General

  • Target

    Easy QR Scanner_2.3.8.apk

  • Size

    2.0MB

  • Sample

    230223-phzbpshf6w

  • MD5

    f6fcce306ba26d8a357f44c440deac4b

  • SHA1

    71861be0aede12de53557272f97ea08f0baacd46

  • SHA256

    7f02b3b80b02d90be94f4b6d031eb43557df44e4647a03ddf8b81d8dee306b9d

  • SHA512

    dd660e9c51ed8b78ee399ad04cfab40b964df661522c53e9b0d976d56b3a439b9cef3b9ec30ea8d6032fcc1e6d03a46d1d588fe89f645484d33f535f462aeb1a

  • SSDEEP

    49152:S2/t2kttuxOO9EAoq8t6XFgeg4hXofr9wbs:S2/0kTuxf4Biofr9wo

Malware Config

Extracted

Family

joker

C2

https://adcbk.oss-eu-central-1.aliyuncs.com/af2

https://adcbk.oss-eu-central-1.aliyuncs.com/fbhx

Targets

    • Target

      Easy QR Scanner_2.3.8.apk

    • Size

      2.0MB

    • MD5

      f6fcce306ba26d8a357f44c440deac4b

    • SHA1

      71861be0aede12de53557272f97ea08f0baacd46

    • SHA256

      7f02b3b80b02d90be94f4b6d031eb43557df44e4647a03ddf8b81d8dee306b9d

    • SHA512

      dd660e9c51ed8b78ee399ad04cfab40b964df661522c53e9b0d976d56b3a439b9cef3b9ec30ea8d6032fcc1e6d03a46d1d588fe89f645484d33f535f462aeb1a

    • SSDEEP

      49152:S2/t2kttuxOO9EAoq8t6XFgeg4hXofr9wbs:S2/0kTuxf4Biofr9wo

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks