joker | 47c8aee1d37b794ea61e9b9e73ebb31c1b59994b3d3410f8dc10cfcf692f4e62

Analysis

max time kernel
2341875s
max time network
149s
platform
android_x64
resource
android-x64-arm64-20220823-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
submitted
05-06-2023 12:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

hd_glitter_hndwallpaper_v2.1.23.apk
Size

12.8MB
MD5

9aa2f6a641ddb2f16b3e68895de0e6e3
SHA1

f7f3b2ae475ce782e22fe9c34310cf703186cf81
SHA256

47c8aee1d37b794ea61e9b9e73ebb31c1b59994b3d3410f8dc10cfcf692f4e62
SHA512

01438da73468bf0f54c4d8ba899dc781110f3bc29864c9673825d3bb4ecb364e5d91d80c32fb0a3cc8c79c43d34604dc225809af2c74d25033c44e92ed23fc66
SSDEEP

393216:9kR47bLz+95hYMCWp9M8mYHFhL+JyE7O0s:9kGnLJMCWLDqT7Ov

Score

10^/10

joker infostealer trojan

Malware Config

Extracted

Family

joker

https://adcbk.oss-eu-central-1.aliyuncs.com/af2

https://adcbk.oss-eu-central-1.aliyuncs.com/fbhx

Signatures

joker
Joker is an Android malware that targets billing and SMS fraud.
infostealer trojan joker

Loads dropped Dex/Jar 3 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/hd.glitter.hndwallpaper/[email protected]	4339	hd.glitter.hndwallpaper
/data/user/0/hd.glitter.hndwallpaper/files/online	4339	hd.glitter.hndwallpaper
/data/user/0/hd.glitter.hndwallpaper/files/penetrate	4339	hd.glitter.hndwallpaper

Reads information about phone network operator.

hd.glitter.hndwallpaper
1⤵
- Loads dropped Dex/Jar
PID:4339

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/hd.glitter.hndwallpaper/[email protected]

Filesize
4KB

MD5
aab67db0155a0c68c0fe0dde57ab0e8b

SHA1
a61c532a525d46b36952fc2a35b95ec28b9f00c4

SHA256
398d981ce07362733b5e5f61c2904f7b20fcc5a1d24bed929d56774ddbd90246

SHA512
b1029b9e3dfe3af5848157198f167f4c4c5b917ccbb14d7299308ff025b66bcc6c1121d4047d156afd9f17b6ef773ca3cf103629efcd01eb25c23680f3fe83f1

Download Submit
/data/user/0/hd.glitter.hndwallpaper/app_webview/Default/Web Data

Filesize
120KB

MD5
a48cd9324b1f8754b07f00d863b840f3

SHA1
11c6614775b35a58f440971dfc87c8aaac6d6173

SHA256
8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

SHA512
35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

Download Submit
/data/user/0/hd.glitter.hndwallpaper/app_webview/Default/Web Data-journal

Filesize
2KB

MD5
2c5bf54588700ca0ee37eff754869d8a

SHA1
d5f70488cddc4aed8e35656703f3d22315fb8aec

SHA256
565a691a98bb34ce12c7a01f75600796e7b27ba950a67bd38faf1e2a508cce55

SHA512
88af222d00a1b1b2833085fbc1475d6a2195bded64def7d88912097ddc28bfb6537469b726511f415ac54cd636bc05347a59cd93d9fc4c35c9298ca3082613d2

Download Submit
/data/user/0/hd.glitter.hndwallpaper/app_webview/webview_data.lock

Filesize
29B

MD5
1e4abd696a46d5459e64bded7d5fb658

SHA1
8f2050237004e649dbe3e17325c813b880660183

SHA256
b5320c87fad09009ac9e938c9525b46b70ce975c463fddab474641e19af1d849

SHA512
3dc694dbb403aa1ff732d9e8c700795f777009533cd8594c5a91cea4cd2920b9ae556bd5919fc9b2b7a7949f720e1ee4829594c91556816972c6c5a327570cf2

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/WebView/Crashpad/settings.dat

Filesize
40B

MD5
e5bd03ef197e04aeac8c0a6f12cb8595

SHA1
cb3a2a1918b74825fcaf01b04b9006ff7e32f76a

SHA256
f031a4b74b664488c74b805b4b0c16f9bf4bc67adef595d716813faf0891a861

SHA512
d733a9fa91f68c6e70fa954b50a35ba124c5850161f59a682cdb4f86193afac8b77f40e4bf5cec3210631fd2fd5ba2798e60e3195d2bb333886683bf9a876316

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/WebView/Default/HTTP Cache/Code Cache/js/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

Filesize
96B

MD5
a5968a4ae698f39a47cd08a83924ee40

SHA1
2e08d0c317e3f4bbef75e5df07ec03df0e0a185c

SHA256
4da0f7de0bfd0290cd818cb541886ea0ab389f8ee5b5ae087f363c70342552f7

SHA512
0611f92c49dcf4ee55370d56ce2a53d8aa42ebf84b08e311685a26d42409c655f857d6d8ba7ee16215f4a8b1ae76fba9da6b101fab92c7f3860a0c6d0ea9a8e3

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

Filesize
96B

MD5
4a551a4a2b0fff8fd72599672db106e9

SHA1
e7fc3adbf182574af698261294b2019ebf2edd3d

SHA256
f704f2c22f00e5d4f4e2059dccd4de9a2fad14dffe8f255eff337b2e795bce68

SHA512
1bdb691f9588950bc70f0068847f01e7014d1ebd630b96f84ab371fa58684b90a15d9760ca9e38fa779cb3e36fe99e9cbcbf6eaf405bd58ded147d1a2f9ba317

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/WebView/font_unique_name_table.pb

Filesize
57KB

MD5
f080fa2a56ab5479d58063e5ea871447

SHA1
4b3fd57a98916fa5784305b76ba30af26b5253d9

SHA256
0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

SHA512
8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/02afd54b8fb77b3e725d9ea466085c90a8ce45e4dacf631931fdbb0a3dc9b51f.0.tmp

Filesize
45KB

MD5
4c956fddde20fb8ac4206bd162c9d5c1

SHA1
62e2a9476fbb4b4cfeef3ecaf2633f19fea74f8e

SHA256
820a51946707952fb296e9a248de9a0c100fbb1a09fdc69dd0984867a86f2e29

SHA512
4ca06e06206c7c39af408ee1b7b1c3538c00810f33ef5b2e9c327db997456958c0cc3a1e838f71a6c12526236d19a55fb083de9993b249f9934390529bb43459

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/247e404d1e0fec1663200756d98f06e8bb7ece3bb992fb3957b159625c787095.0.tmp

Filesize
74KB

MD5
791022bf7ae5236919f97a997c13a929

SHA1
d5bee03194c6828871ca761e504818a5732a5862

SHA256
9b69e1153731312c31dfe1066dc6b7695afadbca1182c454005a0af81468f32e

SHA512
e71496bc15af0dec16550f0ecf2d5fbefacf474083efcfae7c17c1b5eeb8523e63606eef673a8811cfe3662df85e1f6082bccf499169f51cca129198ca486d0a

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/42ee94ba53dabc68a4db86f81425e5aa5cc2d3a1c7d18ff34ba2c56e8fab9763.0.tmp

Filesize
74KB

MD5
25720d587f0acdca1687dfb386b01673

SHA1
47817e4a089b91ed3f11cbb13daa8bc21a3185d6

SHA256
64c8aefc3a6a0306e6da7f56cb3d1b58872a2bb8c2ed85607431ceb5bbd2f264

SHA512
df230cd3b47fe9987e8e9386b0253d7e25b145a0c45a1939e7a7474e4771d85ee68d1a95170e7cefff6b78a9f5a28818f17e7f78311a50543e40d9ec8d968aa1

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/44dc576378743349ef769e33d9cf3a120f6ec4fbb31f4c5f0c37eb6414c9fd38.0.tmp

Filesize
92KB

MD5
58e16d9f16fc4cb1509520675d314f0f

SHA1
5221b1924dd9be1a01f643a72650251ce848d044

SHA256
b546408657591d09c6905a4fedc7b6061354e1f09f9206df3b743efb8392c8d0

SHA512
264b27055a003711a29de877320966d0331a8fddb2db609174a9ac809dc7facd80d42fc3d352f3d4ed7430393dc9a6b8f8958585c3afa98f2bd2a3aab91030aa

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/49aa6b4638c5561cd0855426cd5c1e985b0cd7cf1dc75f200f46705aac7a5dbd.0.tmp

Filesize
59KB

MD5
c0024d2de19b85363ed13cbb717a035a

SHA1
3e320dbfe62a112b7e87f197d8c200c5080cfec2

SHA256
3a2edce33f56dd3bd6fa0bd02486832f5d5849ff99e45c25669be4a4791c889f

SHA512
b4ac7e3e169cf6dd085d475f4ae317b2631fc821d4a0de64348fd054f31f050059374b51724c8664ad073aeeffd071d4248d57a28cb05cb39b78fdaafc368890

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/558dabea0187aef50d12e651ee3de5e40795539de3a071af3d71595db3d8cfc3.0.tmp

Filesize
80KB

MD5
1a9fb656d69c2981250b50ab5d0d72bd

SHA1
efd607a9269f08c3ffb815f780922fae027c97fb

SHA256
ba3b2420800e7fd64ce036793e97f22010d67c767829d599ea8811ea4bf78ed3

SHA512
83722f9241b3bdcf2f33b98bcc3e98ee5d588dea313b97f57f4aa8cacc17aa6200829a1bb4023b3c0244cd5004a7a7a47b68b8839d8a10208c5125b7ab796763

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/9c3bb29b8d438c9560910a2c81962eb3ffcaf66ca1a13e9c8797b61e0dc2994a.0.tmp

Filesize
68KB

MD5
4266c490a708febf208b871034db0dc4

SHA1
68882f1beb34c4d6f72e5400f17fe976cb92b37e

SHA256
264cbcb603f8d2a720fb8c6c49b911378e48ed0002d317aaecb30a94d2a3610b

SHA512
659d2bd19f1274f0659679f55ebdac7005541c7d9e95981074d3c2ff357e1b4eeeb6055f4bb1f5bc624b1be43701efb7e64a20c6c14415496317c158b06d2fa5

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/bbef540dee7237645aeb4be979fd79cae9037bafc6163153017b74d46b077abc.0.tmp

Filesize
63KB

MD5
7322331f185b1bc8a6a18a5e6de1bf56

SHA1
2ae6b33488f02aab511cd3202ab786db731efa8c

SHA256
1fa2f3deedd6eb04a84f447607d90f6c1b2fdcae44db4a8cc645bc611bae00d2

SHA512
d4a015b8434253a4fc0db8bf6f1954ddd9c15c0c22cc16ba8493dd686ae171564232e3b7651a4630b68a6faa2fd3aa0771612ede482195b135fffa93eeb93eba

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/dfdb6671d59df8fdd8e18889fd16e4d26f39fb7c727162fb80db6523c7fadd1a.0.tmp

Filesize
65KB

MD5
1e48b5204028cf0158dfded29fc9ab4b

SHA1
504c9a43cb0a7fa2b65e385424bca31ceeb9af1b

SHA256
86e71ec884c0834f2ca198a69aecb40400cc4dcdcfeabb3794b80b86e2eb145e

SHA512
7687f8a701571da320e137823104e53ecafd65662e67c1dba39ebb6190651f5e93984a3132952dd3bba3c5ed77b79e3b5e8e878bdc3767887d5d91e1b21780c0

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/image_manager_disk_cache/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/user/0/hd.glitter.hndwallpaper/cache/volley/3236203701838353227

Filesize
52KB

MD5
059d0f7b019b7926e53be595173b2c9f

SHA1
a33a1890d1299d9c136094d7f0aba93424c36ed1

SHA256
a093571d295e92f12bc0306a654733590a2d7e3e0e18629e5daa3c33862cec1a

SHA512
323112efaef149e2dfd7cabbaa19b6daa44e9e174ec6a8d92caee16ddb0b47c87d6398d91e999eea39666c9229f4c80d3bfcce615e08cb1a7413df87aba31da0

Download Submit
/data/user/0/hd.glitter.hndwallpaper/files/online

Filesize
2KB

MD5
d97912d9a8bfd1a5181055fd1eaf3307

SHA1
8d9c65b6814c1b71de3c997123c54bd7ea709037

SHA256
26be592bce8eba80463585813f15b095e8f5dbfd66997a8b1107b5415f15d051

SHA512
fe4078788fa3d77ebaf952cd17fbcbdb12ef9acc983338f7cdd02ccf6696651ca1e8e338a6224cf0db7d786b29817826360ff086c4038385215f48d164da1e92

Download Submit
/data/user/0/hd.glitter.hndwallpaper/files/online

Filesize
3KB

MD5
f343818fa54fd572014885373686023b

SHA1
aadfeefd7841074515db825e8d4e193c363a80b1

SHA256
b90666e09bdddbd0fb45b418447146fb371bf2e082bf47678ece48fa375fc7c8

SHA512
ddf137e5429859a9ecffab42574439626b59d2359bd59f0d0bcabf78901c73ec7af38a33064807b4724a830237504586514cbb574751e6479062af8b64ec0aee

Download Submit
/data/user/0/hd.glitter.hndwallpaper/files/penetrate

Filesize
27KB

MD5
21406ba5526c0470633b02b8ba1b65d8

SHA1
76ac1787d4959fb993c3439f3495ad3c092b7cbb

SHA256
b5ea5d1da64e00e9aa6475d822d8cdd03dd819c29713c1e3a1892be9b1badb8a

SHA512
a625eb0711a0900aed89f9178e70edc8cfbf48d13e10474a699666f700377210dda9ab6b96ab99d6a6bf9f540500dbdaedf985cd48e9d945832f0a36e21a1b2a

Download Submit
/data/user/0/hd.glitter.hndwallpaper/files/penetrate

Filesize
56KB

MD5
e29be62e8261bcbd531d72006d8daae2

SHA1
d86ebd909aa45a26425ec652fb2fb1ce8680b514

SHA256
ee9af2b39e7b09bb76e5fda8059834c62902945db905057930365676132c5798

SHA512
b0be47e72b4bbad59759d5544c4f790a0538dc97eb83a536c51f2be133ba983bd53da39217bc2c9dc03531ef2ef7e73b0b955189fac2541c85415e769af91deb

Download Submit
/data/user/0/hd.glitter.hndwallpaper/oat/x86_64/[email protected]

Filesize
348B

MD5
291bfcb64e451b658dc99ad353cdf559

SHA1
948a5f74d82bec0155ffa5556ba1c73b1cabf347

SHA256
95e9c52f62f7ee3f8798097127e35bd0af10fe58da204c00865674c2ffb34a11

SHA512
dd192b67f8531ef751861b1e72b6b46e8d98c7d74c03e48258737cbebbe98ead84c2d3e58d1b737e5a01ea670942c163a09c9f699e71613230170fd964efe3ec

Download Submit
/data/user/0/hd.glitter.hndwallpaper/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
97ccd9a2b2063143df56b6937f961ca4

SHA1
5e78a91ae5df289ce83443cb7d5589dd3504fb5d

SHA256
248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

SHA512
86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

Download Submit