Analysis
-
max time kernel
48s -
max time network
136s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
12-04-2024 01:56
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks the presence of a debugger
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5ac895b643525cabef31219eefe83e5d1
SHA166caa97e42f7ace640527d680f6790b49fa779d6
SHA2568ffdd1805cc16a62b3e83f3a33a50498979fd263b9fa16d8792acc22420f4924
SHA512df09f79512b75e90e8e1408629ffd6e24f7430a87894978f4a9ede5a3f9e625168980de0a053b58421dfd1d8fbbca7236010023c892bdbca0ab094c805273d12
-
Filesize
1KB
MD56d3949c39c07a9789bcee6d0be8e81b6
SHA1fdb1d6dfbab8ca4e86b0dfe0453f46f437e46185
SHA256dd2c279becbdde3f4ccf3fe26aefcd89cbb30cac72006dbfc1aeed589fc98f2b
SHA51249675cd0d822bec693b404fc20c1340a0e96463592f48cabda269b00703aa24ad427b1c22beaf0bceabb73641f20119c38dcb8657b503cfa1d7fc23e4880ddc2
-
Filesize
1KB
MD55ff25744a307337b74c09f24e4270973
SHA1e555a162b9010ca42b6b21cf8ff8ca283d285adf
SHA2564941956e51a352cdfee948c63429c522fad2e9be8c04d56a33b251aa2b449a8f
SHA5125a1170c36d4edcef5bd796e0122a0e835ce20a9c37ce2d24961282e53fd3290a446edb1d7ba8d7d5d009b031ef69ee06b51b33fd53d0d13a8fb926590e8f4409
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD58f657ef051805cead82225e34a543c33
SHA1ab634d7a7507340ebde4ae2060141bb0a39cf59e
SHA25608a3780de3c6e3f433c2754f586444c5afcc7a639b5bb03f9373aa969d567eff
SHA51204359ab379f89c22168cad25251a8237cb75fea638d9c3ea22247a515bb4b881e3bb913261a1ae3fc37fcd340d20fc25499aba3c3ecc607d9385ec91ce562e1a
-
Filesize
8KB
MD52283da8a46a4e48bed307db27fc56b74
SHA1e029cb43193239a0f6068b7682700b8f24673a52
SHA256c66613f84e23d28b8acbc9546234576d6ee30b71f669f944ce882d229d7905fc
SHA5122514b0cfd48ec9a78f6d496d4b99a0fb8e6f0f95f89779295241def201b9c9046a6dce1e137fd12226f6f3c03ee9d35e87d6c913d6da50134ff66a7105adc093
-
Filesize
8KB
MD5bd9708dd521fee12dd8ede02802405b1
SHA1504800ddc8df1b67dfb66bbda25ffe505e201c4a
SHA2562257c0be609015f9db1893715a8d4ce120d3bfb35a858d312d31e1a904903aac
SHA512de29c61efe4d2974966787f1c0a3a1c0c57c5a9e902566d39f99be3f6deb85e84fcdb272b9d68a1e752eaa7b174d2638d28d450a001cd3b80fb82c89e486eda1
-
Filesize
8KB
MD522bc2dbe8f864899bcf7f9a7b89d279d
SHA11e0c2d5d187f4e1d5761a8861cc712d1ad3ec426
SHA25620e111026f5a4c6c42ee042941ac25e59d699e0a142f3c8c8a79bbe02e9a9f6e
SHA512588099fef7ef57852af32823a9d2873cca12fe23f990561afdcb84bd138a8e91a5be0c9229c32f420bd48a7df1d967e497ced4766255524d7f44c9b56223be31
-
Filesize
8KB
MD55da0b6ce12566395567101004011d8ee
SHA126840cb53515fce6f6b606611c8af3f680fa46b1
SHA2569b48cd26e6d5bcad6e1c455ce08773878ffcf450f2fe841ad313e7d23ea8bc73
SHA51223c4d868630f48284c8949e7a578e86e6deab089851b81bdc214f36c7392f81fc9fe90649adcef9798bc1b8a9869da8a0783d9a768df806f66cb375c3857142d
-
Filesize
8KB
MD58e4bdfc166f14acdf3675cf7d1df7cbc
SHA103633949a0b68e7ff19fd7ccd7ac3faa4b9c0346
SHA256401e43ca6aff451f301218fac7621f252e0b1d33b398a2ac944ccf8cb694d5d4
SHA51266e3b0774a36efbd54bc62101a5f47152cad84de2850dc8de1d0d5b57d14e702f810bde7e448cdb27d97c09d0393c2b3670e096a82d9fa1d12abfdd0aa2fa245
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
8KB
MD556930d2d613652ce95debf3e37a056fc
SHA1aea9cf3278ba61c60682b63246c65e46295955b2
SHA256a5cd2b30aa444b2593edbc9b179a671217fe379e70a21f854c4b235980ff6dd4
SHA51248eb5572bccad9fd5d304411616e828e7f0453f2c161a5e1e6c62884592e2cc3f930278ad98b82fb25c2d204f6ae99809386d3dd822b413a529d2f4423242105
-
Filesize
512B
MD544d13cf264147b233ab375c44c7a00a8
SHA1108d80ce54df0b3a7bd726b97980f6ee43e4dc3a
SHA256db4c2ca90c46b7edd27da3d70534477350049de94b4999a918cecbebeeb62018
SHA51225e732a3804b0ccd1013230ed4d353c74515b2ea83e514de2b1710deced829489ec3ef6328bba9d7853cda2c7c057346213dc4d52c71c97ece84452fea90a4a5
-
Filesize
8KB
MD5b1b4fe1f7ec972ca243a3f79b44cfbfb
SHA14a68905aef4dd9519589278a487b2ae64d15b423
SHA256525ccfd969c6d6c9244ba061527b620951eaadfbe7ffc53d526a95203bf3989b
SHA5125ef2dfb221c6669af5e6f880124da4128318f0ceca77f88a991074919ac328d98efd169e8ca0e88c303200506d30fc1a08026695fb534845f4a14d8d7f4cf3cf
-
Filesize
28KB
MD574e478b81c23f77399e4d0cfdbaaeb43
SHA1afdd76a5fa929fa16fd3ea63911557ac1c7c3f4c
SHA256e79aa7aa0ff063a257abff76a835d6a117f0df4b6c0306d02db6e91309e7f2cc
SHA51266afab93e7cc48063ccd1e4091017cf7c3852ec7a8a83d29fbd4042582306d280edf9c2442ef719dfe2518eec4eefbf997cee5233d9767b0e637a33ba1c902da
-
Filesize
512B
MD5360bc50625c1bf4946111e782a618e30
SHA130db580a116f68506fc8eb5b7f84d942120ca214
SHA256d28e70d9c327ce0d18d59bef7edaa3ee36ad5b1c9edbac65ba90f820b6e773dc
SHA512def42c642db72e280e7d423b2eea52f59cefa72284adc083f143d933b332e830e905400fae8084aa577d15b66353aafedf80ee5146fa6d6779f35c39b464627c
-
Filesize
8KB
MD50c90f2f9d6def6367a9e7905e032a5e6
SHA1881db05371796a8bdb649ad3adcbb5d173114fbe
SHA25645751bc61ebd42c886b4c24da00790f21e08d03eb3302643319c23da56e085e5
SHA512cc5d3166822ad4ea0040fdf042c19395fce69255852af956a64182a3549dce9f53027b1aa7a3a53d4d9dce965ac8cf6dd8f0814bdd7055caa9675f2c9c8b4560
-
Filesize
4KB
MD558d1c23f1fda8e4ee25055f126406c79
SHA19902687a5bf043149ed47bb1bfcbcb372e0ba756
SHA256ba578e5aa750311aae97a72bb76158b85e372af5bf333a860ab629622cf7896a
SHA512ac1c2bcee5ca26edf07e3d4f746504b366d9090dfcdb9f65e17aa22ea10e1105cf66f6bf4edfc032e8bc1083b3eead24e9b894818ae7d9a078ddb55c31ad30f0
-
Filesize
8KB
MD5ff4187743d5863ca210b3be69fe6224a
SHA17d6e1f269eafce664a1c74bca53d4228cab1d886
SHA256b9eb3b617c00b23f5c1bdda247d1be943ceceafc889cf496aa2b38408b91dccb
SHA5122d531fcaeedec5d0150947be04d419c4059e8ada9fb92b30669fd575956698ed84a64cbbb03c9313f4bee76400dc81e593db87b4bc1fdca67ac1f28bdc364794
-
Filesize
8KB
MD5f5435977780f6ada43ee20559ab31943
SHA16f7dacca3ecedf02ee1de2bdee65a1991c444c9b
SHA25670c1d0bfd2736c2068eddedad05203f41bfa9eae8d10f1795a013c02d1c8d842
SHA512448a289fe539ab88d8552cb61da74a40308438c63091779cfdb1828cd4db3f2a0875ec7e9feee0623945ff4d39cd9038ad445da023c6fbb3cc2d528532ca19b0
-
Filesize
12KB
MD5e5f1a1e60a967b1607fe486b00987e8f
SHA151892a7c0b4a8a3a3ede0f7620f02ac4904a8abd
SHA256e3131470b0607f74ee69e4ffa1651782a99860f511242aa1c4b07c65b529d79b
SHA5124a22eb9d37ac509fc2f23e90e0b8c7639ca4b629c5b5e5af0b242b2afe5b6e48cdbba3340c3f1fbf8f2cf0dbeab7f3b2b300e3f67ae7c577042951c7f7e26f6c
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD57694b1d6a8528a5eb307b434f557f506
SHA1a80ed014ac69b9d43c4ce9033bf071d27fefee36
SHA2567ccf3ba529f1e2df309d962d457df6f8fabac6e47d17790394b2830dce3e4f00
SHA5128ba5502fc80eeaa75c3166096ec6eca5e610e55b26dc08a1aa525760c1b9a0fad77d81791ca08374302c3ea51ec9ddcfa471b8a1c0b19c3ac01ea58d21b3b03a
-
Filesize
16KB
MD51c893228de8a45c030e947cd7ef18f78
SHA17273ac87118ee15e886d46971dec140eb91ef220
SHA256cf711ab8f9fea477bb2af00cf93011f7b68c2e12bf5ae7d32aa2e713c35798b7
SHA51285d9bfe1d168c219e01a708f764cc140df68b5f8f08aac09fdda8f83b36a96026f908c16b74abc9046d1f793f02c3918882f537b8f504f30b739e0273dfe98a1
-
Filesize
16KB
MD54c7788767cbb1cbad33f129b1537e9b2
SHA1ebb39863dd93d6b8551f46315ea226d1e78300d3
SHA2560e03552d5f5e96aa33cddf5b102ee6b26b7cc00b7c51f9ec24c8722131ddaec0
SHA512e3f8021479897dca198793bdbeedefa9adf3c3edcb09223d49c69ffd4c904d546afaceb451c75ff7b822d43643c821363a1d6a0625c4fa4910d2f36a047fb1ba
-
Filesize
16KB
MD562d7c511b2262afbfda000aea3ec10d4
SHA19e4ea17a6256305d8c869b3ed83fe6f67f5afccb
SHA256b4342a499243255c77ae1973c1805d61e53e853bf3ad549cd520299237d4f265
SHA5120f8173cfb7c06415d68278b239f0f87f4b09c00c658af4aea7e58ce424174afc12a008a37743dd107d0e53c7b999d63f851c04645bb695797e7c205c1063a282
-
Filesize
16KB
MD5a5d4176a81b5b983d6623440d0c6f681
SHA1632c820c46557c671fafe82eaf0bf1565d8ba697
SHA25698c0c2ec6ec441d4dc597633e9ccc5900161e49cfa49deba1c2ec10d052377b2
SHA51234234bdbdc82f13edb5a673128214bc03dba173b8119ce76d04f0289412bfe737ad3165a578aad386218f936dbca7534225c3e0e042f4fac115a52971fbca67e
-
Filesize
512B
MD5f34448d1da7938722a13e6f3fdb34e1c
SHA189a5db9cd2f4e5cf6e48d7d29930e7a74ffb7d95
SHA256ea7425988638bbbcb13af838cbd838b638c5fd4c0656c5f69a3dd7620eb8ac9b
SHA5123feac8420bcc9c3699a9e0baa386d94c5b37d14ca99de671e5f390b11cd90fc9ca7f6ba350839d665f63c9a2867d2b41a2bbdd80d8067f77630f6e004b858b6f
-
Filesize
8KB
MD5c78e8fc67da488069cf1f0018551a49c
SHA1b5f145233cc8a0a1f6030c117232a57161c4dc76
SHA25647887f87a96df364f8d2389c9124f69e3262cb1cb475cef315661d831d5a9f6a
SHA512d83076709a4c55b1c23da9a34ae614c825cbcac04fc237051b2375c2752382a37d908c62af191e4680e94514029551e04854c4919d60f0f34ffbbf22a2e71706
-
Filesize
4KB
MD50dfc4153e94870803590419e0c0b9c1e
SHA17cee0011b7c84d64e56e030b24ce67fa1d2e8a7c
SHA25615a9aed1b4cba0aad044e9cfb5e4fa666327e95d40ba961cb7815cbdeee32b1b
SHA512a75eec893cdd4e5436291c2c2f5edb9f24e2b9a2a5dd90570056f06852207222f9803be003220838c3acffbce1f64b358123707c517ee2fbaedfd68eaf0bf28d
-
Filesize
8KB
MD540da50ec4ef46305b9ac628f7009182a
SHA14875f0c5538abd2f70fd33769eb2550af7dfebf5
SHA256a305ceefa4d148faabe68399b948cf5b0e597bdb447fb1144d9d054a10b915f9
SHA51219c130e1982bd9b917d2ec3e89ad2481c6c88645d0900bf798202a4989fd83a62a0a2372568b89b19e6c991eebce2d14f6df9b93398cc424c52481233dce7606
-
Filesize
8KB
MD56c39f0e44ba16e20c6a1cbfee3545e3c
SHA1e4d27eafc99c7c51a2c98e79b54c315370a9bb71
SHA2566c458231dd6cc1b304c5b0d95840ecf600618faad18e1a3d12ee1ed1ad5be445
SHA5123d908d360e6a7609f5804cfee221d305f454ca23464a47fe60922d58b47dff6a4f6203031b066421049d79dde821a8b24eda2a006bc7b73299a69dcdae61aab9
-
Filesize
8KB
MD5f9191f43296e035b7b1505a4a4e56895
SHA1a196e5d3b4c372143f72a005b5adefe5e898178e
SHA256e071e01f6873aa96c2346da0c689b2f85024f3e880a03b77c84ae48e051e2c54
SHA512df0847719b7efa51de4f21316bae0acfe8ca763665b64886181f87678c47e9ee5ab80abb2918f3a8ad0436a9266a3f0852840b0a71eb26503337876db595a50b
-
Filesize
710B
MD574c09e4d918d0a0cc89cecb6aae11590
SHA147e7e2536e2c7c092f7028415f7ca44f7b673c7e
SHA25659a769275af3595023aa356912b3fdb8ea4afbb472f59aa77e1ed6ee1b8dcfbf
SHA512c2073258b7bbee86f59f9d1306c6c2ee0aaa05363d15f77ab6c147f21307c439bb3987a746a2467e8c129a4147023c6e33c938006915e68effd3934e224556e7
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-661894C20365000112487505B00A5BFB.temp
Filesize439B
MD56b5e3efd337de208dd70f67f0c822147
SHA1e12e909c44726e384cf9bd5671faf6aac3f4ef5e
SHA256f35c442f5385c2e49310767a12dfb01e4184e062cec0b330cfbb54ff855ec455
SHA512b69806c5f7756ea4f04f4b9c0a100a52d2472461dccfcedccf66e7017870bda3bcb48e6b5146be5a09f4ded734f0cc8b584b1d03e047787a67c0b4bceab52afb
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-661894C20365000112487505B00A5BFB.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/661894C20365000112487505B00A5BFB/report
Filesize733B
MD5d79130c71e1efbc405cc2ef7da2cb615
SHA1034ca3e3853261bb7105ff4e4ac91bddca6f21b0
SHA2569a60a2c4690fc3322d12ccbaf3cb8da5f76a7742d36f742fe31d27cff92ff3f2
SHA5125e56a55fb1f1c6d5c115fe96e9174d1bb8a1e025116f81604a3299d490810b04c741e478a738f74030c9f28e1f056655f358ba54550479a19957997d78aaab7f
-
Filesize
90B
MD564c2384cbe2884ed75c11e9c64c4857f
SHA16b1e47e62bb5838c1273525c041f15f019baca3d
SHA25611d43973987efb4cb7877f539b48d00307018565f2e6e9d6545431f381879faf
SHA512cd1f40948c23157540e03d483386a99f3b983ffd50505a6516ba979b9ac0e791f6559a42d9b851056f7d1e9587354368eb3b760deb57635f209eb1901ec48246
-
Filesize
565B
MD5fa220a718c75f8ba491346c5335a104c
SHA1dace8bcb734d4bc1a0cc93c91e8cb3df08b81eb7
SHA25668a55f10530cfadf66a3a7aa5abd9ff4b17468ad1463fe28bd4699028dec9cb3
SHA51277cbcc9fbdb1783fd1c7279899d60894c1be5d08388c9fe5ae64bd22616302f75994b1b451f65d676f6bf45fc01e3ababee58109d308f8477d76eb9e6085eaa7
-
Filesize
36B
MD5430cdad1f8012cdc68e35bc7f7948f98
SHA116d1f6fdd50fc00ca42bab80adac638ba6d88852
SHA2563ce8e65d655905eeacb9392781c3c167d02b445dd8422af0dd5b2aa5b6b137e1
SHA512c89a9586b1675bc2d14b8ee06db3bd8f78c0c7235263da965ca0bfb8310602b74e456112fafe085cdf9135139c1e985bb1a14a77bfbe514387ba0549134be918
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD54f53ae5f90e8d361a5cd6f6ff7ac6c0f
SHA19c1b30cead77c801287490010ca12b4f7f96416c
SHA2566372e24a20aef5597e96ef0a6277c5d5c901cb5a44cf89da5c35e342e223e730
SHA5121df4321ddf51331d150cba1440269930e14c152bc6405ac69a9fa5067f036586d6d60331eaa97119c4b6ab7693b0c0c49b704780e5d8c242e3aa954d504aa591
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5b79e2b50ebcd4e9b0762ef962d6ad2f8
SHA16553dcd12b3a6e1c588ef223f1aaaad19213b92e
SHA256840b3c877716a5a6cd3844057107325603f8f8df180aafd7cf67876f11429ff9
SHA5129065edff3c5c114fa26e4f798a84c9e9469fc6687d21a69c77c6d9dc5840ffdf8bfebe078d51094680e8500fff8c008b3d02c0b289acbe828c6a0e7db4913175
-
Filesize
108KB
MD524e671405dad25793da5a437ccfdc311
SHA1b54d0fc9b28ee2fc9fe776f3d65b14fc8176e750
SHA25602b250b925159e8d1d0b436fdbd736d0d339d69689625ac289016bc88719efe0
SHA512e6f2907b6f6a83f62c023e1ad91696e805a72204b8c0c89e099284c59f20c11d82929ecbcd890e9f50e7c969dcd28c16dd91aee898e74a128d483e30fac70f43