Analysis
-
max time kernel
48s -
max time network
135s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
14-04-2024 02:57
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks the presence of a debugger
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD52c913f7534c1eccce8d18e4785f05090
SHA13bb29024ebfbd58c628569bd2ae339ffa42bfc82
SHA256c72d97ad7308a4fb17701f96016ace1c343055b6345ec052de385177f48dd926
SHA51275b2dadb0030cc3ebdc4f626a5e57f4b5672802025153a3d0efbb9ab379a2c3cdc54884fa05b0e500179e9e3eaa4a9c7e116e29cbf17328d35c07e0296c831a7
-
Filesize
1KB
MD5e6803b6ab51e79d2609b067b28657ebe
SHA1d454d2307e59749fb1ce5e6cce631ba1c84417be
SHA2561368d3bde20353ad12320c999a13cede1f98fa5bd60abd4f3fda647390d97320
SHA51201147eba0a81451058eff30d3785b06d89e8fb56c2fe7546b105543d2e5f21d2715f9aa0cef20c026bac9a4a8c74287bb75d7a14c730a45d8e73ee243965afe2
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD55842b033197eec1f82d444f90973670f
SHA10159a3f29e70f625cbcae9db706a03f0a34a511e
SHA2564554c2e4b96e245257fb77c99b5d417b96e064c213e4198955d51578be33c975
SHA5123ea5483d4e080b14acf0684ac7f4aeba7572421fc09720819b678bc9a30aa7f1873ac73fc547ae2e129ac9400da77cc4421a291215d397648ca148de4bf10cc5
-
Filesize
8KB
MD5fa7e8b3a32f88bec4c7103c16e2e7161
SHA12fdbd3c6a5c319bffb2bd11374fce7060a237d42
SHA2567f0fc59155f32591e55df7f6a68d7b77c14f17b85000148742a4157761ebe79e
SHA512510f80348280c928d70e30aaedd301b27e670dd243fb575d0332ca7ad558d8ddab42378460a20f5d5696aa1b748449be8dde7068012a762dafaf8ed680627d9b
-
Filesize
8KB
MD517f606e6ce1368bd985cbb76d7118efb
SHA1204735fc5ec25eae36c36e84008de520a861c496
SHA25635581594ee2570723321b0d5948fd285dab2406b266af2b10babd733a9492dfb
SHA5127804eefd86b1cffebc2059d89ca770544be3d2f735ad23d9841fb959d624ddf85d315835ad0c476d261525215cf75f637462c1b9a03caef1575ce3f76f346830
-
Filesize
8KB
MD5f57560c726affdd0d99e5a3dc76946b2
SHA135ae241b1585b0d8cb718a27b280745099f81766
SHA256b0a51c1d0a6e35db3248515d16d4579c63d201c8721129bd157f75ee9197c078
SHA5126c44371ebc0ecb8bccc02ce4f476ac4c8bb3fd78e029b7ca1263046dd4dae52563727a6fbd8767e2cfbc04813448d640eecc272b3b51f9ddfc5ad0d45d48daff
-
Filesize
8KB
MD5b59603511c7cd27ee425be7b39d44906
SHA1e11df730bd48e0e18a71fc02c64967493fc295a7
SHA2561dc65e54f923f4acab95d63afe1a3a0b78f3f3dd69f1677fd47dd8992b470cfb
SHA5128c0cf47a0ecbe4a12997f5189bf2aa2c297082a2eae57337eb8c1bca79c9f991a80b9c0b93946e35523fca9a6d3fd059ab2039272c21136b423aa2db26bf5a3d
-
Filesize
8KB
MD51aa6594f88adaeec90e3bd29fb2adcd1
SHA130fc217571150bbe2d20e426241c3409df83adbe
SHA25621c97055a1ce111741f567df3a222931cf18956946acb0ff5d14152dcdadab08
SHA5123d6b826fb201dcacee5e2f630211452075423b66bcc2803484d24be96acb53e96a88a6e80a771499792827f99cbebde4554753e4b7690dc2729534fe6c14d63c
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
512B
MD5675b05ec4e76075c3aec4e78f8839cb4
SHA11eb91161b68151cf5b9327d94a376b2fa286ee63
SHA25621eeefe57c47ff75d379cf478564879f8eb6f6e270ff12d4928e94d7132d47e7
SHA5126b63c9cea35a7e316099409cf778642e45a651f279f832d992530251a8a515b5476fe6b04c0e0faa6f907424c2c6b92436cf50c323291e311c1c11b96a3e6b2a
-
Filesize
8KB
MD58c31b0e102307389878031221b4ebb58
SHA118d2498c6caa16841b45b1ebd28f4b995287677e
SHA256f3230dde4d3611de387624fce4c66eee9ea812dc7e7cab4420464a08fe05898a
SHA512ab1947eee7f7fc08f20fb49ef47ed03e6fdf4f9782fd317ddf13376ed8554e20e3ec3fa75c01bf00f68705b51d8ecfae9a07c50bfb2d534d21065411c8e63cf4
-
Filesize
8KB
MD56a9f67e65101a651337dcec28ed4437b
SHA1f6e5ac6517c5e3660bdb5ead97d67a624dafd1b4
SHA2566112930d838e9a38810e3db3dac4413d0781efa98292322aa0312eb72d5b0432
SHA5127021ed889e4809b8177cee4acd9c3e62e5d44a665e3d81a223e538bee70f7c873ae15d7d50da9e5c91fb1794209e3b31bc90778574a7258ee9028dbc235b4a36
-
Filesize
28KB
MD515c2dfdb6576cf0764a4b22e75bb0f2c
SHA1fb4430db1a061398bdf91ee38c1c17ccefa403ab
SHA256a3b1b4cd747334042b2b4b00a86f1f08e7a44ce590318da7218ad8734cc12c5e
SHA5120c33be6ad3694c94fe1c4910671990b70c0cf1a072425d0d587e815dba839a255affa08584afd0ef78df2c0722dee068a425c91dbad0577e2a9c6695837dcfaf
-
Filesize
512B
MD556066d1121b9de292fa1f9d02e732e41
SHA11f61508336f6889cf46e27aafe04d79e1f9420f8
SHA256e757856ef6d6e55c60b82f6d53293e78b660785f958a4cb671bdf949bf4a77fd
SHA512a54a1c4d4e599b3305efeb5347732f7a7378b79f6587b19abbb8c5970dcc50a62aa10d4479b0c64fdb962e018114fcd014087e81a4a2df15f1ed59012c2db723
-
Filesize
8KB
MD53075ab6c69268f034ed0f06401fcf609
SHA16286ab55fe92e6cf9ee28ffd2b0793f40a297fdc
SHA256865eca01d05987a8e9f9e9d1ebefb7c3ae239e6ed2f4f77c006ebea2d5d884e8
SHA512eedd5854a21f3644e71425d275f744f881689d2d40b1663a450d1bcd8ad29263ff512df94a5931edc03df3b340345aaee6e46ac406a085ce3dae035fe29f3360
-
Filesize
4KB
MD5baef11dddf6985f1d3818ef512dfa673
SHA1515fdf63f296fcd41be1343fe6375e913f2dc4d1
SHA256b9b6cec494a1c0160d75293f12218b33f95128f9b6281211b07a77cd97bcad52
SHA512a2ef739b178b4cf4b629cefc953a15a151c44f84c6b00478e38ca178e338cab14a89f35507e25eeab9cd96421929d9900799c2c75eabf1a9cb05b3fcbd0162b0
-
Filesize
8KB
MD54a8dbe5b7a989bf70492a19b254aa9b8
SHA152dc7fe057f876fa5ae4ac7670627f59049bbeed
SHA256d3df736fa4b5fb382160b5f4246f40f2f2b4766707127a73c5106e2ae699cbd4
SHA512b0e3787e65287f39bffc5063773098e7b5ccca64eb1faee7d9254858a0cb4b8c93874d793f4f71cd5feb631422f6bab0108d2acf5f902455951c5d75903de28b
-
Filesize
8KB
MD5f112139beb078694106f83d9471d300a
SHA137877c3176746864d83ea26e3be09007574b9346
SHA256383383b0a329c560e7d6ec26c1ac4b369e2fc746ac6815cc6c760b92f824d9d7
SHA512f8a15d5f3ecfeb72649b11dedacdc8668bd511b22979f314d709331d370873260dd6c6fb6f3f86b8d58d96034b53fc4c33c2aa6278b4813e05a6765000a4780b
-
Filesize
12KB
MD55ab6e79d88bb27bc0cba770cc523cba8
SHA1c341b4c785eddacd632e3cc6ffdf47f1f17d9b82
SHA25662687b8ef2589927bd3ef097f59e7544d4b51081b69b54056eb0e584b5275374
SHA512e6be5654bdd8499485e2d6102001f2041e3b05cf329024c4d40571ff53c63943778cf19a3190ac35101e78e920b6bcdb1e382fefb26d831d95feb543d0b5bd0c
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD530ec87f044fc1e5344a89f2f7f73e4fe
SHA1eb8b12a77d6b8b1fa7e48115827dd1c61820ca46
SHA256e90119bf9d7ce013379c7afa34c0793daa93874e2e362ab7d1bffe9db564fb9b
SHA512fb72059c68a8b02d4de6978848d1bc89d9e447966760cee12d80f14325e8b7be4c17bc680845e73b0111ffc18da75ba533f0a7157a7b09da094870cf35c017be
-
Filesize
16KB
MD511c87928383e61b0a55e799a0da28cfb
SHA144cd080e216f5392e7818fef872b0b313865ab5f
SHA256073195c0937f24423b8ee76974d99e87e177943c1e2a4412f9a32a2b8c6fff62
SHA512ac6488ef3e10ed1f9dfecdfe2e159c4237b3f5d87e338247d52ed508f4287b3e145925a70e7f37194dd83147be19b344a8579e9965e8e27e5904949ff7c81aed
-
Filesize
16KB
MD5285846bfa16d6958a9c7ce6edb458d71
SHA1e54f1d1b9bf679dff1597c17bf8a661c86963e7c
SHA256e8447d1a35c3032ce9dc5980c0f89d4a8ff8887496da52a8b992dad62bf5b497
SHA512d98865c6e86aba3a27ca7a48d160e69e487e513ee6e9f3b1f2b7dcd5da80e18a6344ba2d2bcb325eee71dcba770afb67a3b9aafe4f56ef6499a8d81eac3465d5
-
Filesize
16KB
MD524a1cb016c8f7aa47c3c52f55ae15a78
SHA111a37e85b352cb03390405ad7c3bef1270d1b1bb
SHA256c55fbdeb1361d8865f16362e081124eb589a45ed24630bb79c638c339cd0e8ab
SHA512678dab32d57d0fa02b0f2611374aff0a8096b58b023dae702f69ba6e6a14c0f4431d694928baddc4091a6cce47d6336cccefcd383207cfd317d3cdca47dd2d1e
-
Filesize
16KB
MD5c6de019a93b8a298c139021e0283ba5a
SHA150dc2c6c159ffd1142b0227eb079e94e90964692
SHA256bffd2c611a545c2a706cfde42b9a0ec3e42a0d439b29dde7b97f04585eeec3d0
SHA51214001d11deb208c3c9a2a2261fcc6890df0979a120fa7fd71983e03f04d763efaeb4cccc517f58e4640393e1a01f93955f9436a5b78eb05812cd81dc67c13b1e
-
Filesize
512B
MD59f2a04035752bff2b59ca3528782aa35
SHA1bbbae73b5b2bfd4c859d3254754e8766672805fe
SHA25616ea8442f252b594802947736ab30735681cfc7664cef8cc1b6c52bf02841af8
SHA512be99751c4eebdd34e08b92363d87ccd3036c2f14eb114d43e4f93b3b0979daa3892bdf5962389055e0b024b7ea8e7666d6716b04350a966b6fcbb775121d2edf
-
Filesize
8KB
MD54eb998105bea63fe0060cda18addf51b
SHA13135b66f548fc79e1cfe20e1a9470eaa6aaef05d
SHA256fc06daab6190c674428858bb56037102d021496856506c97fce9501ec223f069
SHA512bf6b461ffa55c358bd35d20a38d4434a9a1ba8a0a519ca489790163c7849599bc10167c87919f1123b85ddc9c5e030d1d00651f8a1d8f1af268776f0ab1323b1
-
Filesize
4KB
MD5a14179bb3a0908aa8a9a3a741d2d7139
SHA1ec6214412bbf6bd0c3d64c06e9e3862389141655
SHA256d95ac9bcde4d37c617e9adeb2227c9ca9fb3d54a04f8eeae25c1ccdb7fb49adc
SHA512fe8589a98b760cbc365ab670740cc6d2ca1635cf0bcf942ac3de345443d299d061f288d4f9d2dfaa54ac796052d9377c6fcbc795002097b9027fdbd9ec0a85a3
-
Filesize
8KB
MD5bfa220de867559d7a65f87f0f8415a0c
SHA113655d693bb6f3d754caddfcf7e1ba22121d6ab9
SHA2563726ae43622a7db1f5d45e207387edb54fef313c855dbf14180403bfa250930e
SHA512d2e56ce57f9a402ae7f9a4217b1bb4c32f7d32ebc0427b7d75a30ff6d5d8a4e0c3d41774805d2a1bbf88e3b2d4498656270ff67bd11ee839364b0759d7ee0b2c
-
Filesize
8KB
MD5c317a906925a3fec5f2b7f830d5bf7d7
SHA1116a384578c39ad1c65399bfa954604356493b05
SHA256f8981eb2c495338fd13893a4e21b1400995043cfbcd8422430da5ef84f2458d8
SHA5127d4d65e22efd7b1caba4ac5215b100a0c790d40d9a193abb9739e76b091f7c4f754b25fde8f2581c1c11bac332653e5b8545bd0ac293135d74e5fd6db0d74d48
-
Filesize
8KB
MD56c72b21de401b5da498186ad0f8e5515
SHA1ed14f433485477c881da08e7b6d60ebe48129c5f
SHA256cfe868ed9026c041f966dd21473b0d50b88f21900a5725d9828d32979cf5947b
SHA51233ef263d5839260c9b11f0e66e5476081e67d6312e35ca7c5fcdd0553ea966bec32478b5fbc67b2e644dc12a78a4a5280ea754983d3efa01a751d65683b1aba7
-
Filesize
710B
MD50dc606bbac85354556aaf4b3a4516f44
SHA1bd81e1c7a28447d1810a00e43d4bdccd08d2c2c4
SHA256a807a35b41b3fa2ae4645d3ea98d657e673bec2ed66e3590b9f7bd4c7cb113da
SHA51257ae3aea19f15f4bb7a46b465d5b24d3add3796f2fe308a210ea85bd52400e7f4b5b525f1f532a5831a082de9addeb3193bfc410ece4885841981aa551ab7104
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-661B461E030000011125FC7B5CB5A0B2.temp
Filesize440B
MD545991f3409769df8416b58c19b39cc34
SHA12af172a06ad85e9d8db46ff2099f8c432e151d8c
SHA25612d36487533032a37eea1a8ba28055909ac9fff17b1889ad2c2cad494a78c27b
SHA512a189d1be157e3a6b1b9b73ad0186f2e1d1a327c8cf087e16a952ddd8a8898ebf1f31e3be2edf271703c689b843b8fc115160340c98aabea89abedda97a749667
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-661B461E030000011125FC7B5CB5A0B2.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/661B461E030000011125FC7B5CB5A0B2/report
Filesize733B
MD5c2480f815a49cba38cd2991e93a3ae95
SHA139dfc12a3f2eae05d66ba354021331556dd22b37
SHA2560835265dd082bc30973ed54836ff6395634976e2fbbe3d808c63abefcc31a052
SHA512dc97a0a4a2fdf844fca6b6d9ee2f3ffe3bf0b71e3e641e48eb526acb0b23db3d7d105fdde765d2b5b2351aee816ff8220784e32fee5f03d5d8b73dbd82a4f680
-
Filesize
90B
MD542ed54cba9a451fb82716f1096890a12
SHA157ca88225a9cb61c424b297d173c9e9071c65ceb
SHA2569f0a82ce2b1fbd1a5116ecb6b91eed437571ac9f49f20d0eedc39b8cfcdedf8e
SHA51281621272d11f1b1370cd44dfa4c14d333e5888c51931df28c7b2340dcc07a0d79acbd0f12102656272a401d3aabdc460f11b84aa5db0653622ac3fd082c0a489
-
Filesize
563B
MD5dcf0cfc8f334ace8ad1a7f56791985be
SHA196598a173d0f479147246dbb8054990f553f6014
SHA256a16002068a14aabb4eff1103a7b8386d97e8a32aebb827b1e05b14f2bb7f1f4c
SHA512749531d0dca5723999ca71001184591b030f9d9ec30a7a46388819ae21bbb8bbf8a3aa406c5da83e3def9715683aef7d6bf1f08eabd2e31201d7965ce40b04cc
-
Filesize
36B
MD58c0cbd96144f6e575b858f56a416bf34
SHA19ad0938e8db1c5d4edfa9c766924b903391f8b13
SHA256eb13f307ced9b4f5aa2a8a1fe1b7e4fbffa16e3efa0ccfc51d38d791e8fef4b6
SHA512b6fcd44e991de7f9c3aa8fa045f6d723191c7ffe922e993eef879e39decda366de0d030a598d10d91bd4050ac483726460f1ab0ef63c66278603be9f0226e664
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD529dd6f3f8476e894ff1eb75f0eccaa90
SHA19adaa801686821ae0b7e1b7838f26b21c5967397
SHA256e5b46524e7ce4f5974c0bda52882c209e22c2f0ba3ce1f7c53e9ff2b06cdfea6
SHA512571598970d0ed2997b5a92a69190981f65a579422150c7b2e14f6111d6e001a138966efb4553a5d30ad23d73242a247236f1debbcf675bb8132f4b4419fa54e4
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD59d620eccf2184e73ad161c645d24f812
SHA165589344f455f1588a2be17d611c5d2b9d42091c
SHA256bd9fb36db7abba1dcfdcec2de83efd29c35101096142b513282afe1646fc540d
SHA5129760c537edbe90f467a6c56a726b1aac9daf47a7a30702967d8ca2b4e7d4c14ef27062787f87356dcb04ee816fc8b88e9a34a92b4fcd98358bd9ab595b2d1fe3
-
Filesize
108KB
MD55f65406d3606d7df77b7cf110205bf87
SHA12b92cd33e536824e1210c7267eedc765837161bf
SHA256e4f9628d89bac4ab920accbe3de749b9b1b0ebfc33cbe7861ba9204c71068973
SHA512a7c01eb82e818aaf2e05c782b32c94de4247443894850721ab2dc3fc7a888bf8218190e35302dbab5b9be0c325985cbc7494edb526fd6f9891a9a2f80dd78800