Analisis Karekteristik Malware Joker Berdasarkan Fitur Menggunakan Metode Statis Pada Platform Android

Malware is the main enemy of every operating system, one of which is the Android operating system. One of the malware that had circulated in mid-2019 is the Joker malware. Joker malware has at least been planted or infected with 23 applications and has been circulating on the Android app download platform. To prove and find out what the characters are and what is done from Joker malware, this research will use one method of malware analysis, namely the static analysis method. By using a static analysis method, it is possible to find out some of the characters of the malware, such as how the malware works, the location of malware activities in the infected application, to the origin of the malware. There are 2 tools used to do static analysis on Joker malware, namely, Andropytool to extract some features that exist in APK and Dex2jar to decompile DEX files on APK so that they can see several lines of code used. The results found by using a static analysis of Joker malware are, the malware retrieves SIM card information on the user's device, targets the country of a particular user's device with MCC code, broadcasts hidden from or for infected applications, and communicates with a webserver using the service AWS