Analysis
-
max time kernel
47s -
max time network
133s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
12/04/2024, 01:22
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks the presence of a debugger
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD508221c58ee0932c17067d0fe8310c454
SHA10aecde0f931acc1b7d4ed74f13204a10374dfad1
SHA2568f0de8888d65804b88cd5ccc87a9976a99ff3a9c6370584643e7c6fe93d7d74a
SHA5126d9707b51f6475d36c67a66e6784030b39a028d403efaa4399de28f88a6171571cba9f349535f7d0dd0ef6271ffee9ca879b1bff435705f8433494fddc8c02d2
-
Filesize
1KB
MD51de982623835f2e886b3f0ccd089b808
SHA1130b9678a5f01cf1159b6f5423dd4924c2337195
SHA256d945a8b9eab134a997921de62a21110de076a8822a504de029d77f351fa59aff
SHA512068e518d4d077bd622191eed823cfe458209ceb5157123a71192b6de6ad2ca3c9a0cf5315b7368586331f1d878462fec99cc60caadd857b4836413e0de3f35d0
-
Filesize
76KB
MD5244592a5662464f9e6e8aa5d52402428
SHA1885e44dd3ccf643475ddb16d7d2eec0c809fd1d5
SHA25654b29062aac9ef91d03294047b7780498a2cdf0ddd75028dcebd9b6b7a88214c
SHA512ce35edd0ec05450bb08d6b47583393eea034333b99e13ad2bb6848724f09ed71334a858e5cd5ccb6909d516ae70545c3e7c98ff15673005e25c9ad60b2a11b17
-
Filesize
512B
MD579f36efc84338f5998cab1934d5ee6cb
SHA117ae65373fc976de8bdbe02d9ca428e2d944d337
SHA2561b4e629af07d94f62404cb05b79d62b3f096d3224f92448f80029de9e0ca8297
SHA5123d2833c3aecf38e51b240646d236fd584638a1402408762245a1af4c6019eed51fccaa0b19d524b71814a5977c4140ecc41a0a95cfeb571207852dd33dac2c4c
-
Filesize
8KB
MD5ce60df5fca8aa732b9f238729edffb7a
SHA194d10e50018fed799cb635f862652cd7a8226cca
SHA256036174ea1b8bb6077a037061bfeea4d524113b21af2cc04973ab8f15e7e45fcc
SHA51243d0e7c1f3927f13c962b7d15081918490b0561eec5f96fccf8ab6086e9866a7209186c78f15fd03ccc2ae0df317ae1d2e6aad6ef0445b3d3cb3812e531bfb29
-
Filesize
8KB
MD5ec357d9fb356cb271bd9e6f9d3c18578
SHA1b9d3b0691a0b7c01f3d4ca187ab741676d3ae173
SHA25627ae41618dd84da42cfd1e7852bc88e2fec4f99d76b6dd2373f3f9bb5dbf97b3
SHA512fc184b918f0f967afddfff6fe44dca496a94837b49a164a56106c47a8dbdcfe900e7538f5533df5c792e1909af6c0a8760bc8e3ceac5b190dd696fbe03858dc8
-
Filesize
8KB
MD5201726412f2aeb18f67e556241f5a3c6
SHA1994d1bbb2cca7e8ec01fa344ecaa9fa2d0523d0a
SHA256a902b3c2d2aa68294d94a56c980c86e710edbe9eb35d59387e6440c21f28370e
SHA512497103de49f8488df4924f1a67d9c3e3e0f6d5842066a558d5b23f8ab05464a41f3b882dc99e77121b7a993e132428c0b303108f5911942305c742bcc6320daf
-
Filesize
8KB
MD560d5247a2a1e482f0479782fbd8e534c
SHA1dacd4417a7ed1b0f617e8b0f543755ed24bd2290
SHA2561b7efed5278d563dfba8e6ad6514ab8e150d839054454e4abbc2535476873f8a
SHA512ba58902309702f1b4e851e5b1f5aa27e4f41610a8e4b9bcf75efe30a9e540d1ba8029204d935e13e89dc2cd4adcee477b3ff3bbf70b772dfd30400de9edb8238
-
Filesize
8KB
MD5f5c17388b36617e681dbaff0ec84293e
SHA14ed2a435794b71bd5af761cad1d1257621b0f70b
SHA2561d912d2d5184eac20876ea05594da7c7dcc48c93c01204685ff971d7a10c7b06
SHA512ee27cd431d35279f5d731a0813e1bc655a69c4b19b8b86e23889b77cddead367cbc9a32b9d47bae0be57ed3fdce3a18f16f10a6976f45c3730081f4610c29940
-
Filesize
40KB
MD515d5b92dcbda7ef7f9ca327a903e46e4
SHA1ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA256e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
SHA5122352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
-
Filesize
8KB
MD52730f564b2e312b652fa1c684aa5db7b
SHA118bad01446fe3a0b5c191e86dc65b640e6efc36a
SHA2566081fbf7ad0cbed64ab72a60a3f5f9af6a56d8b35460ce2700be164bf85c3bfa
SHA512c4ef8b14dd034607587ff18151c3ed8a78ce000a2f9a4c494d031b7c1114ddb393aa55bf075f88dac1f62882e6e4df740afc09102fba664d3eba50cd86980a73
-
Filesize
512B
MD5d9c24bea09fc77503433a28af6227d5c
SHA1f8d3e32a03e788f20381001bad2f247bcef10b08
SHA256610e3ded0a89d453dd39ce07d3b5b444456755754cca5c764414a609b2190419
SHA512ea8c7d36215aa2e033f73ede4cc97fc42341cac6014e89965ffdfc3b9d9e6f59023a25e986dfbbeb86a1ba44cfe84ba5a4236ad10962df2901748137ca4dddec
-
Filesize
8KB
MD5e3ff81460c423a5e4df6602fbb39a73a
SHA15dd56c8233b28770da0b8f3eccc9fbb984ff2f87
SHA256a221cf2e62589872f4ee6ece2f061ccdd2db67b720f7b0b8a9bb1017c2a8f70d
SHA512d4c4d0194f34735e1ed9bde67a9fda88d2c128549664a863058a627e7a9f6aec804071d74a93cabb06baeae8333b131e08e737b3e7a4c600f338cd459d0ceac6
-
Filesize
28KB
MD5cdedebf87bb142320f3127ea609d1667
SHA12e0eb2977c12f04f166cef2b630776c7ce4486b9
SHA2564db57ff2db66ec7d88e0b0d0f84779f481979ecab1387ad379a934506175ada8
SHA51260f3ada2cea71b5cc9e6253742110ce330dec1fd648423bf4e14b44f4e409872e62b0bd087673d6485b64f8ebdbcf9884c073db8c72fe071adb0092e45610154
-
Filesize
512B
MD5c9ac507743616fa4e1513bb2e6bc038c
SHA14b0107402be6b62a1e615662b6dab00254f03014
SHA256185da9b381d35fe72188723f9fd5e1b1e2c43fe9734e33f8047fd365a0387061
SHA512ae3429ce9f9863203f2d9a5e4dc04b60e524699bbf8397435605760deb696654e2c69a232d13fedcd054ff689b85075b20d9eb9b45e61fc7a2df0d2f298ae8a7
-
Filesize
8KB
MD514a7187eb32ade557659812c09ee48f0
SHA117283a8458d9cb9392e1ed08fc77ee37e814279c
SHA256762f4e27db2c96bfc63d8d9a845082b39bd13a5ed32f1e0ca73488b8840931de
SHA5126e2bfe4820daa6601dc2675e7862815c83a82a93df007f06e3ee47ab9d09f49214a699946cca6cf07057de6b3a8773c7b84b97fa4f57ef7a64cab95db8f1465b
-
Filesize
4KB
MD57cb1826e0370f3c6d9553d65df301b80
SHA173903c824088d642fba5d0365de08cacb2023cbe
SHA256199c1094130612b4f62cd057c381077a53ea992c04cad58549f7ea50daa659de
SHA5120bb5f37f99112ac23ca6c773d89fa82e6b18b267434ab04a1e428c47602ac2804f18848733254cdef55084fc1369a46f193a10718009698085b49a0993e22c21
-
Filesize
8KB
MD5ca611112ab28cffe13f2e3bf1ef2bbdc
SHA189900f4b59a68ae65082581e162e5159e4fb6a72
SHA256c5c73c532e68c4afb00e8100e03611479ad968f7f0f8ce659af69ebeba2fb6d9
SHA512fd8954f38d49bfd1da2618a0464fc0f7ef680fdfe9d55994c5558fb774b05b5328b229b225a6ed1944e82acd8e3f8d56105c12af113933ff024f1c984a24e764
-
Filesize
8KB
MD5054313374ae4c68f877fdbe7ad4a2a72
SHA1cd54c72d5b5b6a9d23ecc891ae1c87da9a28fb22
SHA2562b589ef0aaadabf4b624e762444e39c3d841f0c0b3dfab944686a4fb6345ff5e
SHA5129f0e179b0634c51e09bd96535c2bc74a68339ddb194757413db91e1456767fa07a957cdaf7f489512c344ae41ad55c2d5013eeadb555ca340dbef84b9ebf76d9
-
Filesize
12KB
MD53b5a2dd30dd494b94aa819703f1064e1
SHA124f0b01747f91954c96ac7029c3da072aa6ff630
SHA2569ff9b5ce422fc3f75bf628e8663da7937accff8cf13f5085f3176386798d4e5a
SHA512eae5f3d3c9f2d787fcccef2f612aacdc49aa4c802e5b6a3764c9f67b07539cb687ba3dbc82c01940028df340bfb69cf1ba7b3797fd129c2dd1e9e056c727408f
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD531c925bd2db7b7139f311c1059a52a98
SHA1f11e5aff7332262c295af30d3d33b3db3ab1c4c5
SHA256cd11fa85a4d103dab358796faf409204d6c6680921b6164588929d10a786f17f
SHA512929838767923c52830ef59fda139e8a75d48a6732b873470dd3243a2d03fa31a97031dcf6666522846d8c45a845f63b54ea11a7490d4c7263a8822c228f132c4
-
Filesize
16KB
MD5bbd413c42632d589bcdcb646f085b062
SHA1d44aa41021d33b2fdec20b7bd2bf568a3e7b2aa3
SHA25629a32f88918931c8e81c8361095ea8bc98366fa056c8c87ca6d37c5623c60d88
SHA512db079e6e3e02fef9fdc11dcb11e4fa1a344bb69e2d39a27b238ac9d046562ac6392d4daee1e834d2f0dc46013e28c3904264d88e88bbdc96bb3254a4afaabe29
-
Filesize
16KB
MD5c19ca628edf154ea2aa40e2e711f6583
SHA16d111196e47423ff05758e0ac3eff0725757c19d
SHA2569e7b6c9b966729d64579b74b1bc3cc56996164a05fbc234ff48b2a3bd2271bbe
SHA512f238a54e1df7b416fa4532b91db7b22a9f4b0f508a7f4f8ae246acd54bd4c328cfee427b8143d3a4229db9bf5faeffdbae58056fb968d4461a464c004e9d0097
-
Filesize
16KB
MD5bba6cf9bfb0b0b7d9a644e65bfb2d6de
SHA118213a9f5e208eeee335df7a7866bcc06536da04
SHA256f37904da6837305746b602fa362832165e6c21415076ca353db87498c942069b
SHA512b298488d1d0843e8fe8839b2f46a6ba25318ff146bf0067b3f56bb00af516b02fc4b91dee325055c03a97cb5bdd63210abd19dbcde973a36df5363234e835e3a
-
Filesize
16KB
MD54f020ac6f68a0fec86e93e46dc4d754e
SHA19bd495e227b0f5f5bf5f7020cf8b28e016d44c57
SHA2560e15bbcfe36d388cd065c151592231130d40ce72b7c55a66fa15abd95a9f2d12
SHA512f4517dd8acab07578e2291b6752ff04c69e963d77441910492c904c1f95654e8528b6a84e5e268b30a7ab616d5d565d08f44a1fc547709c799815ad36f7e4611
-
Filesize
512B
MD590269fa92ea572b3de49dbe4566144ba
SHA1cd62fc02c9dc7c237f0f5d49e8a6d5abf25968aa
SHA25608f78ca85236fb6bfbcfd36a7299ce8c2fee711a54a2deff0e4048ea175d4aa4
SHA512c2c4e9d2c51f4e49e8b064d07a6e65970e25be37637add08d00d47ce53f5e06d8408cfeb32d99964e807516a4edc741f34f47a45f27d74aa61638db7463d52b2
-
Filesize
8KB
MD55c5a386b9f63df80b27a92d04e329aa1
SHA1e3bca8dbea0650ffb80894a116772d5570cdff84
SHA256527154e138a0dea59297c28e97e1bd8606b8fd7e1e4e67ff9ce0cdd7a512ba93
SHA512d596799a23582a90cb429d7fc9b3b0b5cf9f2d45d0b680e430f10e311dfa0dbf5810d760d643b42d3a1d1fcd3c19b0fd8ae23a1cb103c8782bffa9dcbc8cc532
-
Filesize
4KB
MD5c5fa43ca57a292efd138791e341f35c4
SHA1dd5a8344b752e601047712204c2ce1b776ac33aa
SHA2560fea2844d2c3c2410bc38e136f309a2e653a5911b8493dda13cd5fb8afa37141
SHA512bf2e0e453af9b4ed8de761286087077532dcd848468110d4952c9d8250bd59b989b491218024756e998375abb6fb32a75ce456bd1b7c7f8e61e880a0ccf48a3e
-
Filesize
8KB
MD59c7add77e81df8fecd353dcdbc6d3a27
SHA190a446013c04898ce66562b582b06886e90e841b
SHA25677440bb4e10da0c7fda91246b9922e9f4da6b3f1b3f3beed70f6efaef10aa7c2
SHA512e85f39a61f63ab9b67a16df40562d1c391f1f33b666995372039a6ec94ed65e779468721bbfb9e1b49a0f964352f7fee83b44e348d8b2850b3f3330fe481e2d1
-
Filesize
8KB
MD589669c32a24d2f110dc5e92ecc52a509
SHA1c1df099d75aee1db0bdc63bda72a2c4221d150fb
SHA2564e4dd5f0f800a5f602a0d8fef73546390ff8496f0ba9a06a937564c1c9431ab1
SHA512f3d42db198d321312894f68db51fa8b451add7bfa0afb7999e9832caedc2c52bcdae4f0e0969cb04312788c261a393be46aee10a9cf440c18c563ebb5acc0239
-
Filesize
8KB
MD50190443058021f9e4fffc85c30012999
SHA108557d6caacc41b06f76f8bedae6febe8b34a977
SHA2562e0df2b5c8bbd5e4986707658c032eb8bb259e1a951e28b5e3c5b842b1565aa9
SHA51221dd4e6ba6a263e4b286c38d58638113433afd76dabed591fa34d04dc7936214abacb0bbae1b482754aba6067002f6253dc3a90130b00011d5f551f8c89e0f5a
-
Filesize
710B
MD576db0649a1619f08e94843ee48bbd88d
SHA103c00734bb32dd9901da903af0639ae4691d56cd
SHA256cee5832be6b568f59cca4edcb1a6e8ea1afa2531652431cf03d9b3cea138a635
SHA51248bc547736c299c0c087a7dd3abfbec3dbefb15b87f0e10c1026e95f0c1ca59224f1b6163629b934b293e4de2daa22772f8baed8f5cd7308264e919a8b0b3574
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-66188CD5031D000113886264A87739EE.temp
Filesize440B
MD5594d2e523d73e0a83d4a57968acc2df9
SHA1b69ccf039bf81081f92021b87b0faf0fe4f1c660
SHA25618b7bca1449b45df018b45e3b825a717d1910250366625e33ed3c795bd250f4e
SHA51276ef632645918fb9c192539368f533c083b6ffb1b20e6304524fcd7b5781ddcd24c22e4a45d41e9d7f969c1e97b9dcf1dc21baf59968f70b7c1ecee6b711d8d2
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-66188CD5031D000113886264A87739EE.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/66188CD5031D000113886264A87739EE/report
Filesize733B
MD5394b110de3cdc9bcf8b0f9a2a2625dbd
SHA141f778c75e3903b1a2bc524df4af0e51ad1c3c5b
SHA2565e2a6fd60632a695008e60a8c595202355c2b255f7b768a132b5bf7a656cde60
SHA512937594c251926adeea97bc1dba0a996b61e7397b66988ad7fbefd818f8f04637039d3dc2efe5a0fec35b78834f343beb072b27552cc62b739a7a75b36a268a97
-
Filesize
565B
MD55152b46b5e76fb76dd81eec3969120dc
SHA1d761b96a268005944d6ec3a648add31972554108
SHA256e30afb9ca2ee85d885968f916c4400a305802d0cd32702b987b813ba11368adc
SHA5125f886a6fbec0bb9bf86530b8d6076fe56bf1f62f6686c942dbf6cb0f8b242c395b3b163ccbb6ac1bc673bbd8a1d73f317a03516577dd5e35cac0c9858d971b68
-
Filesize
90B
MD56a7f533e51fa230015285db178f4232b
SHA168601327e60c54698ac53120d690897c25f9c094
SHA2567b0554bce894ed10a35d52c7ed7107c137f07f3e5b19e4ed63291eec0609b7ac
SHA5127b957f8a11e444fa2a280c6548d0e5c3e18e3ecf1a781b845bfbd714259feabf860eafbbfebcc8f5d0025c7f003439f44add8bce2658d8827774f89599a0fa7a
-
Filesize
36B
MD5fbdaf216c4cbe5f80a47898757f066de
SHA1c88978a5360895a00461d58afcb84b95a49dfc1f
SHA2561faf74c825a85487939370ef4a569711ae29915bc78510187a0ec979e56a7c96
SHA512c80d9d7722179d3bbecbfe9d93a0045934e088782131bda5fb421bcaf9d0ddc5a865c8c231d2895fb07e9b9145e12194fdbfd856c955f657c05e798ae71ade6a
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5856444f85c0c404e8ac792cfef4b5064
SHA1d8297a0f30b1a76afa88d2a36a8efaadc878644f
SHA256ecef0a709260df899b2b9b4e84358e93cc804dcb7e664bd318b91f031c33eb06
SHA512dc4ab881b1da0e7f69126e10fb57c2a365de7a2acccde11dc2205a7ea333d2121c11aa6b271130d1d265e5701d8daba03bb8bf2c72b6021926f944f8eba58d66
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD555df750e001b118c1d6df8b11ed63023
SHA1c1d9776834ca6cb7a69d91c9fdfeff39f7dc3f33
SHA256ca74bc836e448a627cd6b1dea3e9e11e7a74cef600ad980f0579e9dba502570e
SHA51241ba6b1f0bd37235276993952ba1f4fba06fffe1d6ffa29e857a58085888bab69a26e5b69362d137dd159a18aec249291604f204409bb380ddbe8d07a55f218c
-
Filesize
108KB
MD50cb41e7e2ed2225b28e1ec608f1f065c
SHA198b832c6e37effbefb5345ec6fc8106e7268ac7e
SHA25682832b9b40b034f46452484faa2c85f26d7d712a6d645e481b38511169712f9c
SHA512d3bb610b040386d8db787ab666370ae2860c5a76f6544d9b7e023166aff84369a81b31ebaaddb265ceb40dc4028473b9c8d71e01e6a811677ea8b7d9695c9aef