Analysis
-
max time kernel
47s -
max time network
133s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
14-04-2024 02:57
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks the presence of a debugger
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5f9463ba93abf95dab8803aaf31eada14
SHA173e6ebb5fbaacd69145995298e241c79b48f29b0
SHA25639bb1a1802a939d04d051d6d01a88e3ea180f9a49f9e02fa17a655390724eb81
SHA51284a9d484663d9d0902752aa1e48d58d2ff8c9026f6b4d1618d9a0f0400a90eafaf418933a71a0f3e450e6d18d0694b09ec7d8d09801c1c75e3ab6831cda151ca
-
Filesize
1KB
MD548a5d1c6cd535e448b75a3d72f4e0dd3
SHA12706be4979c9f2d97430caefed9fb30286de87d9
SHA2565f72305eb45598a12e2b0139c4207b6565349c7f4a00deab5d60c7b37ab80c45
SHA512fe8e535b3d9dc6440441e15e478742b9acb5a618bc00ba10d62473009098857cab5f97d7910ae062293e4293899d0d5a003284e0ec86e03c19752896486fb5f9
-
Filesize
76KB
MD5244592a5662464f9e6e8aa5d52402428
SHA1885e44dd3ccf643475ddb16d7d2eec0c809fd1d5
SHA25654b29062aac9ef91d03294047b7780498a2cdf0ddd75028dcebd9b6b7a88214c
SHA512ce35edd0ec05450bb08d6b47583393eea034333b99e13ad2bb6848724f09ed71334a858e5cd5ccb6909d516ae70545c3e7c98ff15673005e25c9ad60b2a11b17
-
Filesize
512B
MD52086a0b5c39346dfeb5cf4e151158d93
SHA18f4f574ca55014e3f44a51607cfe042ad3bd101c
SHA256e31dcd741e218f11a4e23d1b210a8a873bba90feb1a130ab32887babaef118d9
SHA5126bff3fc9c37568e2458049788cb46dfda9e3bdec36319e9f080046db1d27a8371639a9576c5ceff0ad873c36728eb65ad019663077efdb331b3739dfb9623f21
-
Filesize
8KB
MD561b5e99371b34ebc579090f3812f6a3a
SHA1ca635446acdcfbb01cb5bae0d45766bc9a54db18
SHA256cd7900f7fa4bdf53c316147334918ee4db0b7354b7c8b9150695e44f9a88307b
SHA51279a13a0caa83e9be8b70e572de35eeee1ef8ae376c2caa056608d99b49b83df6cfeb4e8327a132f7585f518227f24f233967a40340884d7e04493f1c6e20c1b1
-
Filesize
8KB
MD5bb710f3cf3396775476f2914439b06f2
SHA119a70515e142179a25fa2a87b3ca65f778f2fecb
SHA256af6d90a82f2ab847ad42c6ba4335c0372ca3912a9e27f7b980f2aacb455db925
SHA512fecd797f908f96bbf91aa8088af47eac75bcb6ffd6ba7ed497ef45c3752d98ee376f90e9926bce3ca276a5c15665b78233fcdfc5fc5b43f57fe66e248e26c3e4
-
Filesize
8KB
MD5d85631a2c902a4df726533cc7bf95c83
SHA1d5a7ea78e0657579f09a6bb36c2bda59d5ff31c1
SHA2569ff70c981dd7beb8e5abcc3cec785e3a494d986c134b4f97da92a3bff35da414
SHA512cb34351779fb2f98715e99285b9e74039f87183b7c8242d0d51272cd325b58052d7b4be6ada982c05f9ba6e1d0c99b11b6251e32e08ffc626dfc1382f24fd817
-
Filesize
8KB
MD54e821cb86dfd2947f3b2d5d38b015061
SHA144a4a45ea0ebe84d532ac7185dbb8c34c8ecdd6b
SHA256940980c2eb8272dd8025cbd6dbdcaf1b8ff0d63c5d2bdec6375a61597dcdf87f
SHA512b8374608c035ca06d12a1655ed9a8438bfd56fda74959d4d353b565e8f757681ec05c4813dde7d8a49b73132d7ffb809b1dd6dbcc69719c83b5f1e997eccb436
-
Filesize
8KB
MD5b90065ebe08f9155fdd6a34eb93eb6e7
SHA15ff999c95064a9ac488844bfa078e99836cae7e5
SHA256bfaf96c8800446734ee0218ec47eff880388527c2488ee84bff61c9166b7c46f
SHA5125253b4e8bc774551077e6af6364622569c1e743e605c8669e08fd8e98cdde50de3ff6f978418c2123c201007612e1cdd33e382adc34b6a7c5978bbe08a0f7dfe
-
Filesize
40KB
MD515d5b92dcbda7ef7f9ca327a903e46e4
SHA1ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA256e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
SHA5122352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
-
Filesize
512B
MD5e16464a09fb2a810a139412acfd14839
SHA16f487847883e8064e8f3e2895d4828e2ace1d787
SHA256372209b0950c37a29ec75f90f09044c75429a1bf86ebdf64c063cfc16d7c31e3
SHA512420fb9b44898a28a8d3a66b52186e431e634273941eea978c641864e929f78d4e67e5c5a9174de292c3d35327ef8b83e5708621584766d42399b3d4b5f674a4b
-
Filesize
8KB
MD563c7e8ee7e18e5c82af3cb289a5db2be
SHA15be8b3987a09659ca5acba4505f63ee5098ccbe8
SHA256e43c13a1cb3bb1f019c6574c813caf0bd2ba0d5910cb465dee489c5412dd06f6
SHA5125848d0afb2e2c9a0c4923a0542a29adc2e6dba2b48793ddebdf420349a77869bc2f86eb3d72577c5e629807e98413aea671dae74a0859c3d9d717f850a718d00
-
Filesize
8KB
MD5f2698612345ed86340d2e8fe9a6cc09e
SHA1d25b885215166f420ae3141897adc5e9da9ed1f4
SHA256f807a892d7efe1e8fe0bba214624d2ed4bbce02b43b65e9b9ccee5119cde969c
SHA51233352f21de15ded0f01aedf54d1eaf53759476f89029dcc68723f40a299d9912139da37727e6d26168bb592331a542fe211af2ed832e7048e013dbf5a79b0779
-
Filesize
28KB
MD55c0dc25d8be42f38d5b8efee3cd83d59
SHA17b14a3733cc1ebbc7f5fa227f89734d489623ca8
SHA2568f88b464afb4aa4ff73ee18823020c61201fd252c1894878ec62c8777e43d075
SHA51207ae4826d7d6394a4f903ba0fe45180316dacb41e608d3c70a2b956a65cc9f077139cc8aeed57fef358f6285c6fdb0ef6455a54207d401f3cd1feaa03d875ee7
-
Filesize
512B
MD5aacad882c8785039c17cefb9b5afc141
SHA150f237f19f63d3f1e00c834f6644eeeb02a537fd
SHA25658aa37e707384436feb71cae95a548ecd442f848db6230774895a8e1d912d808
SHA5120e05e3fddc9c20e7f95b90dd7ee821a0c3a998b18ae00f553198ce60987bf532812af78d5f2181530d0b768f85ce3c1fd64cd7a47b6863e1504c663f42f8dfaa
-
Filesize
8KB
MD57df2466801c3a1eb8e1861eaa45e77d8
SHA12946598a1f3b2d9b8c44598bf27f7d5e57c85e2b
SHA256c99f84830049ef412858e235c1416759efef167e2ec8d42b3eb5836ff18bf2d4
SHA5124c1110b60c62471b369fe7bb7e2078897d530efe37a32c17ed61167bb95a259689b7f269cf41a780c380d23eb4ec1218bba7f9fccd1f575b1216998354e591f8
-
Filesize
4KB
MD59a644066bfbede76fc392d8c23438355
SHA199271526268440add1ace75fbe8e4fe29bc3d5d5
SHA25654b2f8624a79d97d0ac62820e5ce5336fdb5e9aebe8b494e120af8585d0bdb0b
SHA51272ba543b4de9032ae7851a2d42a95182adce3c5ce7580928240b06b807055af828999bd0b18e0f255ba1b96f201c2692647ce4b640b550ca4fad200f8ead9584
-
Filesize
8KB
MD5b75e05c083d9c8613b4a0cc78ce3c63b
SHA117520f5f482ea545d2449767ed443352199c6b05
SHA2565b2933df30e157d424b2387d219131addaebed5dbef4430e02a8ff3918d5bd11
SHA5120a893ed8fefdde37fa5b097ea493bfacfd94a94095ff3e087d658c50a658114aececae0fb8becff799b2d268f78f06524fe4f7ca5e27cc27fd41f85fe59cf0a5
-
Filesize
8KB
MD54aea79acdefc85627d651f078364077b
SHA1e556307468c90083d073b92bdb4aebe0904bceaf
SHA25649c864999eee595933a191df564d03c2638b0c127c13f1c90c49b19904f7c0e6
SHA512152c1b40aa993d87630377e03be5957af5289943842290efab82a6b9a2b78f724a809d52a46b96eff7e5d741173125f94770f5ee0e1bc3fedc1a5188af8282bf
-
Filesize
12KB
MD564d41c158763be2dad96c9fc51c66b6c
SHA10f42534da2305761c281be2d7000e07b289e1bab
SHA256e216d42dd3ee9ff1a3adf9514d3e78731f2f84b2de78fe29e7ce68109b64aebf
SHA51284349d371b96015eb704ac8fa893cc9b81708f89d03e381d621e8ff6d649017d3dff0421a1ca52550a3e7e8a645563c051a6af963e3cf4012747525a573e5409
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD5188a93a8c224c4de8ad8b6a35778d370
SHA14d086ef696a7000afb507b7f15e56b4583366312
SHA2566aa913359a4e44d4a0564283b8a1aceef3ec48f28ff674c387f9f1e85d6fda08
SHA512228bf5222425b46e9fa0ec74eb16de5b18a9c3edfd57465c88d3f9a878922628a1cd290c1055a8c9fe41b6b4703d6b1f82b24e24d5b489dd9f705ca0aca9635c
-
Filesize
16KB
MD5f86f898ee1c00accdd5d610eac023e77
SHA142c0b5ec9b6f97931aae162d3b94bb06c2ae0af7
SHA256abd8342776d957ef776e7e585c96e79312e25c66276b5a72a2c1e9d70cad8148
SHA512c4446879325734edd41522907594e3e194eb3857b8740e1e4cc7686c364f026799d2aae3abe2adda9bf84e54b6be9e93ae9c08078c5097b1b09c6ba64780b887
-
Filesize
16KB
MD54944b3f59b350cd8bea90f54eee4bf86
SHA19e43225749a0f9a1bd16b8aac414577befdc0f9f
SHA25618a51fcc952ccb7cd6784541693100e9234ecfe3b20aedbac3cd967c897b1e7e
SHA512b7fd54d6527c7199531bde95eb4397137a5681c6ffaf7732cd00583d7d0722759d273051f3081cd69050886da8b92e3ab4aff1e6aa874f3da4e635c888f8e5d1
-
Filesize
16KB
MD55ef60190c6b3b60433029068da8661ee
SHA133e0e452aa6ab7e4f0b6a57eee38112b5b4a2b1e
SHA256f12a1ae04f625a9cebc6b3d51245d514f7864f3a08b79b437fcdd28412de0eef
SHA5120f123a993f98ba4a1df3679c6ed2e46c52238f858a609b6e43914953e76db8b0fe7b8fb88e41cd596afa9112f579084d7e2e8feed6cd96b12d1937ee14d80e00
-
Filesize
16KB
MD5eda96559b53540b070e486f526a4cacc
SHA1ace2f4645a2297d178ff849a13c95b9432445307
SHA256b535b1cc36838c013324c98e411f043cba25a911479a14bf498ccd52a51b3968
SHA512438403f921348431cd8fd0cecf380868e2dade89978c25a038b86447017a3c04f78f3f1ff9ff610cb1adb12919854ca66656918526333896ef39e6a2502133ae
-
Filesize
512B
MD5604694ea70450325eac0296bbde89ece
SHA15b65c791c75577ebc9b8700bec24b2b21eb2e7a8
SHA25623e2fb80683ee9472ee66de139e8e34b5075dc258146ea151e313ab4129bedf7
SHA5122414c5af034791db9666e64cee371b20efa7ea970386d29ebb08fdb927e9e5048ece8050251e2e461d4b10e6dfed792b4deb397b6f642a6bef8c7707073c5a66
-
Filesize
8KB
MD5d59d8411b58eb0bcf57a794a10c79296
SHA1d0ef5133a5632202c79b2aacc26407ae1207b6b5
SHA256919cbc6e2c57095f47ae7648aa8f0b5a61601d18d19106f9a9d4b517f3a0b663
SHA5129aeac2fd2e5912ac388dfc590535bf625c52371c7c3035775bb64c1a9cba89e95fc837796131a3f6b45cfdb061e38cd9b753b5f2e6de858c4e81aec5ed77cd35
-
Filesize
4KB
MD52a673ce8e567631e3925a15bae77ebe9
SHA1e9128f3c7761a546b74210a3a8f8f5509991986a
SHA25679559bd5500907efad04f245424b2cbb50f03fae3ccde094c83dd37792e81c04
SHA512e086150383c6ad9d71db060cb879ccea2b4aafec4c7a46ffb5124eb9d7b7880ecdb5b1e187e6605972d26e068655b04b7b48c894b3214c36e7aa4ddd2abdc74e
-
Filesize
8KB
MD524cd3c5ef0d63c72b6760cae3364b136
SHA18fe952d087b6dad831be7908a5ae5937151fcd7e
SHA256d7709e3a9ef4c008f17b5d69cf86b16c39589c989dcc1c27f39c8cd90fa89938
SHA512f3b2af31e2490fe3f3c0ada8ce1aff26bdc9bff467c23136a7ace84b91a56fcf9f79e58c4cc4e78ee5a336388a404e7996ee794066f5e831b672054e2b7e4f49
-
Filesize
8KB
MD511e02d7fbde9a4e08957a8daaa91bab1
SHA1221ed2fce8da676298cbd8d98909c93a8fb1ba7f
SHA25699be56cccf7ef28d481f92b7b60319381cd8a91015d6ed981d4bbc524e1bf784
SHA5128b1a63dedbe1f8ba9df9765454577420c5f1b010b30c8e86a82dae26fbbd0fbbc8bbda37133cc6dbb5c4af11fd311539073a98c0e2954e11c1957117ababc86f
-
Filesize
8KB
MD56a9f73039716a3bde69fcebf2fe02e29
SHA148d9d7a4340768a643940f1bd42e210c38f620b5
SHA2560e73eb6d0ea04110a7bf6a65de37658798ed876a866a97d3bb4ba018b1f2794f
SHA512cbdc99cade939a7a7f30ab078782c7f9c5cf13dc948ce6e1e8972ff123381df7fc347f5694137056285ce9f1c6ec3c25f2efe962179e6bd29ed6a8eed2acba83
-
Filesize
710B
MD5eba255b8b10d8bfa280a6ee81d2ae365
SHA15ad0c782c3fa8eba07cddfe44341a6797fdfea08
SHA256acd0adcca8bfed1307de80dcf9b9267fa918b448712f8f99cfcf0f466159430c
SHA5121d740453e2e52ce662fc6eabab21906c468480ee80980d4a27fa876f263560bcd14460770348054b0e821c5156ce5bef2bf0d2d52244638fdf8f83d9de82e64f
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-661B461C0219000113F15C004C0ACB56.temp
Filesize440B
MD57361dc40f0fe550012a03e145cb3be96
SHA101e2bbc8eaedaa470c416c2e5925853be266a41a
SHA25694f8b4ac00639de9567d5952dc42038bf61fd43fe4797cfb4357439cb71f2623
SHA512f220cfb7470554e22c856d9de28b5d5e2c71cf92062d0ab11c949adf995e9b68c2dcd5858bdf40538c768aa8247de5b36a6364c47b2cc41cbbbae10d026ca99a
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-661B461C0219000113F15C004C0ACB56.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/661B461C0219000113F15C004C0ACB56/report
Filesize733B
MD55fce9f63911aa79cb2417d5a0915debd
SHA1c85bcfa61566df5fabb96fab1049ddf133bad5cc
SHA256f0acf076991c48792b6ca1e067a28f4c224ac77d893768e5c2cd1bdadce9e3eb
SHA512734f60527dd446f387d7cd55a93bf15dcbfad6461e8336a54d68a9f4e066ce303eb6bd793d9ef35162c1f96c8a1750f02f1fa60fadf5734ffbbd0be32c987292
-
Filesize
565B
MD507bfb291b178b4daa969fd5656d3b560
SHA1954eeea4eb25cf364ccebb49a92f387a55335088
SHA25634bb9ad36d5a54a17f873b2e745610a5a2a1938cbde5026a69264025e509cdb4
SHA512a68e349443c65b6a7a627e1acbfd288f16a91d29a0f6f865e2b886569c7ce6eb8791ec82790edc760c6b2bf8d372ac67dae19694c9fe831f6b3f8930368c636f
-
Filesize
90B
MD5c6f8ba5c9f0443b5156aea7cfed5d2d5
SHA155016bbff6dddc48ff5d9a7b3af92ef5ada6ac57
SHA2567bcb62efab42f466cc2c42e4f3aca6f27af2b121ff46b718592611fa7892ba02
SHA51267e84212392f01da0fe62c9c71ff876ef333cc1f32d104021e9391b4307149f229bb6c806ec4e7c4238ed4ba96108374042a6409065bebc872e9ae0594336700
-
Filesize
36B
MD50547d243eb2aa0cacfc25a753334345d
SHA1ad0c25617cfe7bb8add131d52abf2659fe8308c9
SHA25670f62b327b69229f763c7a284822afd2de35eb353b432244806c61aa8b0bd0ec
SHA51274f72b7b25ac7d6b5b49e502ab969266e86822d25458c16fcdc6f93fc2c42b43badf8b445dadb48195f3b1f2a7ff1430570f043d414ff28c4516853dfb177433
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5554f690e8fc175c1dce234c2d1165fa8
SHA13dc4052f6cdf66da999851d158a7f32d85342d6f
SHA2569475db3585a4f0d368e8447888100561f5b6cfa7c05468a6fcc36f06b69095cc
SHA5129c1d3181399d0c26004795f9755ff2decc36f31b4e9659ee7d3316086559aef8e75e4545f0839800889345c21ae9f3bf95b53ee6a0aa097be5e305f7d8862d89
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD54721a624b20fbeb6ea578b78377993d7
SHA1219c67e42b09600629fee8870c8d3290d9ff090a
SHA2567f013b1de381b49ba536da208f6ae28065caad300faee13482c388ce8da68a31
SHA5128e1d79a576799430bc08da95a762bf685cd32cafd319c2979f00e679297a9d8ed2a04c97fb0f98da7c6f52ae56e3a44a1e5ada8a58b8796ab9b4a084c8196b82
-
Filesize
108KB
MD5729b73b9f433e45d3e3624c9d837c3da
SHA1b7b7d77d9d541dcfccb2d74221aee5032c44e3df
SHA256666d940a81c3688e71c157b1b6d99d666c1966b9ecf5857d3fb53148c5ddcebe
SHA512b8e5994b606797fe50b2032bcec7650fbe28ea2140d484828eb6d3714e1f8d11bb075cc9b8277691184f87d93d4384189b1df113e3573dab4f8eb96aa6b5bfb3