aa72d9fc38d76846d3eccbb0c46631cccb0237aa9f21
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.measurement.prefs.xml
        • Path /data/user/0/com.changevoice.voice.effect.sounds/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 122B
        • SHA256 2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
        • MD5 SHA1 SHA512
        Submit Download

        com.google.firebase.crashlytics.xml
        • Path /data/user/0/com.changevoice.voice.effect.sounds/shared_prefs/com.google.firebase.crashlytics.xml
        • Size 333B
        • SHA256 ca18e826dad3e4bf137a913cff54dcf8ab26eac8ac83698f22a8523b08578b5d
        • MD5 SHA1 SHA512
        Submit Download

        com.google.firebase.crashlytics.xml
        • Path /data/user/0/com.changevoice.voice.effect.sounds/shared_prefs/com.google.firebase.crashlytics.xml
        • Size 235B
        • SHA256 52faa1a54d8f1d492d41aa963c1c7234841b47df06b050ce7e862870693dc0c6
        • MD5 SHA1 SHA512
        Submit Download

        com.google.firebase.messaging.xml
        • Path /data/user/0/com.changevoice.voice.effect.sounds/shared_prefs/com.google.firebase.messaging.xml
        • Size 137B
        • SHA256 5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75
        • MD5 SHA1 SHA512
        Submit Download

        frc_1:556893689946:android:badba1a06c0b45dfc86063_firebase_settings.xml
        • Path /data/user/0/com.changevoice.voice.effect.sounds/shared_prefs/frc_1:556893689946:android:badba1a06c0b45dfc86063_firebase_settings.xml
        • Size 194B
        • SHA256 7579a949a3f64f6766eb1a1ad1cb27217e12d4588e80a764fabee77fab7cf457
        • MD5 SHA1 SHA512
        Submit Download

        frc_1:556893689946:android:badba1a06c0b45dfc86063_firebase_settings.xml
        • Path /data/user/0/com.changevoice.voice.effect.sounds/shared_prefs/frc_1:556893689946:android:badba1a06c0b45dfc86063_firebase_settings.xml
        • Size 241B
        • SHA256 3902606d5cdc89288a21841f30bb9cc626e1389a6da3d16d12d4fb8dc5424c95
        • MD5 SHA1 SHA512
        Submit Download

        pref_app.xml
        • Path /data/user/0/com.changevoice.voice.effect.sounds/shared_prefs/pref_app.xml
        • Size 122B
        • SHA256 c27121907eb19c3a8ac98bdd13201da493b3fa54de96dfd811dae298702b6997
        • MD5 SHA1 SHA512
        Submit Download

        pref_app.xml
        • Path /data/user/0/com.changevoice.voice.effect.sounds/shared_prefs/pref_app.xml
        • Size 168B
        • SHA256 b23e56749a991956278093c673e782e651cb2b19151115fc612e81bc5fd43f50
        • MD5 SHA1 SHA512
        Submit Download