Analysis
-
max time kernel
47s -
max time network
163s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
15-04-2024 04:06
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks the presence of a debugger
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD58f750cb3d32fc9007ca934a295357434
SHA1db6927a2c49e4ba2f9550a6a0231b9a477a8f1d0
SHA256589a9c6ead2dec2a1849f3b1a22c4324d3b4252b79d369a654b66f2a96b381f9
SHA512bb532c5305760183b44dbe07537d8e1365d3a0e74bcd7d5d32630fb7709a13973b95c6224d7fb82907cf16c0d882ac95abda4d8bc241b1711c2b038606a36202
-
Filesize
1KB
MD512d71c50c8f4d574ad9f4bcf2a3e56d6
SHA10b8469c7d520318e5034319caf4bd6c4355a306b
SHA256edbaad8943128fd223f4f2d1091bd7eb36d508fa929d72a3c333aabc9893d927
SHA51216f126ba96d423d1d9cc214014142b6968889ce6979d4c6c9ab68c0b62fabf487778438d563343a6c9d3049c7bfcda5294da08f90efd997161f29a93fe24ec9e
-
Filesize
76KB
MD5244592a5662464f9e6e8aa5d52402428
SHA1885e44dd3ccf643475ddb16d7d2eec0c809fd1d5
SHA25654b29062aac9ef91d03294047b7780498a2cdf0ddd75028dcebd9b6b7a88214c
SHA512ce35edd0ec05450bb08d6b47583393eea034333b99e13ad2bb6848724f09ed71334a858e5cd5ccb6909d516ae70545c3e7c98ff15673005e25c9ad60b2a11b17
-
Filesize
512B
MD55495e365c4feea42c4dbc66404e1324c
SHA189e80b71d99c0cce391b4ef9c7984bfbc226c05f
SHA256d20f3cf494d02c59c96444f29ec5a4c5c3c7eab2ac58f828d57e077bd01ad499
SHA512ae0ecec2f52cf08c6089fe92085f0a848d93d9dcefc29669b52c2fa8e470fcc93b3ee7c8f0f0afa36a7afa462ce69b89048f8bb285fd4b504ed7a7e04bef3a19
-
Filesize
8KB
MD5e2d024531ef054f9f82c8154b6e48246
SHA1b24b3cda17f08ca3f4f1ae4ae38f250a56bbb1a8
SHA256494acbb5ec3c2b97bd1e06b6c01dd4438ef87aa405104df966dbfa2754813155
SHA5120e0087495ba98ea4960253ef36dd79438d0ad41cbc08151e8f352c8b3372af507317f11d8ccfd0e126c425ed5921aa44b5c15038e45aadb69abb024dc1f8fad4
-
Filesize
8KB
MD560e45734601553b566639e0539ea2e0c
SHA149a2a4a5abd0397643461d39af7a308a21952917
SHA256df8f9f9ad2d3bd13a594a37fea646f49774b891fbcab736f0a78c1ab5eac0fa8
SHA512b786d81f26108dddd69c7e9c29ac25873c7299acd00c874f593ad2e6be718be25bccca83d5190ac8af19a4ac7a2a656a609d7dd9d12e6a933e4c32ee37128164
-
Filesize
8KB
MD5822913e50c92238ff538ad88fe383471
SHA128bcffec9c17b64cc5c1e0f87c6ba0c7ceca192d
SHA25624c3a6c6c8f4a74cb78fc492a46c64390b1d6d9fbe807b6b5aa5f2e1991377ce
SHA5125a044e6c59db5fad4d82a7ecc0ff1d3dbd2b6c9c5b864b079fa6b59a875a7ea6eb6d6224da4058a829ec3f527ef79f4b4346f427ce97055dcd566788ee84f535
-
Filesize
8KB
MD5dc01eb1b142177d6965a10b0e8c21e96
SHA15aab105db0354166b526a970129db98b54c93169
SHA25608b6821aacbc3356246744a2ca236911833fe2bdae603b561a170fbba74442c4
SHA5122ae9a82b1b8f739d012d7a782783915c1919b2c9d90b1cb60d429bb141895a8f64274cc0f2390a34b7b7c97d31ee607737cdb2c502ae0d221db29e1ac28deabb
-
Filesize
8KB
MD5d24db6f45ca6eec058e903a08362e940
SHA189850b8994e0b06a84972cc1e8025c3058b274f9
SHA25655c15d770171a7dad4f328f7ae43c70ec6d1d43360e55e1d3a69eac3cfb8a3c8
SHA512a38a2b645a27fbc52b6e150f3d1ceefe8ec07ebced046b448387238ce9802c0051d1bdab65abd2e8f2a98b66e0e45c1859e3e48d86cf4e9f02505a7fd62418ce
-
Filesize
40KB
MD515d5b92dcbda7ef7f9ca327a903e46e4
SHA1ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA256e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
SHA5122352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
-
Filesize
512B
MD55511a7d2e484fa9beb5257a75cc7b50c
SHA1d288b2e667015e806c84baadcc62f75cd517d11c
SHA2564934014d28307912aa0b14cbe1a9807b545786ff5b6897a008241ac2cdde05d5
SHA5126bcd91ee3c78e96e247e2be4194538d7e10f8cf5c82137fc087e9d6e4b477f00625d270bbf26c9e9f8a39dd2737579270072978a1333ef9e3600e116b9821782
-
Filesize
8KB
MD5680669ea3543919d71598911eed8882d
SHA10b0b7f61b2b28a32f261c94483bf3c3c217b62ea
SHA25617ba93714ce0fae8057df029b6f215d54e93e6e8644c8e7e6d9019cd13ce3682
SHA512b566efafcdfb147062c85402e75e9fa3ebf49b32b38be89d482f31387ef255559ec7fb0a7e7b09433f6768e50f5d82fe840a629cb73c2b163c3f6c8dca25d080
-
Filesize
8KB
MD5029b63ad1dfa5e7232cbe629c318c6f6
SHA1c824b63c54c3ea3222d847061caa9e8111497982
SHA2560c3f46028bfe77b6e62fd641cd58a27f6541ca05b1fd421fbf836829e8146b8e
SHA512807596370b545a7bdc549c59ab81f3355d70a3992e1cc6d45944658a97f1259ae3d56e6ab0d913bf832a5fdeefe2c1b10d21b727144c1489328fa12a07be2f2d
-
Filesize
28KB
MD57b5eeedccb46d2994755249a81808c48
SHA1bbf4c4ded1fa907590d652f33d23e718abe0da42
SHA2565c76838520fb53cc5698c01000d21ffd6e9fbb0973c60d78b3f2432746874394
SHA5122bc3ff4fbab0ccf1951446630f28b97886021f000d36505e272f51682e0920ecae3fab717fffe818819d8453040a71e177c9e92b70e261770edf7d32eeee1086
-
Filesize
512B
MD516bafdbe70fae6e31129830109b716d1
SHA123f83aed64366027b49f565ad7bc537bac3292b0
SHA256918a8c44a38379a308baf2b30c1409e51bc063d21623261cb613aa5e6981060a
SHA512230e2f3e520df955bda7dfe7f5d91526bc5ff4b1acdaa76b4599e6bd52c9b275a4872dd5d1255f7b7b70e671c63524cda3e43633725f84d5ef973ff6bec0fe3e
-
Filesize
8KB
MD591eec692b2bc843b81f6c1aa517062ff
SHA112980b25637d1b41cb53260aa7a850c9de89b523
SHA25686b597caf659cb6cf918b1d0abb9d0562f8ffb28ec3873cea962e69f06330256
SHA5120688c1b105ddd0907850142b1a2be5b51e6194d799570f72325638ae60f672a2bc5f0d910be8fee46fd3f18539dff98a384310beb0f050efe8ec05fafae5fe7c
-
Filesize
4KB
MD5067323254ff95358e7a5d7aaac7eab33
SHA1023a477d0507cd4a27b8390d18156eae4501136f
SHA2569ac718deac39e6382fe1f902da4fd0dea53453cf99e6b5b77c4bf556d6d35d0f
SHA512e8834f5658356e7b400face2d54d711149f47b07d221ea1376fca79db23aa4d3f8c3956bbdcf75d9925eeae542159e6d119a7ff1c032561d857b93896da05b5c
-
Filesize
8KB
MD5ec5f991362fb60d9c15e455e3f8d666e
SHA1494a4d03f8a1d86fed77dc3ec72087f59ca0f2a2
SHA256740c002e1a5badae9a38c63f1f023b80eed4667cdccf81ceee6fdf99d56302a7
SHA512cf53c36f64fbc2d789c4d3582e8580768f007cfe765f3a9d1f7089ec0a8e7be259a490a4aaacf2b93715b9a0e786ff8dad1c2612692dc797e6ed7874c43dff31
-
Filesize
8KB
MD5ef57c73512a56a5026df3674d4310d7e
SHA174857e050fe175829ea30e056d88eb280bb988be
SHA2562ce6a4a710506ab6dc32bdfddaa14b92ab5d5cdad052ae3f3aef5e6e73fb892f
SHA512cb25e2460a1568cace04e1ec30fb5729f94c4ed7a9df128e27b7f0b752f0fa2518c2d56634ef92b5f0623eebb37ecae81b25831bfde755eab51c4d14821d6590
-
Filesize
12KB
MD53e50777a7f76f086899552128266a104
SHA1ec2e2a1163f3d9a2a485f9c574f232884e8e799c
SHA256d46fa9927c161d36021da7b1af30d8f3770605439cbd8f40036fb2a02ac1030b
SHA51222835c253e78cb0a182e5bd8b4ec78dbb29e8c29cb3f5e52f7ea35c8e621891d7126f392f248da3ea0560ecdb830b6b97398ebc1e52d0bf63777472fbc6f01e5
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD56669c519957f0c7b3d0a6ab3325db2cf
SHA179cc4999ac19969d1a1a1927f758b417752b91a5
SHA256b0980544be797e8fd57d436c4786ae3af42e5b248730a3d43901a51c638b93f7
SHA51294e8c10f7383c44ba500251ffdef63c8a296fef8e2d98b6777ab557083bdcaf4aab8092f751d9e894174a15bd747c83befec782a9e9a401c1ae92319144d0fab
-
Filesize
16KB
MD55ac4ed3536eb716784cab88e9eb9475d
SHA1fdcffe8c9d1f84928dbc433dc8bc21eb2d79aaaf
SHA2567a84b2f8cb18c6aebd6325d7b9b49d0b3aaf502f26145d7f9c8676c842da32b5
SHA5128e54361de071b2df4c2497729ac01b507ce92212a2987ca686e311cbe2fd555f59c53b6c84df47b6803b4a48a344c3ce3c5800b9097ff39e171ea7d06dbaa540
-
Filesize
16KB
MD58eeaf04d646b77fec08a4bd34acd985e
SHA19949a7eebbfd92252ac86949cc72bedd97ed8020
SHA2568ce7b7dc188830b918d7209ae9af0500803333017efd9452234ab6d842d9bf86
SHA5128e32aa4207c5fc68ce4f0d2905df3d361cdea84573fbbb35ccf2ac7e706f67ed7fad4eecdcf5bb430d24beff919fb5f09b1aac4b477f5f5f5d1dd159dbadc17a
-
Filesize
16KB
MD5bc645a285623848acdaa084e44da6310
SHA1731d574465d35ab8fee77568db39837fe6108340
SHA25690879430c6582cbf3f6e6d8ace625c0032ba047a128f12d87e26d27a8629fbb5
SHA512b75ba70244ace3b387c4305a971903f96a5cd382777991cb0704cc0f03310c73329f1d0895e505400c61a4c935c907e19204917d4a086a637d2ce2fa7c3191c4
-
Filesize
16KB
MD598d6fb5c9dbab43df06e4e44cb31d425
SHA110b98fb436c1fae52c7d17de7f1308a59622adb8
SHA256eab409f55e9e3b8c72d607619afc31b8069199c890d0971c4905adaa199f3802
SHA5121d8be44f20a1b618d1e85bded1e2c194bb2b42002f96e85157ed27d8b0d7e0c5adbd774ac0281ed11bdffbcd251a8cc606fab9ed97dfe0b8c60e25b06233c5cc
-
Filesize
512B
MD5152e56c7d9b55ddf21b4c87624c74381
SHA1a1877611101d3df771e7cc001ba410306148aabc
SHA2562016a47cfc72b68b6171c6957472fac8439dc8bf27b5d1614d4ff24d44a3d434
SHA5126d965770679bbed92a05e7025febe6b606c95cc4e9a025e7f067c008e2ec88f5fa2c27fbe7af0a3237dc24f68704a791dde1a5f258a57d71436b6b1b75c41ea0
-
Filesize
8KB
MD503ea412259ddb06c386f2c4a1bdba4f0
SHA174cb14cdf29b8428a8f7f1bc5d39d7935867f0c9
SHA256e50509bcf5cdaef62c3ae055cf283768323439cc5a12d2bd67e50ce918187d06
SHA5128c3a0f57b22e7d08f57be34b6e7f982fad9ddc74207058075a10ae596a1dee173aa5c87d100906dd70c0d4d4177f4032e187c1a15d3df8e515d958c823f387df
-
Filesize
4KB
MD5fe1b44b7284db62a960a8baa70393b28
SHA1e118b3d30fef56ec6a33fe0dda3edc09e9e05390
SHA2566c586bb046d7cb1370227c1bb775fe3c8f3d9e7c88a4114d04ef4c5da9e099b4
SHA512547a3258865ec9c6e0ab410970395c5d858e23bb10a23e5c32557d95cdaca0f7f002608ed15eae5ed134f38b6c8e4901a05703e1df851c5e05d1585d0623ba29
-
Filesize
8KB
MD5bbaa68b0e081459d54f025a8a5cf4668
SHA10bda4c641d96efb3ff52da71c34b5b4a7c70c6ab
SHA256983273e28956a47157e63a2a3c96f2df894fe3e856a5dcab8103cd5449679c5a
SHA5123201e6c70cccebcdf14739b3d88c9a03809d3b134859c080a5af7c2a6ad55a8c6eb498d020e3581c2e561ba3c97ce65a8e6f41d8d4a9e093b96226a1d1d74cce
-
Filesize
8KB
MD5244d74404fe2b353f7516a42d754433d
SHA11f2de6a1b1b9ef3708900512d0b1a0cc661a9b72
SHA2562901a3ad34e7c3b963626631caf706906cb7305a01c25b8b7867ebcf1fe82ad8
SHA512f73ff01aa1fe9d1c6baa03e2f8e16d86cc6bde647cd33ae42e8b32590beb57433442c85ec1633c5e585eeba346d00df145cabed8476137c209c65a2d6d6fc088
-
Filesize
8KB
MD5c7d5dd02ad2f8d7b5e347072df270393
SHA16b073530d547fef0d0ef4970440c90c406a41a40
SHA256f3f529639ff1cd9f97050b97afdadef53fe737b1d446f4c9792bb3c0cf531632
SHA512c8f94cfb0e28020620d5b3d37c9353db5342b05c885ae7bdda50c3ae1620a7d7524220a018f07df2703ace08df45ca6d3c1d634dec03e3d93eaeca006f2f1506
-
Filesize
710B
MD57a71a6af8b813928851e5a9a2cfbd272
SHA1f0fb1338de3983335498cee1f6993ef824b42d20
SHA256ce6aeab15a29cf232ba389ad6d5b4c7f200003b6bee5cef316c3dc797c70cca7
SHA5129fd49183eceb30061032905425b9d6e36aa87bd4b01af448f4a4034490e384f6c4c807d959aac9be84684f6102ff44fb7301ad57929962f1e6386288f36c2426
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-661CA7C002D4000113B371796F206C04.temp
Filesize436B
MD5bbbf463153b8dd07629c404fb6ee9460
SHA197c9388b1f3033ede9204aae015d65082cdab6df
SHA25612142caeab888a074d2a37c1659891f1ffcbfafc29ba132326a392ba6328ebc5
SHA5129b68f1fa124013276f39e04a05e784025936d052f9ec60f9661cbbacbe631ccfe6f1b1be8f1ce695aa3e1185ad6f308993530dd3e7062a4d65ecda884f5d46b1
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-661CA7C002D4000113B371796F206C04.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/661CA7C002D4000113B371796F206C04/report
Filesize733B
MD52244aa9b9a2e54164394b1476bf3b79d
SHA1b8d10715a6c5c17015af5a9c2eba0c912416c5d2
SHA25638e2e87badb386cf4cb19c9a43a83e836cf31fc1cd5fc757f44daac94de51c7c
SHA51268ecb7fa974809e3013e7098f101cc0048563364358d649182225828a45cce18ad5f713639ddcd592ede6b96772dc28ddf38573d9aaa3d8353f0e5289084625e
-
Filesize
90B
MD51dfc0e8f5e0c817c0b555cee953faddd
SHA1feb5bbb9a24f8c153963e37dce7987ba520e1959
SHA25623ce53c45519c9f00a02bdf4223a7620d16b44f10680976854202ab3ec3df65d
SHA5121564a110c0f634d6ab83704f812e86ac93d4dcf05d1785e0303f38dc9c757e6b6c13859a0b1bd5a89c2e185881c9f37df86301e7d8a80f0bbb38a0f3e104e132
-
Filesize
564B
MD5de8e84adf535c0f17cbe6ab6b8915ef2
SHA11055af79093427f3ecf49e40fa4647e6f6dc43f3
SHA2568f3baa653e0f31e0ab146078d162c34a1ad3dd215a9173b06f9602dc8ca74a84
SHA512233ff227a0d9caed5f66ee11c2bfb80129b313badd1c2b473aafed0fb23483e668b2cda2c4b13af1b7755f7c784edb3f280244201daba2417525cc6283155da3
-
Filesize
36B
MD545b31b47d6474c6da97638e05650c5d1
SHA199227c805013c2b5ef05769215e9c66bb80795f3
SHA2564e637002feba1ce0f4d8bf8d783c76b9b0cf585cd7010352666a6a12958920cf
SHA512a4515e283a4bfe721e9b3f078c7a9c5052e8fecc6f3219294ad612fa57d6c4e383e7c0dcd92f918f937418c1fb2e8cef9e9557ac3126d395b9c0c13828e9f8ba
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD534c32d6f629b6d38f8ee49e02d29c7d7
SHA16a020d87b23dad1472b6dfe80caf0f7d059eb9d3
SHA2562c8bfc5a901d77a2e27802ece140528e5b765340c652c8778b63aeb9216ca446
SHA512bb8d4ec29fd56ab5db616de9a557425a05f765e5beecd198a4759d032ffb94570643b1ab45912d235ea4dbbc3321a0b6f49b91a5ac6eea1d8ff3856d96dd6ec5
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5af9f8c19ab57913d42e7d8ba171a8bd1
SHA12875143c1c5241d649d263e75ca8d056418b016b
SHA25618b6a812c47489ccd6e7d781e6ea48df64d2a7042f02861254945c08dd44f90e
SHA512c75e2b684ac52c2a7c49f7008a3cb5d5282fc6a87c85aa1ca64d2ca2f25eda931027810062e106cffb8ec19c41a7f323e7957129a2d6b7f40d550378072e0764
-
Filesize
108KB
MD56d5fcb870657a03531ba3e099df76c72
SHA1d10cf43a5d301a239b83a1f54e039d8c283b6265
SHA256ddac59df14ccde25780f071f2a2f09bd701c2802a0bad56e4d5939ed18ddd065
SHA512d5acfdafcdd605ca9a09679f9f9ff16012f0963d0e1a4feb19976c3ea0c7e688a8f29c1f1737ad803d92eee30b3fc3e78d7b841239be6c9df1f25d234e9fd7db