joker | b6b695b53e087bb8305813c19244a9a53195bccc55959c7bced6c0bc80c462d8

General

Target

b6b695b53e087bb8305813c19244a9a53195bccc55959c7bced6c0bc80c462d8
Size

6.1MB
Sample

240523-p6s5labe48
MD5

a61d13f7c065aa230ec05b3c26ed129b
SHA1

3804e88d7661e9b5566432d0af0a1f263265a0d7
SHA256

b6b695b53e087bb8305813c19244a9a53195bccc55959c7bced6c0bc80c462d8
SHA512

a38a7cbb3a7292ef7fde6cbb9dc5d333be91c074e828deb0bbac990c49d2bbe8680c8392e13a6d00f36ca1e2f991788dff1bcbbc0b56c66106b620e1b6c95dfc
SSDEEP

98304:KErfwRhP2VlnUlhraYXgpFIqwP95FzwJh09kdbBRXFJn5GNMHZwo7URasBEurCky:bMRx4MyDCvRwJqydP38NMM5Cky

Score

10^/10

Malware Config

Targets

- Target
  
  b6b695b53e087bb8305813c19244a9a53195bccc55959c7bced6c0bc80c462d8
- Size
  
  6.1MB
- MD5
  
  a61d13f7c065aa230ec05b3c26ed129b
- SHA1
  
  3804e88d7661e9b5566432d0af0a1f263265a0d7
- SHA256
  
  b6b695b53e087bb8305813c19244a9a53195bccc55959c7bced6c0bc80c462d8
- SHA512
  
  a38a7cbb3a7292ef7fde6cbb9dc5d333be91c074e828deb0bbac990c49d2bbe8680c8392e13a6d00f36ca1e2f991788dff1bcbbc0b56c66106b620e1b6c95dfc
- SSDEEP
  
  98304:KErfwRhP2VlnUlhraYXgpFIqwP95FzwJh09kdbBRXFJn5GNMHZwo7URasBEurCky:bMRx4MyDCvRwJqydP38NMM5Cky
Score

8^/10

banker discovery evasion impact persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2
- Target
  
  tcore.jar
- Size
  
  142KB
- MD5
  
  0178df0f4cc6d767e964e590cdba7014
- SHA1
  
  b17f67d0e42b9290937d784343241dac6a88ffe9
- SHA256
  
  03970a2284ba10d93188127f43edcd838d7c9824c3511dae10e3693bb6057b3f
- SHA512
  
  6fe8e2e9a72612d6917677f6562406943b0a7a832d40438dfeaaf86ca303ae19e92d65a55e5b20902a79b343c2ed8e2cd47322ba3a15955cb21c73274876c76f
- SSDEEP
  
  3072:DD1Q/QgpcRiLw5RU6kUFTkTSGbHmsb756:D0QgpQV3U5pSsG26
Score

1^/10
behavioral3 behavioral4 behavioral5

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Checks CPU information

Checks memory information

Queries information about running processes on the device

Queries information about the current Wi-Fi connection

Queries the mobile country code (MCC)

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks if the internet connection is available

Queries the unique device ID (IMEI, MEID, IMSI)

Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5