Analysis
-
max time kernel
47s -
max time network
134s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
13-04-2024 01:48
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks the presence of a debugger
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD58f1b4f3325816e7156d197c37d59d115
SHA161210d469f8cdf7881e5622c34d9c35f3427a408
SHA2564d272d6456881c4d2e4f3a364048a0da119d8f1448ec27eeaf84c39efe71a896
SHA512ed637a699165b88a0b8c6253bc7d937371d43ab066d5b482cf5c4b1ad7d9e1f5aff26ed8bc9f7f0bb0aab463fecfc5e4ee1759ad676bb26df8a316a8bf1fdc55
-
Filesize
1KB
MD56fa1c2cc45a7427c384770d485167b95
SHA1041c2ea77e9c0fc51a3af8332e71fa8ae5eb1f1c
SHA256ca21d661a73162b0deea3a66a6a95d678a4a14c49aade22e525a86c4f2036a8a
SHA512e02b0012fad2cf014c17035ce86fe1c371cc94b9465ab9769965fb0f83b24c0e1e3c7aa09451b2cef90371119c48267371307ceafc6732f3c89c40b5643590a0
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD5d6e7b00bd00d35b420172b6310976560
SHA1c08d24f02cea8706bde53f95afe43a51250019af
SHA256a5e3a801e582370e160a5e4a955e0a114d0f51f01cd0d806ec1db5e3f38a1422
SHA51233d13e92bd270a53ba6b3c26f3d182fc7a106c256fbbea4223b122c80341a14b1075ef2d6b34a1310d5e7b8c3959270509297ed408b5ff2e84fb8a2cd52c947f
-
Filesize
8KB
MD54c6c61bd77833565e9c5a262ca8cf851
SHA18d5da69e0bda85209a1a88be79c5268016187efa
SHA256419d9f24e47eeee0f93f7a0c7d0d15e0374baf30795e78790006af17741a9de7
SHA512f543172e652c80e08b81096fdb228624a14b077f5df459c68f90ae15ca140a032a5ef2491bf889ef1274ed842fc589aeb2f6f7bf22cb3c59eac9b80d32ab4392
-
Filesize
8KB
MD5fb12d80f84efee8f6697fc4f84375fc1
SHA182797c33ef05842c371c9a01c62f4c44e16f31c1
SHA256527e11b4e834057387fc5592783fb1780423bb7bd7e88997b5e58cb89baf7540
SHA512c3306a9a9ffd0ebd3fb25040c962121f4caefeb3d6ab47ea33a1e17a48d0e0466720c845a5c6176d81a4e0a529415b54836857b9fefc6da2ea4f8371186615cb
-
Filesize
8KB
MD5f77b83efb9c211d03b1a90c23fb8cb71
SHA1027aec609b18914a5f6dd94d0438f55610114250
SHA2560e6e8c56c73ba70d107062baaee3742f5ad7ab75cc535301c5d51187f5afb641
SHA51205b0ae16f2e5eba2be37e8eb955111c1435d67f41584f8dea09bcceffa77e1c658d7b8b05c0b5f2e80eeccd47651685b99f7dc7f1155c803f6c69680d47aadf6
-
Filesize
8KB
MD5099847c3bf89c5d368b82699caf697d8
SHA17df8a78598d08612ab7c93864cd9320e551548b7
SHA256bef546a1203f2f0ea1e13a120f75102e9a22f454f392d7e5414ccef17ca69fde
SHA5127943dc82de95ab7dc2137154960b4c26f3317b1224d54dcbe0c18c07a1c7226a67c5193960777a6edfd1affd1b008e4d6da628a76ac0622a4701a2b58519638a
-
Filesize
8KB
MD57c168850db9ea0f053d9f4401e215135
SHA18fdb099f17df94a20775f32dd4628e37921a9b6a
SHA256dfe3e654856559d2550ac5c86c296b9da5e0885a4d45ba1ed6ed5e49468b0255
SHA5125c13010b501e98924c45985cdcfc664881792d231b84602cdac27fa66eeb22271d5a7f3cd1ee101f2d7bea6148494bf78705cff5fa79991b289d9de3a00b8b14
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
512B
MD58c474905f016089d9d7579ac31da73af
SHA1bf8b558e3970c3dbb2623dcd88e331b434a163e9
SHA256f4ce958d57f2adff06ce386c9f154b169e5c5bfae7d22ad7289d0fa732de00a5
SHA5120b6477bb65d29326c01e06681fb48446c242cf92ca8e329369d770b98bbdb896fe8953f9c2c55dc656dae9d4e97500198f9b824d76d0fafea44f198cab141105
-
Filesize
8KB
MD5e63b9733809fc1e0d039109aff0c4b87
SHA1968e70d4212c7e5692b7bbb78a32960225c4f468
SHA2565256c45cc61645c4e362c98d11abdeed1265ecc4d3ab98aa273f0f6d0164c992
SHA5123a559ae13c8775d42da4a1836d66330bf0f92ee0b2e3925ea8ec3427bcc7acd90055a5621b8d29bd4af3f651652fe946c01be89824b146bfeaef59972e0e1005
-
Filesize
8KB
MD565aa12481ff4e941210a8ee6375d3b7d
SHA142d65e95e5214b93b837724b04730cf6f2fb5f58
SHA256f4d696a6f256fb31844ad5e43f92c3b43d5f3cc84be44e564a1aec23193dba3e
SHA51211e5473a51434fc69bfe937b7bea33b8c0ba151d7e3c7076c4000cefb8248c2832fe57fe82c20d1ed6732e168b0ea345e68e6307e37e33502fd5d5f2e562e5c6
-
Filesize
28KB
MD5ccb2cce364b38028b5b8a6261230b3df
SHA1b298206fd7571f07d3614191781a091b78977963
SHA256ae20f64b46b608e4e8b5d923716cdda074698d5a29e63e9f77b8b532c7b53453
SHA512124c214c9ee37fc6e2f027975f3f2e7bd7357f9ca847edbd716b24a0e390d77f7896d5661841daa3c97fac300a683221336b55eb057f0e097eb5c7c40c699407
-
Filesize
512B
MD571f7234996860c8513a68f74dd31c5d7
SHA1e736297ec001751a126277aff2846281ba6d8633
SHA2563bdb7e06e48564165b680f4371741672c4029bf53a55155a6975564c64403070
SHA51275ace4af65982b1c7584f8ca60c60fd08f9fa58aae179952ab95879af682249366e64ba93b23478f7695db2aabf794cea208da58dbd0e99e7691ee644071088e
-
Filesize
8KB
MD5bb16b6a2ff50f27eca7710fd960852d7
SHA17f9f0fb8054846f3f902b4ed359839946f0f7b36
SHA2564591ae21ae581dacfb056bce3e745fd1009837ccf47d0a3258967b41653f3611
SHA5125514811eac12a58f5353535ebb5daa1f1bb4cf20f0968d5d7c8c3ca34d25590a73f9a79ff8ca13a824cc23d63e9023f616ba35b964484f3df013d212e4cff298
-
Filesize
4KB
MD5d81571993db0ca429182a06c81a58a1d
SHA13ef41deea2cf79ba448dd1809c1e4d5926c8939a
SHA25669c3f6401f3a92d46ce1048e9d6770997dce3220cf8282c607f0a7a5540758b9
SHA5129f383c2972114c163edd32461a8d7c7409dacbc1c368f112a9890dc379aa2b2f7e775d4f14dc4c90bacbbc0329c5260903b402d7e0790129541669e80b2f8e96
-
Filesize
8KB
MD557de015ed7d3545043109621ea1cfcea
SHA1383d74b552e0f2543f7c26aa1097a025a8afc8fb
SHA25624b98b1a1ea548d1e2f5796aad2b9c494af198f4f99dbb8eaafcd7ff50ab1c2b
SHA512cea7534787d1516c89e6f2b4a1d8ffcb5bcf4fe3af189f4151c3f9e3a21a597c62adc742eb3d719d33769165ba5f6d5e693c26d9495eb3ee96607933d54704d3
-
Filesize
8KB
MD57ac430ed0dc751f7693d3247b3f2cb62
SHA1d2d4d90ffa68bce57e3296f91d21df7edeb63c1d
SHA2561a3d53925fbdfc415f5f2d858c5cb9acce0df3bfaf2ef6f035a671fa44fe5749
SHA5121bbe1c79b9e8e62abe850d9487743880d7d37d256a853eb76d7908b619727db895c682766bbaab71a2ff046a4304f204c60b61fb924dcaeecacae37f4d91a530
-
Filesize
12KB
MD5c7cb313194c5fb017cafb18753cc0b58
SHA1df0cce9f565b3ea35afa239259eca85c079b0ca2
SHA256a86f320ae3a678b6c5900d2ec3fd909ab229eaa7d1ec240c7c03d9bf6382d32c
SHA512428efabd80e8f4e0056156f6649cb2bcc5b352c4d62d0f1d797fcd5f5a7b46b60e33d59ac0f481543e260036cc8c997d5fe16384459aa06328d2d97090dc7b4d
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD5b590314e40f7ce38bd7bf53112e02ea8
SHA18c7ae41341dbc45887df7e96e6183e1cae29fd25
SHA25614e1fd4efa48f552b5266886b4ee79cf2513c38b395048b91c8f53027ef642fa
SHA5120bcd3e0160db4b7bfff07eef9e142711c113842e51340bacde0f1d801cefbe24d40aef920f2a26da7b31fe53a9a688277256e867302141d13ebc683f40587494
-
Filesize
16KB
MD5fa51947f4b883e06b07a0680f10b8274
SHA1e29aadfcabfb8b8fcd8104c88d498d753000a107
SHA256aee2bddec0b57a4ac23835ca339d7306fdb1545b2e8b563fc2d3c5ec342cbcf8
SHA512a948c4224fcf5fd26df99043d363c3f03c6b6ad8aa3f3f60952b4b541bdf6a5385b14bcfd532e341db2b66969f09402f996ef6547ccf2a04c883f99865986088
-
Filesize
16KB
MD5a2e0cef32cc34017165998744b5d87a0
SHA195d175d8364915641537ab2edd258ef9344a0017
SHA25681eff0c9b472f1bef02a0b6660c95d2b6e8507896caede4d99f15bf901c8a271
SHA512b0d5322f82515c790a843c6971efc59933fbcbb94e4040201925a51ac4f47745977c16cffa4e8f4570b1857e660078a4b6703eb8f22bdae75c3672544eefa866
-
Filesize
16KB
MD5a6c392c3d146b1632629ed45a8c3631a
SHA14c485982685b7941d82319b15fe5b47ab600d175
SHA256a46dd7f46d6ed200b70931c31477e320b35db24b5f515f20589e9b9c71e85d98
SHA51282f726860ebe84ec46a5b139a0f327ce9f3e1337369f88fd4ba532f172e124561f83ca6b188d6feeaca3360c7c77dce6120c8635dc73a36c15fbce42b6222b6d
-
Filesize
16KB
MD5032f3834191a29b50b6b6277bb99cfd8
SHA18b2bb47d4408cbd231135988117e4aeefa3dd7ac
SHA2568b9921d6aa7e57be49d5874fda7645547c9b3aecca734ca368dede1d36896228
SHA512fdbcea659d35d7203e7f253a2c17dc9ec77a12de572b75b992f65454898f8c78207fe37e1e3cdf6a0e30b77dcabb3fa75e1a8a3c9d712baddda61f7e92bbf377
-
Filesize
512B
MD570d04fc8238cf94490f8f04385170e2d
SHA1f2acffbe6f478a916cba17ce9b06257c2677466d
SHA2568510451ea5129ea9909b4d329cb31498064924eb44ada70e0d7be07f7a47eb0f
SHA51231955940230b70b3af5cffe7f075d4799a070b08d512954283d77c7d098ac1ae76f173f8375289b286dab66c3168a310a84262f532e786179a42b6d2c2a10df8
-
Filesize
8KB
MD50c5bc5ac022f152e4645c7468fed8c73
SHA12456da78fff59c8b56b0689e729e95a62162c2f8
SHA25628fc75537cbe9eb5f39721a153329adc8554d8b11b729fd4f4ec964699c9007e
SHA512de1815f9098bc3c6610549f46e344ad7c80b14bd4f149ac8a7f32a90abb2f4b831290d25f6a10722e3133353fae6cc6d110c05da3de4854b21ed072720d49849
-
Filesize
4KB
MD59d918fe96815e795b994018c6980e00b
SHA17ea0a5457218c491c9c2e48e715310d5107930bb
SHA25653426aaebc20473e2c98cdf8920d3b08d1d31e2ddd0fca184bb02de53114aabe
SHA512308026de0f5e68cab85c046b7b9c485804f10627e7bd1df9c908438d4f3e6d93305e5d8a932835f43844a299bf69cfeaf193f025ec3ef352b75e70d6e9895204
-
Filesize
8KB
MD547ae8891004efbd5fd30a614aba61eb3
SHA160e73a2e0179885628d06a890b129a86d9ed43ac
SHA256f676ee8e820f6025103fc42ff57c5ee0ee03517e5024fed279557a58e7e3a94f
SHA5121842607e510d0b348dfc4688fdb3652cf879e00e52ff7d9147865fb353dfd3aac8016de470950db8f68c183847e919d99e859eeafbaaffd5e38ec5ae6775426d
-
Filesize
8KB
MD53f2be202eaf8fe4413b3c046e3111da4
SHA12fc216ff9f41652de05835d87c616181b8a08d43
SHA256ace91f3ee11ac9a199d0f5f64a37bad21b7635cbd0f82d957385568c8cc238a9
SHA5129c9f36937f50b827aa35d0887b3c87486463d9b1de3b3486472154ea31289664077d8394a3abae82e45aa2430e7e2cc817adbee376fa5e06ce53992ec718d3af
-
Filesize
8KB
MD581156801f29ec68e619ef4344a54dfd5
SHA158dca69f3f7032548fccf9dba29947f08fa91b14
SHA2569f158f79835d62e21524a2e8ccf772c80972e75ae42b85fb91293d4189e52892
SHA512a1d1d4d1a8c7adb8e83c4569a95676e33623481314a30108b3d559093d5d9347005525474d5776d40039a531435589a11743d78057f06fbbc6d3f391635fdab2
-
Filesize
710B
MD513e236084985c83066b018e6568079bd
SHA150717e56a775319966fefcbb81ed058fc4d0c1ff
SHA256495325cc475ac64f9d5cd7b6af4df3ee74d2e26415f860ce219402f0ef55a1d9
SHA512907f1a253316e963a880fe3d8dd64a19545dc55f8a744a9f2b3c347b9dcc1d92b6311121a67ee5dfb321e2d0def1ab11dd118d45375c7e7fcce0de66b5bea302
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6619E467033000011158BD306D5678B3.temp
Filesize440B
MD5a9cbd78625539888a773a36c0ae8ef3f
SHA1cd014b374ec9f092736cbb7e29b3c5e13ce30d02
SHA256727eb8b8e83b0a4e9457d89b17e5f21e1d3dfa5ee50969bd0feff181b06ac46b
SHA512e63b29001a2dda514e647122192778eb6eb0aa179120b01a93dc34adac36f440f36b803d8290cc8e7c0e26902095dec0dfa2f4e06770869b5307164395e56673
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6619E467033000011158BD306D5678B3.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/6619E467033000011158BD306D5678B3/report
Filesize733B
MD56959aa25c3700a9a5ed641b4eb7d6dac
SHA13125ec5e036d7f9dd0dda56117f8f98b1c17c449
SHA2560beda5f513258752d633d364cc8a910d4af3c4d61f08b64bb1f03bf0145ca5ee
SHA512168bd2f420f99929e9e4eb95310d37316c521d6e51b730f478cdb1a88a6bce14f3274baecb97cb7c69217f9614c2b2838a00ab02ed345fe9eb680655d7882c6d
-
Filesize
90B
MD59bc5df098c1dcb9ee3e715ae18ee913e
SHA156b4d2dab3a4b1e0d6f498948d8b03d7adf7d28d
SHA25657b45ed09450f8dda5c023e41cb58b98ec805a90029e9848398629c0fe2cb80a
SHA51254e463ade0927bb82ae07478116357688d93d0220ef70a2a46482b5f457cfeb46733bd02f9c50d0e4f6dbfa63832c5bc8270302e9b3ffb76f40745027bc26e77
-
Filesize
561B
MD57f150ccb546fb8274a5b6b1261fd64d2
SHA1c40d4ac1d1d08128c0499b855949cb6f108ab1f7
SHA2568c3760898a473dd4738ab51a514de6326edb46846e7cf9e609bc979fb30952d3
SHA512be216c58250049543a57e342a4c97b4bcecb55d69731e58f7176b3587a372705d9979dc242c09c95df3addaaf9b4d0b0e3139740e52445793b7bd18eadb02783
-
Filesize
36B
MD5a9e699acb7bf0092a84ba6c0b23abe2f
SHA157fc905af86633fc2a8c5523df335d588c7af3a2
SHA25633d57f44eadd938039610479e49ef26d64e6fe20e3bbcbfd57d73151be29c46f
SHA512903d4d8ae5f331ddb3188f424438f43b9a98a855d3049add3a940b6d21fc575367e3f5a38714c41f005818c0ecc71f887925615ea9951a11feeea071f7079a32
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5f58e54081473cde3a40c572e0eaed7dc
SHA1f9bbe4f9a811234b7bcae273f01a9845de5d427f
SHA2560396f97fbf3f86eea94284174394efa169ae0194ec2032c9dd87c67c2236e611
SHA512180dbfdd4627b68e1bf91f09b02b3d14ddcbe2aeeca1f4685a7bdb1952d019a8652de653a9b7ba8a3d66e49e7d18ec18e2cbf11c76c4e1613df1950093caaeba
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD552f9282b8b72ed37d52d06b687e9e8c2
SHA1f0bee7a3ab28fbc4089036a7e2f20eb703ea1f83
SHA25629145b1fd7176dbd11d3ed619b75a4b3a61f4fadfd1ef286e7c3d8b2ae4fcd60
SHA51265201928ca641151ba2e96ca28ec2470aa5b276e05cf13e2c88e518f064527df54c0fd6bb2fde6032d1c3cea0379ef86a01c20fcc06d7bdeafd35b64965331ce
-
Filesize
108KB
MD55843773ad2bdf4e5dd6b0a25986dbfb0
SHA14e9c6e5227612aaf586588a59e762957bf978b0d
SHA256cc7ea8500fbb290dee812e6a6e57f1bf7ea63e9e9eca8458fd867030d6295718
SHA5126480e0476ccb2b11521fa86c52e6324fbc731c61f3acafdcc2fa7540cc7f57c328762126d239c98208824b2df94b7c630f37cebfeb818c9b742de342db261dde