joker | b6b695b53e087bb8305813c19244a9a53195bccc55959c7bced6c0bc80c462d8

General

Target

b6b695b53e087bb8305813c19244a9a53195bccc55959c7bced6c0bc80c462d8
Size

6.1MB
Sample

240523-p6s5labe48
MD5

a61d13f7c065aa230ec05b3c26ed129b
SHA1

3804e88d7661e9b5566432d0af0a1f263265a0d7
SHA256

b6b695b53e087bb8305813c19244a9a53195bccc55959c7bced6c0bc80c462d8
SHA512

a38a7cbb3a7292ef7fde6cbb9dc5d333be91c074e828deb0bbac990c49d2bbe8680c8392e13a6d00f36ca1e2f991788dff1bcbbc0b56c66106b620e1b6c95dfc
SSDEEP

98304:KErfwRhP2VlnUlhraYXgpFIqwP95FzwJh09kdbBRXFJn5GNMHZwo7URasBEurCky:bMRx4MyDCvRwJqydP38NMM5Cky

Score

10^/10

Malware Config

Targets

- Target
  
  b6b695b53e087bb8305813c19244a9a53195bccc55959c7bced6c0bc80c462d8
- Size
  
  6.1MB
- MD5
  
  a61d13f7c065aa230ec05b3c26ed129b
- SHA1
  
  3804e88d7661e9b5566432d0af0a1f263265a0d7
- SHA256
  
  b6b695b53e087bb8305813c19244a9a53195bccc55959c7bced6c0bc80c462d8
- SHA512
  
  a38a7cbb3a7292ef7fde6cbb9dc5d333be91c074e828deb0bbac990c49d2bbe8680c8392e13a6d00f36ca1e2f991788dff1bcbbc0b56c66106b620e1b6c95dfc
- SSDEEP
  
  98304:KErfwRhP2VlnUlhraYXgpFIqwP95FzwJh09kdbBRXFJn5GNMHZwo7URasBEurCky:bMRx4MyDCvRwJqydP38NMM5Cky
Score

8^/10

banker discovery evasion impact persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about the current Wi-Fi connection
  Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2
- Target
  
  tcore.jar
- Size
  
  142KB
- MD5
  
  0178df0f4cc6d767e964e590cdba7014
- SHA1
  
  b17f67d0e42b9290937d784343241dac6a88ffe9
- SHA256
  
  03970a2284ba10d93188127f43edcd838d7c9824c3511dae10e3693bb6057b3f
- SHA512
  
  6fe8e2e9a72612d6917677f6562406943b0a7a832d40438dfeaaf86ca303ae19e92d65a55e5b20902a79b343c2ed8e2cd47322ba3a15955cb21c73274876c76f
- SSDEEP
  
  3072:DD1Q/QgpcRiLw5RU6kUFTkTSGbHmsb756:D0QgpQV3U5pSsG26
Score

1^/10
behavioral3 behavioral4 behavioral5