Resubmissions

15/01/2023, 04:36

230115-e8nmsaaa9710

12/01/2023, 09:04

230112-k1lfcafe967

General

  • Target
    Quick PDF Scanner.apk
  • Size 10.6MB
  • Sample230115-e8nmsaaa97
  • SHA256 eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • joker

C2
  • https://weco.oss-eu-central-1.aliyuncs.com/simple

  • https://weco.oss-eu-central-1.aliyuncs.com/test_kbnt

Targets

    • Target
      Quick PDF Scanner.apk
    • Size 10.6MB
    • SHA256 eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5
    • MD5 SHA1 SHA512 SSDEEP
    • joker

      Joker is an Android malware that targets billing and SMS fraud.

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Removes a system notification.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks