Overview

overview

10

Static

static

7

HD Screen ....1.apk

android-10-x64

HD Screen ....1.apk

android-11-x64

7

HD Screen ....1.apk

android-9-x86

10

Analysis

  • max time kernel
    2525043s
  • max time network
    161s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    09/01/2023, 13:26

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    HD Screen Mirroring_4.0.1.apk
  • Size 15.8MB
  • Sample230109-qpljvsec87
  • SHA256 7f3384e9c8d066c046e4ae4b9e16e0a63a430b550cf5ef28d8be21342a9f9eb2
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
jokerevasioninfostealertrojan

Malware Config

Extracted

Family

  • joker

C2

  • https://adcbk.oss-eu-central-1.aliyuncs.com/af2

  • https://adcbk.oss-eu-central-1.aliyuncs.com/fbhx

Signatures

  • joker

    Joker is an Android malware that targets billing and SMS fraud.

    infostealertrojanjoker
  • Checks Android system properties for emulator presence. 1 IoCs
  • Loads dropped Dex/Jar 7 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs
    evasion

Processes

  • com.hdscreen.video.casttv
    1⤵
    • Checks Android system properties for emulator presence.
    • Loads dropped Dex/Jar
    • Removes a system notification.
    PID:4143
  • com.hdscreen.video.casttv:lelinkps
    1⤵
      PID:4305

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          Web Data
          • Path /data/user/0/com.hdscreen.video.casttv/app_webview/Web Data
          • Size 104KB
          • SHA256 47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Web Data-journal
          • Path /data/user/0/com.hdscreen.video.casttv/app_webview/Web Data-journal
          • Size 1KB
          • SHA256 62f222d36aa858d7f22628d1e1e1046db5bf7ec02c802ec11e3bf1363b228d88
          • MD5 SHA1 SHA512
          Submit Download

          metrics_guid
          • Path /data/user/0/com.hdscreen.video.casttv/app_webview/metrics_guid
          • Size 36B
          • SHA256 4a3d22bab78c68212c57e3a16aad59f51ee85a3f5253d274cb1e85c69116a777
          • MD5 SHA1 SHA512
          Submit Download

          androidx.work.workdb
          • Path /data/user/0/com.hdscreen.video.casttv/databases/androidx.work.workdb
          • Size 4KB
          • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
          • MD5 SHA1 SHA512
          Submit Download

          androidx.work.workdb-journal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/androidx.work.workdb-journal
          • Size 524B
          • SHA256 9245361107f3fdf40adcbd1286964726aac8994d5106e1dd9009b104c13628af
          • MD5 SHA1 SHA512
          Submit Download

          androidx.work.workdb-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/androidx.work.workdb-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          androidx.work.workdb-wal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/androidx.work.workdb-wal
          • Size 88KB
          • SHA256 1423b7e4ac8d64b482fcee4aec471a54a97818560b3eeb64655c582b7ed21df4
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          com.google.android.datatransport.events
          • Path /data/user/0/com.hdscreen.video.casttv/databases/com.google.android.datatransport.events
          • Size 4KB
          • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
          • MD5 SHA1 SHA512
          Submit Download

          com.google.android.datatransport.events-journal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/com.google.android.datatransport.events-journal
          • Size 524B
          • SHA256 81fefabc3ce6c9d6bfcc9ba65ce2dfc4593a9f06e2bab57576e7c13cfd386d5a
          • MD5 SHA1 SHA512
          Submit Download

          com.google.android.datatransport.events-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/com.google.android.datatransport.events-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          com.google.android.datatransport.events-wal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/com.google.android.datatransport.events-wal
          • Size 64KB
          • SHA256 db5adb045c7b2129f02e8ced3559a8f0157c40c06e0e0f01cbd10f15115b4cdf
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          google_app_measurement_local.db
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db
          • Size 20KB
          • SHA256 fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          google_app_measurement_local.db-journal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-journal
          • Size 524B
          • SHA256 d3243cf2e430adeac49cc4d3c6d052766d6a80048d1f53e2abaf73caf4483f31
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-wal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-wal
          • Size 36KB
          • SHA256 9d472f75e8fbccc7863844a37414fe893242e9afb4c678ae735d6f34ab0c61c2
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          google_app_measurement_local.db-wal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-wal
          • Size 4KB
          • SHA256 c6214480b99324b10ee45d0acd9fad63bc3a435acff1327b1400b30b83d51ed3
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          google_app_measurement_local.db-wal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-wal
          • Size 4KB
          • SHA256 e1b2592b022e8d6497091f4aed72e2eadbe67eb738dd298f7012e338eb6da37a
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          google_app_measurement_local.db-wal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-wal
          • Size 4KB
          • SHA256 c9a2df56644288c4d518a8af001f4f96ef474d1e46d4d8ef7c5818eccd56de32
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          google_app_measurement_local.db-wal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-wal
          • Size 4KB
          • SHA256 3898c16e23cae3a7a27912292dfdfcdeed377e0d628040e475f306be948f0d3c
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          google_app_measurement_local.db-wal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-wal
          • Size 4KB
          • SHA256 1452fd5f1dee1a8b73d2817263a990c125451d47b2a664297241c9c46fb554dd
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          google_app_measurement_local.db-wal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-wal
          • Size 4KB
          • SHA256 949374665186eb5e2d1bea0243a2ddb8e0fe5181486f5d4c4ab443b2771dc936
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          google_app_measurement_local.db-wal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-wal
          • Size 4KB
          • SHA256 36bf6f88f4bed3a01fea2e6df799e80577665fa52519d11de0e7b2d65eab1e33
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          google_app_measurement_local.db-wal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-wal
          • Size 4KB
          • SHA256 c358b4c6de4a1fa8322f6b5f71c585aa0a4c5d4156bbec0e0ca10a477e11bba5
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          google_app_measurement_local.db-wal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-wal
          • Size 4KB
          • SHA256 78ac53390cac528d41dff1693f7d36f591db4e07e8da2f08215913b7055fa29e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          google_app_measurement_local.db-wal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-wal
          • Size 4KB
          • SHA256 5b81ef8e97dd97b5bdf91f5f2708f16002ef035a4c7a5302a4e3aeb16088682e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          google_app_measurement_local.db-wal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/google_app_measurement_local.db-wal
          • Size 4KB
          • SHA256 bebe9ba70546ef5264c99baabcf0598fa0b449653ab86a4e3fb93f5db2c2ceeb
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          screenNew.db
          • Path /data/user/0/com.hdscreen.video.casttv/databases/screenNew.db
          • Size 4KB
          • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
          • MD5 SHA1 SHA512
          Submit Download

          screenNew.db-journal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/screenNew.db-journal
          • Size 524B
          • SHA256 e6893ab13dac7a4fa1808bf1f7367d8577ab26bf7292febfdb88a355ae6673cf
          • MD5 SHA1 SHA512
          Submit Download

          screenNew.db-shm
          • Path /data/user/0/com.hdscreen.video.casttv/databases/screenNew.db-shm
          • Size 8B
          • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
          • MD5 SHA1 SHA512
          Submit Download

          screenNew.db-wal
          • Path /data/user/0/com.hdscreen.video.casttv/databases/screenNew.db-wal
          • Size 48KB
          • SHA256 69b112f156bb28ed842cb7b34da828577dccda0865d62319233d20fc9704769d
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          ionsxg
          • Path /data/user/0/com.hdscreen.video.casttv/files/ionsxg
          • Size 22KB
          • SHA256 263562079f6d86c5888171586229d2f1440e9f576f0b159bff25dc44df4b54f7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          ionsxg
          • Path /data/user/0/com.hdscreen.video.casttv/files/ionsxg
          • Size 46KB
          • SHA256 5f26a6eb8f372e1658a373a980ee4e2770beee4a15b4d103753635bd33b6a085
          • MD5 SHA1 SHA512 SSDEEP
          Download

          ionsxg
          • Path /data/user/0/com.hdscreen.video.casttv/files/ionsxg
          • Size 46KB
          • SHA256 5f26a6eb8f372e1658a373a980ee4e2770beee4a15b4d103753635bd33b6a085
          • MD5 SHA1 SHA512 SSDEEP
          Download

          juvenile
          • Path /data/user/0/com.hdscreen.video.casttv/files/juvenile
          • Size 8KB
          • SHA256 c965a23dfd4a2d79ba2a39af50e4b47c808a6671e74751fe258154c69cceb8fb
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          juvenile
          • Path /data/user/0/com.hdscreen.video.casttv/files/juvenile
          • Size 14KB
          • SHA256 752af9ecd9c478522d1d888cb1b8b71b17c82a9b3b744c7a353f73dc2ee09301
          • MD5 SHA1 SHA512 SSDEEP
          Download

          juvenile
          • Path /data/user/0/com.hdscreen.video.casttv/files/juvenile
          • Size 14KB
          • SHA256 752af9ecd9c478522d1d888cb1b8b71b17c82a9b3b744c7a353f73dc2ee09301
          • MD5 SHA1 SHA512 SSDEEP
          Download

          enjoy_statistics2
          • Path /data/user/0/com.hdscreen.video.casttv/files/mmkv/enjoy_statistics2
          • Size 4KB
          • SHA256 ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7
          • MD5 SHA1 SHA512
          Submit Download

          enjoy_statistics2.crc
          • Path /data/user/0/com.hdscreen.video.casttv/files/mmkv/enjoy_statistics2.crc
          • Size 4KB
          • SHA256 ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7
          • MD5 SHA1 SHA512
          Submit Download

          WebViewChromiumPrefs.xml
          • Path /data/user/0/com.hdscreen.video.casttv/shared_prefs/WebViewChromiumPrefs.xml
          • Size 127B
          • SHA256 bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
          • MD5 SHA1 SHA512
          Submit Download

          cast_info.xml
          • Path /data/user/0/com.hdscreen.video.casttv/shared_prefs/cast_info.xml
          • Size 118B
          • SHA256 155213d7608f2778d3d2a8638b76511e93e5eb692d01a3ef6cbd9c9e3f234ac8
          • MD5 SHA1 SHA512
          Submit Download

          cast_info.xml
          • Path /data/user/0/com.hdscreen.video.casttv/shared_prefs/cast_info.xml
          • Size 222B
          • SHA256 878bc362ad724d63ed8329213f893f8495bde53fc954f2f6fb36845942b25cdf
          • MD5 SHA1 SHA512
          Submit Download

          com.google.android.gms.measurement.prefs.xml
          • Path /data/user/0/com.hdscreen.video.casttv/shared_prefs/com.google.android.gms.measurement.prefs.xml
          • Size 122B
          • SHA256 2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
          • MD5 SHA1 SHA512
          Submit Download

          com.google.android.gms.measurement.prefs.xml
          • Path /data/user/0/com.hdscreen.video.casttv/shared_prefs/com.google.android.gms.measurement.prefs.xml
          • Size 65B
          • SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
          • MD5 SHA1 SHA512
          Submit Download

          com.hdscreen.video.casttv_preferences.xml
          • Path /data/user/0/com.hdscreen.video.casttv/shared_prefs/com.hdscreen.video.casttv_preferences.xml
          • Size 116B
          • SHA256 3a3a7996b75b6a30aaf1113350c8cdc606d93b27333a0eaaf902e512ff9af518
          • MD5 SHA1 SHA512
          Submit Download

          com.hdscreen.video.casttv_preferences.xml
          • Path /data/user/0/com.hdscreen.video.casttv/shared_prefs/com.hdscreen.video.casttv_preferences.xml
          • Size 279B
          • SHA256 ffa56025a47f789dc4c15a1f909de3e915096c8fdad92cff11f3197ecbed24bd
          • MD5 SHA1 SHA512
          Submit Download

          enjoy_statistics2.xml
          • Path /data/user/0/com.hdscreen.video.casttv/shared_prefs/enjoy_statistics2.xml
          • Size 65B
          • SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
          • MD5 SHA1 SHA512
          Submit Download

          pro_pid.xml
          • Path /data/user/0/com.hdscreen.video.casttv/shared_prefs/pro_pid.xml
          • Size 110B
          • SHA256 b8a63a5501c600c5b5f931f3d95b7979415368e638711188fa3e89be4e6bc19c
          • MD5 SHA1 SHA512
          Submit Download

          Anonymous-DexFile@0xc5177000-0xc54a13dc
          • Path Anonymous-DexFile@0xc5177000-0xc54a13dc
          • Size 3.2MB
          • SHA256 cd93973550917ea1acc9683758d66ccd7f03b3401d26eb385b65613987cbe90d
          • MD5 SHA1 SHA512 SSDEEP
          Download

          Anonymous-DexFile@0xe047b000-0xe047c60c
          • Path Anonymous-DexFile@0xe047b000-0xe047c60c
          • Size 5KB
          • SHA256 54740065a6129c963750a07faad02ba033c41ef163e712577c5b57402f626c34
          • MD5 SHA1 SHA512 SSDEEP
          Download

          Anonymous-DexFile@0xe2d82000-0xe2d8360c
          • Path Anonymous-DexFile@0xe2d82000-0xe2d8360c
          • Size 5KB
          • SHA256 54740065a6129c963750a07faad02ba033c41ef163e712577c5b57402f626c34
          • MD5 SHA1 SHA512 SSDEEP
          Download