Overview

overview

7

Static

static

7

jokerlives...pp.apk

android-9-x86

6

jokerlives...pp.apk

android-11-x64

7

AntDesign.ttf

windows7-x64

3

AntDesign.ttf

windows10-2004-x64

7

Entypo.ttf

windows7-x64

3

Entypo.ttf

windows10-2004-x64

7

EvilIcons.ttf

windows7-x64

3

EvilIcons.ttf

windows10-2004-x64

7

Feather.ttf

windows7-x64

3

Feather.ttf

windows10-2004-x64

7

FontAwesome.ttf

windows7-x64

3

FontAwesome.ttf

windows10-2004-x64

7

FontAwesom...ds.ttf

windows7-x64

3

FontAwesom...ds.ttf

windows10-2004-x64

7

FontAwesom...ar.ttf

windows7-x64

3

FontAwesom...ar.ttf

windows10-2004-x64

7

FontAwesom...id.ttf

windows7-x64

3

FontAwesom...id.ttf

windows10-2004-x64

7

FontAwesom...ds.ttf

windows7-x64

3

FontAwesom...ds.ttf

windows10-2004-x64

7

FontAwesom...ar.ttf

windows7-x64

3

FontAwesom...ar.ttf

windows10-2004-x64

7

FontAwesom...id.ttf

windows7-x64

3

FontAwesom...id.ttf

windows10-2004-x64

7

Fontisto.ttf

windows7-x64

3

Fontisto.ttf

windows10-2004-x64

7

Foundation.ttf

windows7-x64

3

Foundation.ttf

windows10-2004-x64

7

Ionicons.ttf

windows7-x64

3

Ionicons.ttf

windows10-2004-x64

7

MaterialCo...ns.ttf

windows7-x64

3

MaterialCo...ns.ttf

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    jokerlivestream-app.apk

  • Size

    63.8MB

  • Sample

    231108-qbz54ada98

  • MD5

    7f56980839cbd1fe2f166da227a58a9b

  • SHA1

    02b5b28e59cbac184d6c0b5ec4305ca0884f8f99

  • SHA256

    c00c780ab99e3f252d7ccc2d0d70c43cc16c2a956e8cd9b0bdd16d18f6a90b84

  • SHA512

    039761ee3179cc6e519cfc3babb48a01e50d420b31630472d2fb2d28e0d361f8ad2ff8e766c3a08736a25b96f588a066d64819817d5ee3524b472890f154d418

  • SSDEEP

    1572864:Aei/noTuO7LB0vPbfplOcssi+ysvWNfdru9rFr8USqWHNIIay37GzK:Ae6ymbfplpsvLw81rm1/APl7uK

Score
7/10
androidevasion

Malware Config

Targets

    • Target

      jokerlivestream-app.apk

    • Size

      63.8MB

    • MD5

      7f56980839cbd1fe2f166da227a58a9b

    • SHA1

      02b5b28e59cbac184d6c0b5ec4305ca0884f8f99

    • SHA256

      c00c780ab99e3f252d7ccc2d0d70c43cc16c2a956e8cd9b0bdd16d18f6a90b84

    • SHA512

      039761ee3179cc6e519cfc3babb48a01e50d420b31630472d2fb2d28e0d361f8ad2ff8e766c3a08736a25b96f588a066d64819817d5ee3524b472890f154d418

    • SSDEEP

      1572864:Aei/noTuO7LB0vPbfplOcssi+ysvWNfdru9rFr8USqWHNIIay37GzK:Ae6ymbfplpsvLw81rm1/APl7uK

    Score
    7/10
    evasion

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Removes a system notification.

      evasion
    behavioral1behavioral2

    • Target

      AntDesign.ttf

    • Size

      68KB

    • MD5

      3a2ba31570920eeb9b1d217cabe58315

    • SHA1

      4e77868439280fb434d4697c7b911271406c81f3

    • SHA256

      7955ca14127b30412c114eb13cfd702b5dab265feb1880d1695d73caa824cde1

    • SHA512

      41842c1fdea06a042d0faa4fc50e0637e69ed56dfa06ae0e34878b5f4096d624f07cca0ab78e12e3701c2c7bcd40af8b095e8101f8a23e37edc4f1da3d459457

    • SSDEEP

      1536:lUDjuprnwV0C7S6qlvfSlBCBdbirbD24WKkvemVul3Wnq3:yDqw0uS6q4lN24WKkveHll

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3behavioral4

    • Target

      Entypo.ttf

    • Size

      64KB

    • MD5

      31b5ffea3daddc69dd01a1f3d6cf63c5

    • SHA1

      12b5670eb178138f77285d5f2c246d3cc5fa67d6

    • SHA256

      16f92298587bab2b469bc13c0dfc6d5d171bca10bad0c9053ad16bc023bf717d

    • SHA512

      623da02ee5573210b6f30b1ef7d65dd9ea4cc712443884207479362edbb37584c0b437bbb1630c25ce194b014cd76b8aa05e737d64a0a84fc41ca4a3ab07564f

    • SSDEEP

      1536:eexaJwd3nwRNmJeBc3lDHbmXtrdoJyLwoQflcrWyu:eeIfNg3mo+Cf+1u

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral5behavioral6

    • Target

      EvilIcons.ttf

    • Size

      13KB

    • MD5

      140c53a7643ea949007aa9a282153849

    • SHA1

      91d377ea3cf47490b256c2ed081704a7dabdae0c

    • SHA256

      a5caeb4d395c5e32f1d5a30acb382aebc664f1badfd149319907f2215e4e3e26

    • SHA512

      90081da193c95239fd2735b710bd019212b3ee545a0d82f756a5cc46e6a04e53b0781c302f9ed2ff3e49b8c72f8233a8ab41c748013f04fc384419d4bc3aa004

    • SSDEEP

      384:29l16YGdU7KcnIXYwmjfj71s6wv35j4eC:2J6YAU7KcnIIwmjfjhpwv3Vw

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral7behavioral8

    • Target

      Feather.ttf

    • Size

      54KB

    • MD5

      a76d309774d33d9856f650bed4292a23

    • SHA1

      e6604258b1ced5efd51360875d782fca65381d47

    • SHA256

      57599360fc9b80bce473b364f7f255b552019ec47462428018cb0e0f838462b4

    • SHA512

      c029b9b3433d958d23c4e26e3bbf6ad5146d960377b87dcc7d89650b2b83a0766e6cb6bf07e20658b88afdf65bc502810b57cd7235c01079eadc5197a1a64933

    • SSDEEP

      1536:bD4BCER+8aUwhcY6sb+xapd9h71oLlLNVUwGuVW0Q/nBY3P4Hwb4rsvAxvrVVRYS:bDUCc+8DwaNsi8pXh71oLlLNVUNocW4f

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral10behavioral9

    • Target

      FontAwesome.ttf

    • Size

      161KB

    • MD5

      b06871f281fee6b241d60582ae9369b9

    • SHA1

      13b1eab65a983c7a73bc7997c479d66943f7c6cb

    • SHA256

      aa58f33f239a0fb02f5c7a6c45c043d7a9ac9a093335806694ecd6d4edc0d6a8

    • SHA512

      9ffb91e68c975172848b4bba25284678cc2c6eb4fb2d42000aa871c36656c4cebc28bf83c94df9afdfbf2407c01fe6b554c660b9b5c11af27c35acadfe6136ac

    • SSDEEP

      3072:3bhEnD+IzsU9z9QJ6/P3Xe2iEiEPGFCMW1JVJG6wVTDsk6BmG6S1yKshojskO+b2:3enD+IzsU9z9QJ6/PO2FiEP2C/DVJG6I

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral11behavioral12

    • Target

      FontAwesome5_Brands.ttf

    • Size

      130KB

    • MD5

      3b89dd103490708d19a95adcae52210e

    • SHA1

      3fa2d67cef22da5c3f3eb5730c6afbd6fecf0372

    • SHA256

      06f4d00923ea24697df5df0b92984175991d8bd25776a02d531bb401e393ec42

    • SHA512

      91d1f49e76f7e560525b71255d632a8b615f03bf5b7a568a07f5ce13bbffd30956e6f43ecc8073343d43ca05f702ccfc951fe89493bb0e51e5cf98572271857c

    • SSDEEP

      3072:MhPzoVcBscZS23Dukm6YSaj57FCvhf4UkWvLc:MhroVZifDfYN9kvhvvzc

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral13behavioral14

    • Target

      FontAwesome5_Regular.ttf

    • Size

      32KB

    • MD5

      1f77739ca9ff2188b539c36f30ffa2be

    • SHA1

      7d849a3981a716e2ba4a84634bc57d0b8054a6a3

    • SHA256

      c651b8a67d3193206f622c3c3b0fbca4a2f2727108c4212b52c1e2a2e84c9b31

    • SHA512

      b5f7c23d735838da837cbc92c47042a9bc196a81b021572f5fc9e6ee9607a1c0b07cba7ff64ef54672bd5d970d6f9c842d0ccf28b9997b95b4ecbb1f2f8aae7d

    • SSDEEP

      384:2aILh/4eF1sQQbC5LbC4TH/s+v4B3Q89h8g6WIHL8ScQUd:2dLZ49tep3/8Bn9vIHL8ScQUd

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral15behavioral16

    • Target

      FontAwesome5_Solid.ttf

    • Size

      197KB

    • MD5

      605ed7926cf39a2ad5ec2d1f9d391d3d

    • SHA1

      c1b9fae262f42868c075ac865a8ab34920e20a2c

    • SHA256

      3d06af1f31cd83ace7a265a014b8fb5dee15770ecac8f7a55555190e627e03c2

    • SHA512

      6ca7651cb70ee32be71ef4088443c4d47ffbf5047f8885bfd45468e34499a190e8f87256f02b4e6b988e7277e2d6a38d2881c1aa3f781e499fd56035f4e57d53

    • SSDEEP

      6144:BtrDdIZG2nqJElpL3im9+3Kz9BngKbtPLLd5MK:v6TnSEl1yt6zzng0Lz

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral17behavioral18

    • Target

      FontAwesome6_Brands.ttf

    • Size

      181KB

    • MD5

      0ef11ce096706bcafc520aee12162ae4

    • SHA1

      a14a91d8c170fc9e159040f6794369d829e0859e

    • SHA256

      b1d1c1b012e1a7621cc84fd1e5c1dbab92012f40df7423e879ab2fa493520fee

    • SHA512

      8d9e0fc7692a16ccd09d3132d3f62f08d79795ff068036dadd7831c77b01078bfc7b716acedc738dc8357b5833ba57b701841cdaf2f24910ac7e67ca71598e06

    • SSDEEP

      3072:JMzh9YmuIJ6+E02aHmPrbYEhJhbUS2b3yOhSjtJveuc+/2X7zn:AhxJ6+E02aGPPrO3yOKJveQ/mnn

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral19behavioral20

    • Target

      FontAwesome6_Regular.ttf

    • Size

      60KB

    • MD5

      40e6df55734232692408d76ad5f9c34a

    • SHA1

      dad3ad71b383789bb62c249742ef59e34685e7d0

    • SHA256

      d7b19fe201101b08ab1344ffd472d59ce652ad3c3fb5f194c3e35aa2908e674a

    • SHA512

      73689a61a374db5fbaf264b09b84afe3c405746d4281cfbcb40fe9e922908c4d54d60f246d1ff4cceeb35b805b58c89f3996d6d720f9c154094568cd061b9319

    • SSDEEP

      1536:UCmXyhkX14/ovkiaU9+oV3Nr9K6uJ4JH5:UCmdP1NdrU6uJ4JZ

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral21behavioral22

    • Target

      FontAwesome6_Solid.ttf

    • Size

      388KB

    • MD5

      c0bf087a238488d351270a35c8f0cca0

    • SHA1

      3eb9b4b2ea22711b96e3b356196fd20b4f17fb0e

    • SHA256

      e4f6a7e9d1a7c0b4968d9cb9d422e8d9cdca229f7ff3aeac7f96e4baa25c7680

    • SHA512

      be3dd0723b19f7d3215ef90a5bf7f93e73c79ecbea9d2a8dfe8211fb61949086f31f1504cb463caca111a052c0d95b365bf20b38b27bf2713eccd2eb578913c7

    • SSDEEP

      6144:8azyo7v2BFKbPs0HUx9ZolBWaseDXotWoUlpXa89C:8P2v2fKbPXUzZ8WabgWosA80

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral23behavioral24

    • Target

      Fontisto.ttf

    • Size

      306KB

    • MD5

      b49ae8ab2dbccb02c4d11caaacf09eab

    • SHA1

      c090a3ec96a3f1bb9b615c2f3f204ce0dcdcdbc3

    • SHA256

      94dab9f1d5b13ea0769d124a2da0d02433f3b99d6dea5a07c0446a77158100c0

    • SHA512

      0ed4331e244e0c1db7da7ad65772f5498795da20c0d19cf08e10174826145748b4a85ce11f10f0c3ecb558a311f6e70091cc34f80f92e8bf846ef743987f2104

    • SSDEEP

      6144:2XOlPBt1RAGgRm8MV0U3yPOFQ/1c1qN7mjZdGLY7KLwmtLGhACvfsWD8zZCKq/Be:2XMt1RwU8c0OO9YUsZxWwvfsHq/BXHat

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral25behavioral26

    • Target

      Foundation.ttf

    • Size

      55KB

    • MD5

      e20945d7c929279ef7a6f1db184a4470

    • SHA1

      4b2bce6c792493a4a5716b6fec2dbefe89492c3f

    • SHA256

      7e1dd03dd4ce90b658052554cd7459df16716717389a552fa4c6d56a5f8933e6

    • SHA512

      436759ba495479a1477e9e62c81b78771805de7d1689ed11eac52e1b8e8d3d79b3455c5446eaa602eaed78b7bbd5dfaf370229759939166b51ba0097ab6a1912

    • SSDEEP

      768:VMqwKxzATbtc13Q0dwWfJycdymiqCiKKamPCoCkkw1y0DJ6Exby9ypiOX:VvATbCtFjfbViZiK9mrDNL+9aXX

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral27behavioral28

    • Target

      Ionicons.ttf

    • Size

      432KB

    • MD5

      6148e7019854f3bde85b633cb88f3c25

    • SHA1

      86e07c3d974eb09099e6e5a9b3b8310303cf0feb

    • SHA256

      9c7fb9071a6c28582c6b84468cbff2c7a71e02b17e3a3b4548a159938d22916b

    • SHA512

      2073f3b5e26bb9a3c52fdd82a0f2c0a4f086217c274ee5738f175cc9583a8f75ebb05b43cbae539e32618e2ddf22abd028282b101a1b52345d2b74e54ef2b2cf

    • SSDEEP

      12288:jmgnFw1x1Z97mn2Oe1PDhdksw+kALOvPBpg/Z/DIsZ/mhbbEa:CIwtZ97mn2Osb7kt+pKH0/ZrIswhfEa

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral29behavioral30

    • Target

      MaterialCommunityIcons.ttf

    • Size

      1.1MB

    • MD5

      b62641afc9ab487008e996a5c5865e56

    • SHA1

      4c2a838b00dbb5e8bb1b368fce0de534e8eb241c

    • SHA256

      9e94d4dbe2e87ea495f0d42d879146bc74c4c4e910776a49154a15eefa37ef59

    • SHA512

      d5a8b7b0b82227fa3c76b9db3f1dc3515ddc3b89538e9796ed9ab17b77c7d684d2b1f518c3dc21bba48dc81401b3386d9f45e52086e70c662400a2e386e43651

    • SSDEEP

      24576:Tus5aDYLDAOnOJMW3sjn6/uiALFUm1dtT1r4atWS5091mR4weygOtZyQl8IJCj:T7fxXgOfJy

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral31behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

15
T1012

System Information Discovery

30
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks