General

  • Target

    12882f4a5b32af11ce16272019829ad1_JaffaCakes118

  • Size

    31.7MB

  • Sample

    240504-nlfs4afd79

  • MD5

    12882f4a5b32af11ce16272019829ad1

  • SHA1

    8c1c4c0315ac70aabed48a675bff9edbd43d3de1

  • SHA256

    a42206883da57314e269a2833d5bb4cea19e8753f3abcca13902deb98fc10838

  • SHA512

    2c21d6b0d72edb29c68ed22d4ca1e07a128b30541b1ce20a23b608d0eab82f78a91b73784dab66e81a9e17c9da9cbad8a2d895f3d89a8f0c26acaea78246e675

  • SSDEEP

    786432:wMonQlUZocBqv1ROGphfAyWEwGEChfAyWTrg3baCaORfeB0xZ:MZvYvvlzVlv3baCaO+0z

Score
10/10

Malware Config

Extracted

Family

joker

C2

http://api.exc.mob.com:80

http://loc.map.baidu.com/offline_loc

https://readapi.imread.com/api/upgrade/v1/sdk/getBook

Targets

    • Target

      12882f4a5b32af11ce16272019829ad1_JaffaCakes118

    • Size

      31.7MB

    • MD5

      12882f4a5b32af11ce16272019829ad1

    • SHA1

      8c1c4c0315ac70aabed48a675bff9edbd43d3de1

    • SHA256

      a42206883da57314e269a2833d5bb4cea19e8753f3abcca13902deb98fc10838

    • SHA512

      2c21d6b0d72edb29c68ed22d4ca1e07a128b30541b1ce20a23b608d0eab82f78a91b73784dab66e81a9e17c9da9cbad8a2d895f3d89a8f0c26acaea78246e675

    • SSDEEP

      786432:wMonQlUZocBqv1ROGphfAyWEwGEChfAyWTrg3baCaORfeB0xZ:MZvYvvlzVlv3baCaO+0z

    Score
    1/10
    • Target

      com.anzogame.yys.plug.pkg

    • Size

      9.5MB

    • MD5

      3ba7605de2df154d45704b1d8afef130

    • SHA1

      38efbf943056fab575c7f70065c652cba3c73951

    • SHA256

      698671a7f9a84969cbedb069a71cbcde07201bc5e07ffcdff7a0468c600b815a

    • SHA512

      c610fe9644be3bc7eb60530caa5ce55ded1d533f17e72283bb2c271f9154f48f6e8aa200a6ec6cefe6ad135c65671d86108c76cf6926be1863fa09342a75fc3f

    • SSDEEP

      196608:0+Lk2rVEtBiy8/ZTdabRB6IqIhOsJuL32IlJIEbHCMvknjEBQYkC1AbiH0Jd:tLk2q6x0bv8sMjLpv+j0kC1Abw8

    Score
    1/10
    • Target

      com.anzogame.yys.plug.pkg

    • Size

      4.9MB

    • MD5

      23a3b474cc7c3d28dae10ec5e0d390c5

    • SHA1

      0ccf3b85d448870bae27352d23b30c29033506d3

    • SHA256

      dd2ccf65b2789ebc97451be1d18a087028030b05aa443743f9410e9267a89536

    • SHA512

      e4679d27d3391ecd99aad246960201202705e2df622275637d0e34cd4aca33412ec4ec4036d43a1d6af77587cd8767cf1d316fbbec12d82deee5d4c48c13dbf8

    • SSDEEP

      98304:g+ExGn8jqKSIN7BSlDpIzBLA3NS0KgGqxAWMY/oakbD:g+EsnrON7EDpI634079xJ/ga2

    Score
    1/10
    • Target

      imread.src

    • Size

      1.3MB

    • MD5

      df2ae6129a8f0eedddcf8d8157d45c25

    • SHA1

      3a36f636f2324d98a90aaa2bc78dd769026dc4b1

    • SHA256

      0a7fdec3cada01027ddb25e33832374d94a8a1bdf3b634901640d1d12c995348

    • SHA512

      199110ce7650b86688fcc32504224780a4709d01ad37d307e3939d9f7bb48d74fcf47d92e4deec41e595ecf76d7ae22cd48de33d16dfbcd0b29b54c2877f3134

    • SSDEEP

      24576:NfryxzHpeNa9qLimWewmThX2ijMmA+0ZzaJjOSIkZWgBmF4/A:xCen7Bw02NmAHZzaJjOSIkcgEOA

    Score
    1/10

MITRE ATT&CK Matrix

Tasks