Analysis
-
max time kernel
2341876s -
max time network
151s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
05-06-2023 12:41
Static task
static1
Behavioral task
behavioral1
Sample
hd_glitter_hndwallpaper_v2.1.23.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
hd_glitter_hndwallpaper_v2.1.23.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
hd_glitter_hndwallpaper_v2.1.23.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
hd_glitter_hndwallpaper_v2.1.23.apk
-
Size
12.8MB
-
MD5
9aa2f6a641ddb2f16b3e68895de0e6e3
-
SHA1
f7f3b2ae475ce782e22fe9c34310cf703186cf81
-
SHA256
47c8aee1d37b794ea61e9b9e73ebb31c1b59994b3d3410f8dc10cfcf692f4e62
-
SHA512
01438da73468bf0f54c4d8ba899dc781110f3bc29864c9673825d3bb4ecb364e5d91d80c32fb0a3cc8c79c43d34604dc225809af2c74d25033c44e92ed23fc66
-
SSDEEP
393216:9kR47bLz+95hYMCWp9M8mYHFhL+JyE7O0s:9kGnLJMCWLDqT7Ov
Malware Config
Extracted
joker
https://adcbk.oss-eu-central-1.aliyuncs.com/af2
https://adcbk.oss-eu-central-1.aliyuncs.com/fbhx
Signatures
-
joker
Joker is an Android malware that targets billing and SMS fraud.
-
Checks Android system properties for emulator presence. 1 IoCs
description ioc Process Accessed system property key: ro.product.model hd.glitter.hndwallpaper -
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process Anonymous-DexFile@0xde42c000-0xde42d3c0 4161 hd.glitter.hndwallpaper /data/user/0/hd.glitter.hndwallpaper/files/online 4161 hd.glitter.hndwallpaper /data/user/0/hd.glitter.hndwallpaper/files/penetrate 4161 hd.glitter.hndwallpaper -
Reads information about phone network operator.
-
Removes a system notification. 1 IoCs
description ioc Process Framework service call android.app.INotificationManager.cancelNotificationWithTag hd.glitter.hndwallpaper -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal hd.glitter.hndwallpaper
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD5cb7543c4df600f2af58097cce0e334ba
SHA183cc92f38c27fdb4fa519b1ce2f37912f24af1f0
SHA25664c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233
SHA512ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980
-
Filesize
1KB
MD5b0424b2353777e7499aea8b333b22482
SHA1a222eccb4956767b21d95d40c3ce957f8d87707d
SHA2561b6255effb176d60e6037d1e899b3ff735dad9e6f1c99baa79105066be661aa6
SHA5123dba418b9520019ce7291f51f9a14471954a722345b83f75b05d90467af1a21b2d9459826caa3f853e639b6724e9be2eeb3a0e9a309698a3f8ddd747f7817684
-
Filesize
20B
MD593027d42b314432c4216e6cfca48b384
SHA143448dd8102979c3926828182579691945eedd4e
SHA2563cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e
-
Filesize
48B
MD54b252d39a888aba042f9363b15715247
SHA1de5dc7252304d9f1c25c52b4937397dfb4976cf0
SHA2560bfdf925cb06574e8311d896959580e4201be75cd05e7563fb8f473997525b62
SHA512f4caad0acaf572a9314a56435efd09d43e07387e3f08cc53329f41464cc2a90e291d02faeee68d967b2a869fe46a45c9d964b6796e370d95ae2519e87923f904
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
959B
MD5e66b6a94529e0a026f5e42017a27aa37
SHA1c5b777cb322e9e3f8811ceb934757e17d5120c9f
SHA25640fa5ab72f2b36f4ea79cd5f30780fe6e039451fb5f52e30d9d50cb310aef9af
SHA51271527aadf1f7d9f026710a0af4d119e02e44951646acdf95eb4ead74cb1ed099657159da8dadf9fa48e162992787bcd370a0d725c698f7409ed0c7001e31a8f5
-
Filesize
70B
MD5213e605c4d6df0e69b85d96f07f656b6
SHA16a42000caa78a5cabb60248f0c383d20d1c90b5e
SHA2569285014bc8d14a336d6e0e8000f264bd60cbc5834e66bd60cc5d32768fdb3823
SHA512d0fc4fe39ca8c4cd0b5e3b3b7f4b8d7f52325f5a56ae6b45ee8a6162eee5dcdb4150006a6fc159577eca71423ef689a5e5f78e6a504f455390103e362d21800a
-
Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
104KB
MD5dc79f9ce5f3ab5270b33e61119dfc959
SHA11844bf222a5144b513dcf2fb50a18c011701c647
SHA25647e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65
SHA51218b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e
-
Filesize
1KB
MD55fde2e337546a67284ddc197a1ce19e9
SHA16f299ecb6bb5901742e3f6966514232c90a2eb5d
SHA256866d0e5f23a226e3677606f7d308e4af155a9a553195273c5c22de4011e44c4e
SHA51220db6ed9ebf90ef6d9e7b25d78b6fa717d1a2c9d87c0ba0397385b2cb12eb8cf9d5dd82e22c063cf83583823a24510502318883af84ac5b57ac8446e2714a67b
-
Filesize
36B
MD5660b52835a79d403ecce11f3c54076d8
SHA107758ef3eb5e11ccc4aabffc4e6f816b617548d0
SHA256e7fce2b3f88bb895e51e8fe8dd807f47d93276e40b07dff72010213d0e662864
SHA51252e5be26825d2d84b1b6614106f2e96f39e92f9564c67cd99c7f696fe07ef4a5401b4de3f6f480b97be191c94c17343f5dcf8b19d2b18a3818531aea6706f621
-
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/02afd54b8fb77b3e725d9ea466085c90a8ce45e4dacf631931fdbb0a3dc9b51f.0.tmp
Filesize45KB
MD54c956fddde20fb8ac4206bd162c9d5c1
SHA162e2a9476fbb4b4cfeef3ecaf2633f19fea74f8e
SHA256820a51946707952fb296e9a248de9a0c100fbb1a09fdc69dd0984867a86f2e29
SHA5124ca06e06206c7c39af408ee1b7b1c3538c00810f33ef5b2e9c327db997456958c0cc3a1e838f71a6c12526236d19a55fb083de9993b249f9934390529bb43459
-
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/247e404d1e0fec1663200756d98f06e8bb7ece3bb992fb3957b159625c787095.0.tmp
Filesize74KB
MD5791022bf7ae5236919f97a997c13a929
SHA1d5bee03194c6828871ca761e504818a5732a5862
SHA2569b69e1153731312c31dfe1066dc6b7695afadbca1182c454005a0af81468f32e
SHA512e71496bc15af0dec16550f0ecf2d5fbefacf474083efcfae7c17c1b5eeb8523e63606eef673a8811cfe3662df85e1f6082bccf499169f51cca129198ca486d0a
-
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/42ee94ba53dabc68a4db86f81425e5aa5cc2d3a1c7d18ff34ba2c56e8fab9763.0.tmp
Filesize74KB
MD525720d587f0acdca1687dfb386b01673
SHA147817e4a089b91ed3f11cbb13daa8bc21a3185d6
SHA25664c8aefc3a6a0306e6da7f56cb3d1b58872a2bb8c2ed85607431ceb5bbd2f264
SHA512df230cd3b47fe9987e8e9386b0253d7e25b145a0c45a1939e7a7474e4771d85ee68d1a95170e7cefff6b78a9f5a28818f17e7f78311a50543e40d9ec8d968aa1
-
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/44dc576378743349ef769e33d9cf3a120f6ec4fbb31f4c5f0c37eb6414c9fd38.0.tmp
Filesize92KB
MD558e16d9f16fc4cb1509520675d314f0f
SHA15221b1924dd9be1a01f643a72650251ce848d044
SHA256b546408657591d09c6905a4fedc7b6061354e1f09f9206df3b743efb8392c8d0
SHA512264b27055a003711a29de877320966d0331a8fddb2db609174a9ac809dc7facd80d42fc3d352f3d4ed7430393dc9a6b8f8958585c3afa98f2bd2a3aab91030aa
-
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/49aa6b4638c5561cd0855426cd5c1e985b0cd7cf1dc75f200f46705aac7a5dbd.0.tmp
Filesize59KB
MD5c0024d2de19b85363ed13cbb717a035a
SHA13e320dbfe62a112b7e87f197d8c200c5080cfec2
SHA2563a2edce33f56dd3bd6fa0bd02486832f5d5849ff99e45c25669be4a4791c889f
SHA512b4ac7e3e169cf6dd085d475f4ae317b2631fc821d4a0de64348fd054f31f050059374b51724c8664ad073aeeffd071d4248d57a28cb05cb39b78fdaafc368890
-
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/558dabea0187aef50d12e651ee3de5e40795539de3a071af3d71595db3d8cfc3.0.tmp
Filesize80KB
MD51a9fb656d69c2981250b50ab5d0d72bd
SHA1efd607a9269f08c3ffb815f780922fae027c97fb
SHA256ba3b2420800e7fd64ce036793e97f22010d67c767829d599ea8811ea4bf78ed3
SHA51283722f9241b3bdcf2f33b98bcc3e98ee5d588dea313b97f57f4aa8cacc17aa6200829a1bb4023b3c0244cd5004a7a7a47b68b8839d8a10208c5125b7ab796763
-
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/9c3bb29b8d438c9560910a2c81962eb3ffcaf66ca1a13e9c8797b61e0dc2994a.0.tmp
Filesize68KB
MD54266c490a708febf208b871034db0dc4
SHA168882f1beb34c4d6f72e5400f17fe976cb92b37e
SHA256264cbcb603f8d2a720fb8c6c49b911378e48ed0002d317aaecb30a94d2a3610b
SHA512659d2bd19f1274f0659679f55ebdac7005541c7d9e95981074d3c2ff357e1b4eeeb6055f4bb1f5bc624b1be43701efb7e64a20c6c14415496317c158b06d2fa5
-
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/bbef540dee7237645aeb4be979fd79cae9037bafc6163153017b74d46b077abc.0.tmp
Filesize63KB
MD57322331f185b1bc8a6a18a5e6de1bf56
SHA12ae6b33488f02aab511cd3202ab786db731efa8c
SHA2561fa2f3deedd6eb04a84f447607d90f6c1b2fdcae44db4a8cc645bc611bae00d2
SHA512d4a015b8434253a4fc0db8bf6f1954ddd9c15c0c22cc16ba8493dd686ae171564232e3b7651a4630b68a6faa2fd3aa0771612ede482195b135fffa93eeb93eba
-
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/dfdb6671d59df8fdd8e18889fd16e4d26f39fb7c727162fb80db6523c7fadd1a.0.tmp
Filesize65KB
MD51e48b5204028cf0158dfded29fc9ab4b
SHA1504c9a43cb0a7fa2b65e385424bca31ceeb9af1b
SHA25686e71ec884c0834f2ca198a69aecb40400cc4dcdcfeabb3794b80b86e2eb145e
SHA5127687f8a701571da320e137823104e53ecafd65662e67c1dba39ebb6190651f5e93984a3132952dd3bba3c5ed77b79e3b5e8e878bdc3767887d5d91e1b21780c0
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
6KB
MD50357ef7bc62bf2fa159f62e38800c9f9
SHA14a47fedca2525a19c264e653affc72cdb539a556
SHA25685fa87f86c8a176fa251992c31f1f96507f599dd14dabd8544e050ee2895744a
SHA5121b5503403cc9b92d0df16c81578a2aa6deb17b982370104a9b6f7ccb0aa768f0c021e69e1f8d6b7b3e7340230768439ea858287183c87a338ed1d843c29445f0
-
Filesize
6KB
MD55eb9a47a616f26900c6771f2ac92a11c
SHA1e3e6db838ddf1ec6248201e69e1d63b569a8fdf4
SHA256f54855d99e05ba5cb7905e7ade222c68d8a7fdaa72cef0052902b0a9c8b093d9
SHA512ef10ea036bd6339705662a6b6c8f67de56a13f3cd28ec31a82a5ebb3b25ef3d919dac89c00a67de70495e08a32e7d027ac9039f2617959e02df7bd553c62867d
-
Filesize
126KB
MD5ff8f1bd7191b398111d592f345c000b5
SHA1644806a128f3cf3c026df9f467b42cb87eafcde5
SHA25697f7f8dfcb379ac190063447019b396f2f41bc0fad1ec72076ec561c42a539b9
SHA5124ca2b2ee99ee4f63806bf532a349305a2297e8b4ece7e5019f99c90102b026893981196f60b4d7b6980a99aea16d33e047d7f4b056579e8bd9ff9924428524c6
-
Filesize
196B
MD58ac7b385941b708b26145d3ecdbe2ab9
SHA16bf744bd9f89a3b632e29216459fc195b211bfcd
SHA25601fe763e4b998489a51d0e6e62f76882c39deeacba416194b04201f192d47a05
SHA512b5f7083eeed45ccd109a0226fa9682959bdc846b285619f63d59bf9e1d4cf8d592e66de52b376ddd05da8b848b4027677740db4309f4c4db1d76820ce7c44860
-
Filesize
20B
MD593027d42b314432c4216e6cfca48b384
SHA143448dd8102979c3926828182579691945eedd4e
SHA2563cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e
-
Filesize
48B
MD5b33827b171941e16fd60f2f2a6cc6fec
SHA163479000a476b925c20520e043ecbedb1c13fe95
SHA256b7f4859ebc02cc028cd4ed34df203dbb395048559028ed6bfd66650c53c48afb
SHA5128068db3b90c4655300e73cb107518897c9aeee0638e7d23f0a537c7f83a0073c2dbe977ab2d4acf121acc28a521532c32bd0c2774fcd710d58fa1436f55d672f
-
Filesize
120B
MD5abaa0fdbf902a2196bd385d5f5cdf354
SHA1ac8955ccfbca9c3a64a8ed9384fba41cdcdd8f82
SHA25693227084b87450abc96017ed7a27d0daa01f2a1907be58f2a3ab4ae756fdcb03
SHA512ef5697544e0756b442f121788b0231310295fc881858ef0259df95cc5e119a486c89343ed1bc74e4995670afdb6147e26a90a9869107279079280241a7ba6f90
-
Filesize
701B
MD5782e72e9d8e68b4e7ae46fca84f23cae
SHA1d99a53f84012e16a59beef38814fdabaf7320bc5
SHA2567a12aaca0c24817dd7f1eb36f937aa17d78ff52aacad23f9b7c6bd11fe1b1342
SHA512a3a915dc78574c01321c7744be8b80b25014d84068f16ee268700a351a86f9112acbcd9311ea6bdf216929b8fbb923762f271889e88dd41d7c4cc0405b925e4d
-
Filesize
52KB
MD50e969c5df16c2353896197d5c2e40816
SHA1bfe8fa597aca4d148bd5579865b6ea7af0074f5e
SHA25647736d7c52f74bb3da189207fd1ea60c37b28180607803be6719b5e34dd099d2
SHA512bb0fb5df520041dde29abac6113372a9ddedc8f9c5361f47d17e3f0cf8d27a4faec63d54dd4e732d92cb9b5057b684c3ae4b68558318e924f8db6b3800738b68
-
Filesize
2KB
MD5d97912d9a8bfd1a5181055fd1eaf3307
SHA18d9c65b6814c1b71de3c997123c54bd7ea709037
SHA25626be592bce8eba80463585813f15b095e8f5dbfd66997a8b1107b5415f15d051
SHA512fe4078788fa3d77ebaf952cd17fbcbdb12ef9acc983338f7cdd02ccf6696651ca1e8e338a6224cf0db7d786b29817826360ff086c4038385215f48d164da1e92
-
Filesize
3KB
MD5f343818fa54fd572014885373686023b
SHA1aadfeefd7841074515db825e8d4e193c363a80b1
SHA256b90666e09bdddbd0fb45b418447146fb371bf2e082bf47678ece48fa375fc7c8
SHA512ddf137e5429859a9ecffab42574439626b59d2359bd59f0d0bcabf78901c73ec7af38a33064807b4724a830237504586514cbb574751e6479062af8b64ec0aee
-
Filesize
27KB
MD521406ba5526c0470633b02b8ba1b65d8
SHA176ac1787d4959fb993c3439f3495ad3c092b7cbb
SHA256b5ea5d1da64e00e9aa6475d822d8cdd03dd819c29713c1e3a1892be9b1badb8a
SHA512a625eb0711a0900aed89f9178e70edc8cfbf48d13e10474a699666f700377210dda9ab6b96ab99d6a6bf9f540500dbdaedf985cd48e9d945832f0a36e21a1b2a
-
Filesize
56KB
MD5e29be62e8261bcbd531d72006d8daae2
SHA1d86ebd909aa45a26425ec652fb2fb1ce8680b514
SHA256ee9af2b39e7b09bb76e5fda8059834c62902945db905057930365676132c5798
SHA512b0be47e72b4bbad59759d5544c4f790a0538dc97eb83a536c51f2be133ba983bd53da39217bc2c9dc03531ef2ef7e73b0b955189fac2541c85415e769af91deb
-
Filesize
127B
MD521223e9184445fe043476484cd8cb1f9
SHA12b4813f849121d60ba35eb0889080668bb62c778
SHA256bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
SHA512be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48
-
Filesize
133B
MD5e0949ff8c9801ce45d66ab1581b68f6f
SHA113977aed7827add2df869a9731a10b5db5e9c575
SHA256b50815b49ae508dabbb0bd16044718b030a4c9e6dc56192b681c7957239fa375
SHA51278818085661ea12fa9094d001a56798582035e8a7039ac1dc2f98c4c85a09accb557dc012f0360ef974e6306c8f82bdae4c89865e8240745d327b393a501e52c
-
Filesize
4KB
MD5aab67db0155a0c68c0fe0dde57ab0e8b
SHA1a61c532a525d46b36952fc2a35b95ec28b9f00c4
SHA256398d981ce07362733b5e5f61c2904f7b20fcc5a1d24bed929d56774ddbd90246
SHA512b1029b9e3dfe3af5848157198f167f4c4c5b917ccbb14d7299308ff025b66bcc6c1121d4047d156afd9f17b6ef773ca3cf103629efcd01eb25c23680f3fe83f1