easylogger | e1373c0b0e89b895bba9d86c720f715419a98e4047c12ab6c68dc1dcbfdc7f62

Resubmissions

11/03/2024, 13:35

240311-qv2g9sbh8t 10

11/03/2024, 07:51

240311-jpzm6afe21 6

02/03/2024, 01:59

240302-ced55sgf8z 6

Analysis

max time kernel
47s
max time network
149s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
11/03/2024, 13:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

.apk
Size

5.8MB
MD5

f65c55b12ea0dd94caf0450e3049f4a5
SHA1

8a673f2f7b80599044b56d2881ebaa3b081ebf04
SHA256

e1373c0b0e89b895bba9d86c720f715419a98e4047c12ab6c68dc1dcbfdc7f62
SHA512

ab738a8e462bee23014d4d65daf3e8b4085b0c8ab184dde80178501964abd810ba40b3d063ee374530f4916c87b419547ea5576beba3a4026f85aed58625eaeb
SSDEEP

98304:3qsSSDQRbBsxPjNYX14iko4HqNbUQuu/MfuDv2DBrrVNO7WPpBiolvrZT:3qsdPi4mjbU2auDuD1IWPXlh

Score

10^/10

easylogger evasion infostealer spyware trojan

Malware Config

Signatures

EasyLogger
EasyLogger is an Android stalkerware.
trojan infostealer spyware easylogger

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	app.EasyLogger

Checks the presence of a debugger
evasion

app.EasyLogger
1⤵
- Acquires the wake lock
PID:5091

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/app.EasyLogger/cache/volley/-1201570017-1616341492

Filesize
1KB

MD5
b680b1e33880bd262f8d1b8c53589bcb

SHA1
6bcb52662e150db6dcf79bab1e68f41981b6067d

SHA256
4be8501dd3c6b76662579cd70b70501ad8a6908d292e42338eaee16cc3b6d662

SHA512
cc2b577455d5ee5103a19891b8303f89b8c8170f3d5e0df6167110b6978484581d56c192b49b96830ba9ed95021da9be6f7fd4a56d4d95e611549057abea78ad

Download Submit
/data/data/app.EasyLogger/databases/com.google.android.datatransport.events

Filesize
12KB

MD5
ea628e04765adaf4238a5dcdff4bbd51

SHA1
a801947619ea8c368efe9c006a324dc6339ac60b

SHA256
885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

SHA512
c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

Download Submit
/data/data/app.EasyLogger/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
c968f28e127e094404e2a2f797973834

SHA1
090351d26b9dd0a01f364a52cdcd6c76ba9a897a

SHA256
df53f42604273e273f02cdd5341a8c445525d211e1740ad10a5c56d3b23234b6

SHA512
1e017f0d7039c265f9e9521efb6422c9ff4731f30bd965e8bee1a31d3a62935960c41212a9259ddceb8437bc37b39208e596ccba5e85b457e39f0a79ebe36ec7

Download Submit
/data/data/app.EasyLogger/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
143e3d34de998b44aca60ff5e27c2bc2

SHA1
0b4a7dbab2811440e8c55c3a07606059a7f0230c

SHA256
a323b97035e86e1a45aea8d1dc01e98174bf1d0ea5201d8483b3a9058f608188

SHA512
1ed9f93ebf30e6f25ddc8ff3dd7424286bb6dc68d208163156f26801e1b0fe157d70ef2f7cb2f0d2b078b0559b0a4ce2df465331047c76eacc2df5e235042007

Download Submit
/data/data/app.EasyLogger/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
dc81c31b87b30ca02e4af8e35c66a26c

SHA1
a8ae901ad123dcf0fdb027d7306923b9f9d62b66

SHA256
ad043e8556542937735e01644ca6b99679a22a4ef066a8b6d6bebcb3697dc92c

SHA512
45d82f949695bb114e8e0af9bfa16c3e6ffe6302d7936a8ecc33f949b8518421d48298dfd396c16ee1b76e2c095a0acc0d78708538cc507f57fcb276bd8e7eda

Download Submit
/data/data/app.EasyLogger/databases/google_analytics_v4.db

Filesize
12KB

MD5
163b0e3f017becbc89b9d7f330b78f09

SHA1
1ef9cd8ac8655190468d0ccece0a4738634ab0f9

SHA256
cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36

SHA512
6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

Download Submit
/data/data/app.EasyLogger/databases/google_analytics_v4.db-journal

Filesize
512B

MD5
8b3a2af4a6e7e97aa76adc74a687e641

SHA1
e5c051ab97d04cfbc33534de3ace1810df5d24cd

SHA256
083f7b11debcfa522fc793d2b9c4eeae636c095534648a7a7b66b8bddedb50e5

SHA512
aee028010303a12c76197192bd5d975bb0a915a20ebd1bd1b4a23f9f204023ee586d150f2d4866349006aeaba92328843792e697c89df40f3f1ef4b0237c038b

Download Submit
/data/data/app.EasyLogger/databases/google_analytics_v4.db-journal

Filesize
8KB

MD5
d46a2695b85c16b28f2c738cc3a1fcb2

SHA1
70bbac2c7f91ec91d4ebd041ae5f2294c4da37dd

SHA256
5fa13e4a4860db4f58bf4fda51cf05c957c77c6869b628d073e14ab9a7ca4c1b

SHA512
06e41b50217d3e563f737a2150798cfe2b46aa700b246acc1fcf4a2138cd27f67a6c6bc9f4ffa032a0c1e095a38b1782a1e874e476135f835e6dff0322af0ea6

Download Submit
/data/data/app.EasyLogger/databases/google_analytics_v4.db-journal

Filesize
8KB

MD5
f3f27e8eb1c06ee9170cc32f19103a2e

SHA1
3e5e437528b2ee5dfd9edac9807a269d17713652

SHA256
0d686121cf38c1f491d3ffe7e6969859e439fee31e42c8b00a516cd7d41bec29

SHA512
493641714ba398806c3eb193e3efd0973f8e202a769b0dd53654b492f4566f6438eb40ae1046f9f0698e22b24c3760588610fde3b278a3c1931d3eae39a342bd

Download Submit
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/65EF08D8035E000113E33DE3B8574788/report

Filesize
733B

MD5
a4cf899727e3f44ec31d4bcc683ff0fd

SHA1
bd66f80264bf958b813b4c94177d8244b79a4a69

SHA256
30b3efd8cad3c416968670f2da94a2a75e79bf090464202008d554838dca07dd

SHA512
edd87e1e57f10cc4d85e7a9caca5ddcfd3a344b13833451d72a6292242f6da77d7d34d6255e331cbe0f78c55e9df93545031142cd1ac4176b876149e67fa0a77

Download Submit
/data/data/app.EasyLogger/files/PersistedInstallation3676200789322809277tmp

Filesize
90B

MD5
b1c4ca42ee94ecb33569099ea51d9429

SHA1
0f6b108facb89483253a252b3d0d107f8c241d15

SHA256
518187350600289b426893d8934ecbf8af46f3e31f4bee0b80d501bbbbae6007

SHA512
59f8a7924152949ac4d490f75b25ecb5a5b0389375d9d70c52ec716e575482420f769bb2d1221007ed100502d2baae1c82f48ec41be7bb3d2914111442fd1282

Download Submit
/data/data/app.EasyLogger/files/gaClientId

Filesize
36B

MD5
e7887feefbbdbcdac11c05a138893e6f

SHA1
016b98b95ef5455a1ac37e991757011c381e8798

SHA256
62226c06d7c12f8e49e4a4bd58948f85f6733e6e1d74c733bae358055ed09f3f

SHA512
33ac32dd083006bfec49394629e16c221fc06663622b0b01f37d2639f79a45cf24deef9ed4f3575805d49a72baddf988b7e2a18207370a28bfac475be0b4b000

Download Submit
/data/data/app.EasyLogger/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/app.EasyLogger/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
58b0437190f948e14224df097320fa31

SHA1
fd7c2d8e4a97aded9b4aac65e702880a3e39eb3c

SHA256
37c4b61a83a1769802893cbdc5e1dfcceb31f9e8d8acd2a426079449ddd89da1

SHA512
2b93cb1acd6f93df8fdc55f5671e02c004830432d24a3ed9c494f795ad822650ba7691cfb8262709cf282f24f925645a5496618267db792b95f24107f0ccb058

Download Submit
/data/data/app.EasyLogger/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/app.EasyLogger/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
7a12109dd08bd8de64944f389bf40d31

SHA1
a1ab3174942d7b018a0bf65656eb245cf4868a15

SHA256
457a5005b4634a6e241972375590af08127ba16314890d02a1da9c50e3c6dc4b

SHA512
7fc8c77a59958db8e6b9f7611751440cf8481bbcc92d994e070472d2c9c83dee3762d3134392a122d9c03f2ca60cd807817cdec5763cc38fd276eeeabf0ac6bc

Download Submit
/data/data/app.EasyLogger/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
ccb7b9a1c7c5f99f1d6221f85848c1bd

SHA1
6fe3ed45014f3093be94282a8b18c3fdcbced9f9

SHA256
231758561aa52c3314fad2d266eab2dc142b707f65d968b73372cd9413f63e1a

SHA512
fa6818439ea19d27fa63fc5c13b80698add545f6529c7ceab0f1c26646ef573c40cbfb3b18b00302c88f86efcf487196ba9ac1d5f0b21f201cba1583b7bc28db

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads