Overview

overview

10

Static

static

7

Photo Coll....0.apk

android-10-x64

7

Photo Coll....0.apk

android-11-x64

7

Photo Coll....0.apk

android-9-x86

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Photo Collage Editor_1.0.0.apk

  • Size

    15.5MB

  • Sample

    230203-qw89hafe64

  • MD5

    bcc505c0fd9edc61e6383e657eb22e1e

  • SHA1

    6a8294c13daa09b6d7bda1ca9c7e65e17b7c7f10

  • SHA256

    f5a11bfb18a10d35b8f45bcd2e8a55528b8b9fd895fe71eb144eb9e00f61f451

  • SHA512

    e2ed63064ad7b6e6d9c069b74e37c8f261919e96c4f420c17f0f6289e48bd5081be783c8a02f649a6b183f9b8b3b6d9762d8d6b15350b298ea41e997dd823013

  • SSDEEP

    393216:h6XmOoTqAxXUaI/+g77u47M/UUv0+iR8V+A7eya:h4FAK0g7Jis8t75a

Score
10/10
jokerandroidevasioninfostealertrojan

Malware Config

Extracted

Family

joker

C2

https://weco.oss-eu-central-1.aliyuncs.com/simple

https://weco.oss-eu-central-1.aliyuncs.com/test_kbnt

Targets

    • Target

      Photo Collage Editor_1.0.0.apk

    • Size

      15.5MB

    • MD5

      bcc505c0fd9edc61e6383e657eb22e1e

    • SHA1

      6a8294c13daa09b6d7bda1ca9c7e65e17b7c7f10

    • SHA256

      f5a11bfb18a10d35b8f45bcd2e8a55528b8b9fd895fe71eb144eb9e00f61f451

    • SHA512

      e2ed63064ad7b6e6d9c069b74e37c8f261919e96c4f420c17f0f6289e48bd5081be783c8a02f649a6b183f9b8b3b6d9762d8d6b15350b298ea41e997dd823013

    • SSDEEP

      393216:h6XmOoTqAxXUaI/+g77u47M/UUv0+iR8V+A7eya:h4FAK0g7Jis8t75a

    Score
    10/10
    jokerevasioninfostealertrojan

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

      infostealertrojanjoker

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Removes a system notification.

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks