hxxps://github[.]com/evilthreads669966/EvilScreen/releases/download/1[.]0[.]1/evilscreen[.]apk

Resubmissions

28/04/2024, 04:47

240428-fe17fsgf71 7

28/04/2024, 04:44

240428-fc77zsgf4x 7

Analysis

max time kernel
129s
max time network
136s
platform
android_x64
resource
android-33-x64-arm64-20240229-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240229-enlocale:en-usos:android-13-x64system
submitted
28/04/2024, 04:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/evilthreads669966/EvilScreen/releases/download/1.0.1/evilscreen.apk

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4205

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
56B

MD5
cecb649cb1fb79c3736936fcbef3bbf2

SHA1
2c95183d7d2b0cd68d15b3c4115189351fc08720

SHA256
09bda72e7c32a69e3268e0ebd8caa33684cbc954dd00c7d93a38830e348ef324

SHA512
b8aca3cf0ea838093bd29b70ead608597260b0e35886d491d17c304878f99510fd885d96a191080acb5b706a642253bd9cbe5065ff234472b048fcce282061de

Download Submit
/storage/emulated/0/Download/.pending-1714884314-evilscreen.apk (deleted)

Filesize
2.2MB

MD5
17664da0f265995841694f69cd6866c1

SHA1
8ca752164847231dd70cb155950cf4e6d39d9ff0

SHA256
fa497df9923a0c3ac566336a6843e3d81eff233e64f1bd8569b44574f3063029

SHA512
c37c02ab3f9b0cca35f1dffb6f69aa199830d9b518cd6a09584846c9c968b791929e1426b51dc18ee5903a975207cf84ae012df62dc859df1578803d1f79906c

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads