hxxps://github[.]com/evilthreads669966/EvilScreen/releases/download/1[.]0[.]1/evilscreen[.]apk

Resubmissions

28/04/2024, 04:47

240428-fe17fsgf71 7

28/04/2024, 04:44

240428-fc77zsgf4x 7

Analysis

max time kernel
116s
max time network
156s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
28/04/2024, 04:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/evilthreads669966/EvilScreen/releases/download/1.0.1/evilscreen.apk

Score

7^/10

collection discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs

collection

Data from Local System

T1533

description	ioc	Process
URI accessed for read	content://media/external/images/media	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
- Reads the content of photos stored on the user's device.
PID:5071

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Data from Local System

T1533

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Android/data/com.android.chrome/files/Download/.com.google.Chrome.ysIcHR

Filesize
1.7MB

MD5
6fdf6a134d9f7c6b3dade1fa8ee039d5

SHA1
aa9ad1a9d077010868214f996e2c6c4282f0fe8d

SHA256
72341f43ec3c64d09b30a8b98366b361f37cf6b67ce76c037c02dbe1dc018eeb

SHA512
dfcb611707d8dd575d635c4c94e313863781d4baba71399483b7e443570cf7184800201220ccc056660fa38dff22e4d0fef48aeba0269ac2e43ae3fe2252ec4f

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads