Analysis
-
max time kernel
48s -
max time network
154s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
11-04-2024 02:02
Behavioral task
behavioral1
Sample
.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks the presence of a debugger
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD52669d7dd51733169f9cf5c5ddd6fb9d8
SHA1dbf4b4b553e403038d595e0227593570f55e0655
SHA2563d4bba92d7a205e1f36f4bc5d2aaf31367792e04b26f91c6cc3b1dadba2b1725
SHA512533fc3147d214805d9d3501d76162f8ef812f26f63c083af6a9e98548478e1ba6962da969648f5ce0bd25a1d159cdd556d50fe2a5092faf9eb3e7d36c9b61777
-
Filesize
1KB
MD58768618d0d2fa06f49da04acf57070bd
SHA15f84ae68afb3e988b2e7775449385fb7e2a6712a
SHA256723d66439dc573abe2cba4e7de484738b9661898007547c4904b3143bb6536fe
SHA512260d9daf0be5f810e0a3b06221e4892544d066b367cdfbe793a9beb28ca9790def4860e5773c2509803d19c6f3af70fa0d05a6ee4e11cb69d5dfb7aeca63e993
-
Filesize
76KB
MD5244592a5662464f9e6e8aa5d52402428
SHA1885e44dd3ccf643475ddb16d7d2eec0c809fd1d5
SHA25654b29062aac9ef91d03294047b7780498a2cdf0ddd75028dcebd9b6b7a88214c
SHA512ce35edd0ec05450bb08d6b47583393eea034333b99e13ad2bb6848724f09ed71334a858e5cd5ccb6909d516ae70545c3e7c98ff15673005e25c9ad60b2a11b17
-
Filesize
512B
MD50efaed2cbd7c667fb0ecfb2b172687bd
SHA15b51215fab2e8dabfd3113afba477e257e793f8d
SHA256b546ee57472a3843efee55fc6a060ea2bae656e0323ad4eec940f2fbff857177
SHA5120d4b67673ac1e899671362b0ce9e5e34d27c956385a20088f63a9848a092eaa3944d93cedc763a46048d881ec2d8ec5e0489280ee5c7cd683c968ce3487bfba0
-
Filesize
8KB
MD573f9cb63e7ddb729c4f7d1c044bb2c35
SHA18de59a5cfd4540a3e9f904d21066c08cc48b6de2
SHA2567b73e7ff50da64a8ea641d01a3a95c9393d03506c74f11c0f7b784d884d837e9
SHA512a208d2915c6b7d8ed1ede437ba66ff20dd0ebfd93a22a3ba3cb05a06729116836c5bba5aa6583883779a71aa1750d039ac3ac97cbb51ed2a8336edb6a00f011c
-
Filesize
8KB
MD588f0961589f5e6072347a712db4bbaa9
SHA141ccc73460001c86d387d4738d898148a1ae6230
SHA2569c4010be7b093e8b0772728f5050c0d5ef8544ce71be927565d8f475e1b97803
SHA51284d67da6d586c286c80eefff2a1ee274ddb3d5377ca191068ff36bf7aee13bd72f6ea5b59ce99558b6a222bf11642ea7eb269d3bd05c5511274c80b1ba9bdb2b
-
Filesize
8KB
MD5c4e38ee71f6bb98da1f5a21c7a40e52d
SHA1aa3a45ed16ecb8612dae0ae792663f0e959cbafa
SHA25619fc0d02928018820ac28257079329d402164a779826b8a8eaa842d022f405d0
SHA51228c3294238848c73d67980b39e7f5357154b38f8d4b8c74b4039e97a307687487f59eb2d343d4aa33991bb0415098052c63746668441f52f864c1d130122c99e
-
Filesize
8KB
MD57c3e0189de8c3dd790b1e797b1d2c918
SHA1f49a2ed4a5129239e84fae4271c40b95cf3a2728
SHA256f437f0198b61a7300714c1b45560db4c64e00a1690c3ce49d683e1d954c5a282
SHA512ec6a4fe22ef45df5d46caca7875e413cf20cc47b2b515a5628800a4f0d66248418e6dd78ba9c9a0ba4f9200cdb5e8c2a4e2e41a28b11f390a365226b67841524
-
Filesize
8KB
MD57c933787b9f819d252ac825251a02dbd
SHA1ffc506458032cb246aeba68d8c3e406d6b128548
SHA256255e1e9673fdfca6a070756ca4c064b9de0150a80a1a392506a18b4f051f7ec4
SHA51202bd8509a3b3f5d2f3a52b39c3e3094461596aa9cceafb2adce7cb037ecbc539510f4a30894986be593ce51be498a8a121706e81289004b1b989a3061c67d17c
-
Filesize
40KB
MD515d5b92dcbda7ef7f9ca327a903e46e4
SHA1ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA256e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
SHA5122352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
-
Filesize
8KB
MD5665b1a79c7cb39c1de9dceef14fe4d12
SHA1d0482f1e57091c13828a118c916e160edcf5931f
SHA2561a98bcacb3287ae416d962424750b07ea9b9b41a8b2fe902953e82faaa3277d8
SHA512d351d2f6f374da38ee182ffb337271441fa295c95d025545fe3a59b241e1c7f2e35b3d05e2d146478c7bb7b401b988672ec2e4c1da1185d50f033f9161e5b219
-
Filesize
512B
MD5296e8d83abd3be8a5b4bb36c7dd345c3
SHA1f3ac1bae6874e63621a5a9b2f7f9647dc025272b
SHA2568ee768d5c585d46b36cdf933c2462ab56d731546fe6b6e1fde89ec3e4f2aca52
SHA5121afa40a7e69c28ba9ef27b41b6606da0a3acbe4dd6fd10b8b64729d56bead8585120b88df6eb2984d3e105bdd33ed9648ba616fdb8e9072888a71588e383ec79
-
Filesize
8KB
MD580be029b149f494c60ab4bd4841de1cb
SHA14e098f252658fae409eac45bd53fcb911a2ad91c
SHA2567b47a67fc7064dd53bbd842a5ec98665275fb1c9baece3cac7c4b6d38423ca8d
SHA51277c68d2e19d17a373d0e8abd374be14b74d82399b516381cd37d96bc3e1eae907cf3e1df41b91238dc160b8c1ea8209cff35727ae0125854e788f4740f5a56dc
-
Filesize
28KB
MD5d786833483e08f66a03bdbc6d5b728dc
SHA176ffe9cbfc4769f877b12866a53e691cdee6d5ba
SHA256d002af8d54ebf638a2ef5691a44ef3b36859715eff6f31083c01e8c3460be869
SHA5126047086d6e465c5ecab59c19e90554a40e78eb63f71192d5813dd482b1464aeddb5bbca65fb8a8108dc16d110c7434a1b28a45669beb1b2f53865fbc29aaf1b4
-
Filesize
512B
MD5f2f18af58d6a6db2f05c1182ec9d18b3
SHA1919981cc86963d656d40feafb97530b17dc60dd4
SHA2566a0a6ca8364470eb8a750585d05205b6ec8fe94c33d6a1b6c31f7e787c358da9
SHA5129bb609547cc9558ce478f6b1f5a00b14e61d0ca9fc983294d0f244352000babd8283933026ba0da4f338e7ec1db4dadecd016e2f35747aa855cc8835c11c39d9
-
Filesize
8KB
MD5216a49b916e797dde11bcb1a3f0c57d1
SHA1214bd93f39e5aa8353810c9e1fb838eb96947732
SHA2569479a28f6bc12047332482db5ab8e6ff38c74dca1c6b7de5dbafaa84db2bd926
SHA5129b6748fd9cb61e8fa4eb59c6e45e7152b41ac1c87d3d04acce3b8bcb2785bce0bc48047e16ed1d52a4cf8e3556f924bfb2dc3a167e95f35ef3ac45abea21d696
-
Filesize
4KB
MD5ba1f6bf5e91c7cded0c4b6a3cec8d842
SHA10c8b686a68d40edabb9e125abc557e29f5217b8b
SHA2560c055b0fba0745df192c77801106701bc7680b55a72a7792207eaf0eaca26ab6
SHA5121004a1616ed56fe650a6ee7e5bb1b680598dd0756b0abf93177e65c771caac22b42b0fc98d5ea1a5055150b5c19b066de284c5d7dc128fa641d14f988bca5b86
-
Filesize
8KB
MD5218126e3c9e26daafafbbefae04238a4
SHA1f5e163edc73ac9299867ab6bd7d3a8dff77e9042
SHA256e06f3ae055239cb72ad7a9a7e4dfd55b6c911c0ff27a51aedd9cbb27da2076cb
SHA512ba05230b4443384d5fb3fd19782b0ec2d3dca1ff1adc577e2e91474a79cb07f84791b1b39dcf103c6e4ca9090f5ac7dc881b1f76e84751c39b16cf489a30dca2
-
Filesize
8KB
MD5458444d079943c389e86238b3b763f77
SHA1558b816d37d735d356067111fa44ee46c2c4726b
SHA25607145bbf70d362962d56500b4a47810133c33a7c971636263470b0ba709b46a0
SHA512cc944332c35bf6b14d0caf963686170b2a07cb49331f216d75bc2567703d17c9aa3a9793395a0a24173034d2743a9e688929e6e9369939f1026bab4cd2df3c1a
-
Filesize
12KB
MD5b4a4fb25237cd159486e3ceefb95f04c
SHA166eb345985649f8a037dcb8512062c0b4e6b3927
SHA256572615e2bff0cc61e8bb3fc1588fdccf4d03fdf95df5c6b33d603be460d37786
SHA51285a79dfe94c8dc0aee119c72f27d9589192ec3b1b682ddf429e5368f131cd20238687c8e6cd13f848911bc30a50f60a5844a886ee381a3602b4bf6d6946e1af6
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD5415ea5bbf6ddeb0b9e24e8036bababca
SHA10e609a60b58bb7714bfd13dcf62aa0ce58c231f7
SHA2564ce225a9bd0d3412449d956a92763e7324c751fced879c6161a9f82cb157d990
SHA5122bf79dc5e97c0f49f61068ac131cbf908db9e9dadc62f9f53917078d68dea6b574fa36f7ee5512e9fff31bad95977509e7767d16ae98d0892df4d413daca2584
-
Filesize
16KB
MD5a4665dd8e38f13fe9975e9d0dc6c94cf
SHA1ac8d0bce41f7ea9bce6d134718d7cd5fab885423
SHA2568db03f088d301532ce41b9e83fbe291ffcfb11f2a88e6166fb949fde1f3a175d
SHA5129786c5958fa88744976b4bd542f752cf0665db3fa31a4ad18e06e9b42813ccd720959ffed270b87e4d04c0c739d6ea07a0642ee72b4b23c56e5253251a8b7724
-
Filesize
16KB
MD5119f318a30a4131007570ec41162091e
SHA1e406ea3d71d0de8aa63e6f54594843dddf582371
SHA256b92d8a1b15f37e80a9d7f4b95b70979ec6ffe4bb7c4cb70920403fb668b45823
SHA512597a9ef9d7cda662141845ced1b663eacab400e034fda35cf4dffe9ede6c7eea3d61770e35ea102033dd125772382c718c57cccda86fe4c96ce9c406d7f18eec
-
Filesize
16KB
MD5676fb620be391ced83d480957197890c
SHA1c6189b9e5293a7de17fcdc949cecacb916f182d5
SHA256f7ffdd3b749c231f292172eb38f56c0169fef1a3a2600ef37f2c9713ff3a9beb
SHA51264bd3d2d63a94007d444bb33789017e5ca54c40d2641858460bda40c089c46bb919b8f590d66a35b943f5a1b100edefb4106b03e9fe5517b03918699f1dbb441
-
Filesize
16KB
MD5eda96559b53540b070e486f526a4cacc
SHA1ace2f4645a2297d178ff849a13c95b9432445307
SHA256b535b1cc36838c013324c98e411f043cba25a911479a14bf498ccd52a51b3968
SHA512438403f921348431cd8fd0cecf380868e2dade89978c25a038b86447017a3c04f78f3f1ff9ff610cb1adb12919854ca66656918526333896ef39e6a2502133ae
-
Filesize
512B
MD51daf1b6ce695d7fa71416c4ec3bf7529
SHA1b2a8f382c454b66c654e9cc78a3377a5b68dac1c
SHA256ec6eeaec068ed2fdc0901234393d039665002728ac8ab419aff1977ec5cba9f9
SHA512b31c6125399e6254c5d5b379ebc0ce2a3c0219f0868b32d00452ca03e1775284e36bbca02fe15372c73c6644327e8ade89fae558ae23c5260bc766fb5df83942
-
Filesize
8KB
MD5c78787ba89f118007de5ac9579663d9f
SHA119610e1a9b0daa6c7ac08e342358da7e6f2e7def
SHA2569dcd620a9f40cb8e9a41c8ac5d3da870da57e12743ce1fe1175d8511bc6379b8
SHA5122bdd9ed5ca346eac10c6a422287f2f5dca608d9d97ec69a736ee2d07876e4b706d130be23693a42567c6feccd55176a195804bb01aab54b585e6d9c0482be8b1
-
Filesize
4KB
MD58d407bda0a83f52ddeee7494944c2764
SHA130b7a693ff56357b622ae4e16a83459a23f0428e
SHA25642e3bdb8ea253dd549a92df27b3d62f59cb356c11ed336cba37ac4a3c78f5eda
SHA512fd3f9daf49cc1c752fa8a1732a177d917b802a36a83bfffc896b698d92f8c51b447a72097f33670b1a61ab2c9aae0e8f97ddacf86815d3baa74989f253626a48
-
Filesize
8KB
MD56ab92c1287320dc7dfbed44e94a5dfee
SHA17dfcf10f650921148b054b78a922621e0df675f4
SHA25682984b90e7ae4c2eb37f318df75fbec286b73b0845f334d202ec5e9eb78d4012
SHA51205421709c1ad30eab796e416c65236273d319c41434501a5723b6ffdaa4e77d7e5a181ec4cf9e49d79efb4870569750065f17d21d9c5ef7f4206651126cacf6d
-
Filesize
8KB
MD59d306a40171e633bd792f3edc0089898
SHA191c2fd82142850b66ff4db3f4fffc1adaf9df642
SHA256ef326bd8e704a8d8df5b085086882a23c88555956b30c725be698041ba961451
SHA5122b453a42e2cce7552871707a9af9cabb65e5fccc11d780fd39611f52439d04414c41802298f795d027983bbf4926d66fcd3795d3050d97d89b19dd6dac5ea152
-
Filesize
8KB
MD50c065da00a09a94f38ae49e8dc94fcb6
SHA1025d4ddf0754a2a907148d197b2ee5f9863d731f
SHA256ec046bf43da8718c15fe78449cfd28e882a1696de30624fc84997ee3042acdb1
SHA512d95167ea671d12462cf4b8b6e6d152f44a12594fdb8986cf53dd1a4cd3da56ad7e256923f0227ef1b80dd9549d9efe94eabecf21970304e8d9711a6dff343d85
-
Filesize
710B
MD53721263d6dd21aed2022681b4de0b7d2
SHA1725b8b97e96c99d6900b39769931a9abdd0d0e54
SHA25626b171523de4ca059d33d0449a49036cf13c22a67e409fc6cfb3f0a7a8d83968
SHA512b992dbc968b1af9db60b82e24ea6f7677bb8dd07191d3a06f4a0bef41635d2203c73b0b57975f8fc0d0dcb351e2f7b3b2a082990ff0665a2f5181fb5bb16b186
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-661744A80059000113D814E5FF98366C.temp
Filesize438B
MD5b016c99e36c23b272a4a379af5026ae8
SHA15efc85de9b63e36020ea25a1d3ae1aec149e4f8d
SHA25679f053c36fa4b807e010bd260c1ef460689718afdab2f8a24f77c759647d320b
SHA512472af19467b08c4e68b69ba1ff7e6215cf03c8dae2cb8c4227462e15dfc9e75f33d34bdc7c31a0d8d43e63e3e63e60156e57149b6c984211f909db12b643399d
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-661744A80059000113D814E5FF98366C.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/661744A80059000113D814E5FF98366C/report
Filesize733B
MD51f5eab2a56c52f09e1e8c5391d6d4800
SHA1e67a42eb006f46007159e4edeaeeda0afddff7ba
SHA2568162d5c625d9bc153a50af9c20db07b0b335b0cc41b3f04034ab66f65c39711c
SHA5120fe2b71efbb45dd22007d3c58d6ff1a2b54c8d72fd611956f925b16b8b697fadd12540a35e0e160ed6ca9500aa097ff01f53429f8fe779b52cf445df72aff666
-
Filesize
565B
MD5dc61bc263bc7215aff4e00a815a8cad6
SHA1a26948ea533f021e7be3043bf32b1be5bddd0fe5
SHA2565e7d63e7e378f87eb40a108f3d2137f960cc86eb79e5783170a8dbaf52dfa484
SHA5124045b7d26c7ea3b8f4ccc88dfbc6bf8c03cc05f45da6715bfce84e12d625d17c79b304d5601e430c008fdcf439153d7d5841bee190553c060c2248771fed4438
-
Filesize
90B
MD5a327b9c3846f90f52f517a5e419eca5a
SHA1d2ac8910117d3a0abe57e479f38e7eefa055a5ef
SHA2561c5788efee786a27d0e96540e17fa3b1de59de78247462ebd4e7f09ffdb42f16
SHA512e7e4931dc34ae7208afa2de6da6916b372446bb42755f07e84708e4725574158e77b162f8d28aea96c95686067759461ce38c2564c7f332fa337b89080a221aa
-
Filesize
36B
MD55b158f9fe6723acc43fd3b2c37b07817
SHA13386094b196379770e51d291b198ade45023ea33
SHA2565b37f0a338d1d6442cc37cfbb5e5f93ae5e5c5fe95f2df67b34a00538dbd5ff2
SHA512e517b9876adb664b50af368491413fe161fbf1c8f1d7ab8236ce8135e1f0732f1c313bccce0aef1f6784782a48e552ca2528fe1487648bbee42943f4422432db
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5f9e3141da869f76f08d82a69022f2ae6
SHA1dbdfb9664ffa23c475513db7bce79ab4d6a0c563
SHA2565a914dad82574be28b577f503be8e54b9187b6ac71e667729454901a62fb9c36
SHA512fa37e40aef7cde72d1019c08c70f4fdbadd6e81c84c45a682c990fb7c6b431b05671e2447e9588af27a5ac442db55751fdbfbaa812c29d07471c6ca3b55a8da3
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD55c9c59b0254ba9a4ef4c589ddaf7b9d1
SHA191457dbb9182f179ed0dcb95008f4c8a981de58c
SHA2565eca14482f72c73ffae5a9564e1abc2269dac3de93326e88fea0b706b2396708
SHA51273ba17ebc060e60771bbf2ad00b1352965ac86a3d601347c5c3c488357702522b173ec9496d0f9c5b04b715ca872ffc910ab0a0dd773eb1fc8a6c74f1f04d99b
-
Filesize
108KB
MD5e1283887b7c6c10fd42ae211639d271f
SHA1dbf0da002517cbf2c24d8809e1baf3ffcac6c0e5
SHA2565902ed4ab31776474570cead1f37ca819e9707e324c93e15187a4a37374976e8
SHA5121a8efe6b4ecb98676525fdc36fa97bf33301911fb2bd77c3f9fbad74feac429b6c7691d0fd2608f8355e2a96eb602acc91d6ee7769fdc9001df8ee5234e0a888