joker | 4d3622c5a47fee261c83a89980eaba8c2a01fb63c8bfd18525c60342786c4f42

Analysis

max time kernel
3728851s
max time network
159s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
23-01-2023 11:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Easy Photo Collage_2.0.apk
Size

11.5MB
MD5

0dd51dad6fed0c4e0ca4a451a327b0e9
SHA1

f6b3549a0985ddc46f327474c5d909d093030c44
SHA256

4d3622c5a47fee261c83a89980eaba8c2a01fb63c8bfd18525c60342786c4f42
SHA512

7d9f887017f241730df2a49c3d8e6809b7c7cf8b4ff9b19b243a925cf49ab516bf249f6a3bbbefbca77eee4d598dab86d8790a1c4347c078f4952a510483ea79
SSDEEP

196608:CKcDsn2rPkCFmce2APZtPahwtkvSVkSPMAJ6IlAPa:CKAsn2rPXFmDDPPPaw5lP7pAPa

Score

10^/10

joker infostealer trojan

Malware Config

Extracted

Family

joker

https://weco.oss-eu-central-1.aliyuncs.com/simple

https://weco.oss-eu-central-1.aliyuncs.com/test_kbnt

Signatures

joker
Joker is an Android malware that targets billing and SMS fraud.
infostealer trojan joker

Loads dropped Dex/Jar 5 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
Anonymous-DexFile@0xe4fd9000-0xe4fdc4c0	4100	com.easyapp.collage.phmaker
/data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm	4100	com.easyapp.collage.phmaker
/data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm	4100	com.easyapp.collage.phmaker
/data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm	4100	com.easyapp.collage.phmaker
/data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm	4100	com.easyapp.collage.phmaker

Reads information about phone network operator.

com.easyapp.collage.phmaker
1⤵
- Loads dropped Dex/Jar
PID:4100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm

Filesize
26KB

MD5
3e314b1a29a1fa6ec13b1ff61e491df3

SHA1
b3aab4df657ca4bb2b44407fbc770433bb44affa

SHA256
5b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f

SHA512
3e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4

Download Submit
/data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm

Filesize
26KB

MD5
3e314b1a29a1fa6ec13b1ff61e491df3

SHA1
b3aab4df657ca4bb2b44407fbc770433bb44affa

SHA256
5b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f

SHA512
3e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4

Download Submit
/data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm

Filesize
26KB

MD5
3e314b1a29a1fa6ec13b1ff61e491df3

SHA1
b3aab4df657ca4bb2b44407fbc770433bb44affa

SHA256
5b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f

SHA512
3e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4

Download Submit
/data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm

Filesize
26KB

MD5
3e314b1a29a1fa6ec13b1ff61e491df3

SHA1
b3aab4df657ca4bb2b44407fbc770433bb44affa

SHA256
5b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f

SHA512
3e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4

Download Submit
/data/user/0/com.easyapp.collage.phmaker/files/zzxqmsm

Filesize
26KB

MD5
3e314b1a29a1fa6ec13b1ff61e491df3

SHA1
b3aab4df657ca4bb2b44407fbc770433bb44affa

SHA256
5b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f

SHA512
3e2d6f1997f3647aa5a6a400f97f1a08f8456b777d733efc9084de9a8dff9ba8f55dc9e4b3b4cf378da1ce2446dbca9efaa2e3d4c14eebf6e5da92751b2697d4

Download Submit
Anonymous-DexFile@0xe4fd9000-0xe4fdc4c0

Filesize
13KB

MD5
665767f2c11ef8f609ed38bf23d5db97

SHA1
cf7ee39599a508e83a9dc49e55c48bc8c2846591

SHA256
dca2d34d6881cfa25c089d49e7f0e4b4fed7851e8443eae4ac3ddf9b4fa5107b

SHA512
4353f7c251a065fbd28ee71b1d0193b2cd2e8f57d2ef6e2bc6a1b7be65fb01f4415b14a8303970f183ee02635b97b0a3f26df22fa5ee58f722ec7895db907511

Download Submit