General

  • Target

    Smart AI_1.0.00.apk

  • Size

    24.6MB

  • Sample

    230303-rvtyvshc61

  • MD5

    c75fb76edbe06422d96c5efceada464e

  • SHA1

    1ce30964c75d0ebac05aafc0fe6b5992779d7887

  • SHA256

    acdc54f3539f597b773cefec2a7b3c2de3f47b0c49124087a61fb79c024ecb6c

  • SHA512

    cc0ca417209138a5fa010139f655662b449d6f20e0198d811ee83e440152d3414b1505403a41329c649119f5af3097d2ef0b6bcbcc8a7bdca24dbe2945f19fea

  • SSDEEP

    393216:YJTzRqGeM/4FIRabGO2gtzqqIINxajlFjCnkI5yP+vu+4zMIZgtCOZEgBHLS4la:YJTchE4qazeICjlwnk3P+o4rEyHLzY

Malware Config

Extracted

Family

joker

C2

https://adcbk.oss-eu-central-1.aliyuncs.com/af2

https://adcbk.oss-eu-central-1.aliyuncs.com/fbhx

Targets

    • Target

      Smart AI_1.0.00.apk

    • Size

      24.6MB

    • MD5

      c75fb76edbe06422d96c5efceada464e

    • SHA1

      1ce30964c75d0ebac05aafc0fe6b5992779d7887

    • SHA256

      acdc54f3539f597b773cefec2a7b3c2de3f47b0c49124087a61fb79c024ecb6c

    • SHA512

      cc0ca417209138a5fa010139f655662b449d6f20e0198d811ee83e440152d3414b1505403a41329c649119f5af3097d2ef0b6bcbcc8a7bdca24dbe2945f19fea

    • SSDEEP

      393216:YJTzRqGeM/4FIRabGO2gtzqqIINxajlFjCnkI5yP+vu+4zMIZgtCOZEgBHLS4la:YJTchE4qazeICjlwnk3P+o4rEyHLzY

    • joker

      Joker is an Android malware that targets billing and SMS fraud.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks