General

  • Target

    Emoji Live Wallpaper_23.0.apk

  • Size

    17.3MB

  • Sample

    230128-ls4sdsga2w

  • MD5

    4946abe48af415a217df8502ab08fe60

  • SHA1

    a3aff972586e51dedaa8b3eec45fbe5845f3ae96

  • SHA256

    d07b3a7c6c89987ae221a03e506264ab4d69dbc33def591184058e5f3ca59dd4

  • SHA512

    f3daf6e801e58800805454d6d08cc343ee7b2bdd5315af03690a2b53c297907b4f15f2693a7618f5bd71697563ae01abf38212985b1ef67006c47de23d95be84

  • SSDEEP

    393216:+wrVwQc62xn6xd0y1hRWvghv9b7STcx3803BmrEZcXCAOL:+wrVwQT2BS/nMEvMyBmNaL

Malware Config

Extracted

Family

joker

C2

https://weco.oss-eu-central-1.aliyuncs.com/simple

https://kbnt.oss-ap-southeast-1.aliyuncs.com/kbnt

Targets

    • Target

      Emoji Live Wallpaper_23.0.apk

    • Size

      17.3MB

    • MD5

      4946abe48af415a217df8502ab08fe60

    • SHA1

      a3aff972586e51dedaa8b3eec45fbe5845f3ae96

    • SHA256

      d07b3a7c6c89987ae221a03e506264ab4d69dbc33def591184058e5f3ca59dd4

    • SHA512

      f3daf6e801e58800805454d6d08cc343ee7b2bdd5315af03690a2b53c297907b4f15f2693a7618f5bd71697563ae01abf38212985b1ef67006c47de23d95be84

    • SSDEEP

      393216:+wrVwQc62xn6xd0y1hRWvghv9b7STcx3803BmrEZcXCAOL:+wrVwQT2BS/nMEvMyBmNaL

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks