Analysis
-
max time kernel
47s -
max time network
132s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
16-04-2024 02:07
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks the presence of a debugger
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD580b660dcc317461dbb33904b45709a2c
SHA1552f62cb2cab0d970415a4f47436af71d61ae2a3
SHA256a92738a5db2630619e7ac89f2c6ec064043ffe452794925905809484ca43a557
SHA5121a59d606ab5734d3bb4d31fa88ae7255cacdca9b19ea1d201c082b369c7f884a6f6883b43282b99270b7c4bb4c62d1e852867e25aa81c9620de6f1326754f003
-
Filesize
1KB
MD5d1c44f8b8950cc359d1398622ad4f6ca
SHA111db12576f5208e51ef0b5518d68a886f4d7481f
SHA2560a41598e1b00da0f41e4fae40e39b816847cd73f8d0c7638c7cc3799411b1d0a
SHA512f927d952257ec209d56535c1c8e27a6a41f1278c9406445cc23fdc608010e71f59c3228124d7cf3498e70449d16dc04e70c6c71641ded90ba02c9321504fcf46
-
Filesize
76KB
MD5244592a5662464f9e6e8aa5d52402428
SHA1885e44dd3ccf643475ddb16d7d2eec0c809fd1d5
SHA25654b29062aac9ef91d03294047b7780498a2cdf0ddd75028dcebd9b6b7a88214c
SHA512ce35edd0ec05450bb08d6b47583393eea034333b99e13ad2bb6848724f09ed71334a858e5cd5ccb6909d516ae70545c3e7c98ff15673005e25c9ad60b2a11b17
-
Filesize
512B
MD5f0fb68b4a751335ac97d321cd66e0fbb
SHA192f4faa0718a1234dcc18fa0073b70691685220a
SHA256bc8c4aa46b58997f2db418968d75811719c975895caff65bdf4dcc6da3cf7c5d
SHA5125171b797dadcd4b55c02293d4ff8d53689e98971754c1a9f01a2743d5958763292954f557fd23b2ac40b95da3a2086a0f660d64ee6b4e743711ae07350e53ef2
-
Filesize
8KB
MD5a1ecd16b96c16f6dc73939e45ce13155
SHA17843db6034dc9c2d06f08ffe888e8839b9850a7c
SHA256e94fb066e24325b50adddc25782c2f01383f88f0532986702a633efd922ca0b2
SHA5121f34db95d334e1a4da38f1bbb86bc211402ca3cc12456a9b8eb8fb10921f465e4d7efd18a792f0e12f6ebb0544e937af6f23cef8828cdff540c9f04e61e3db18
-
Filesize
8KB
MD59c39ae92008f7f832d7122ac6ed1465c
SHA13a43772e10bee6238009699a106ae7465c9b6dfd
SHA25606f37de4ed1797eeeaef3d4d35e958c2b824769fb1cd125911c71bf7f579d118
SHA5121e06167e2a86470d761316e27536f0556dbe5eab53cbcf0e45d54a436cd01158a17ba7995f3f5a56f021f05a47c210b7fc228146f90222517368d8f2a9484872
-
Filesize
8KB
MD5612b72b76c13a633d629f12158280db7
SHA1806c8f66d089097320cfa2cb6b6aa7544ef94452
SHA256288d17b7fcba2c1d5ef5a950477fa80ccf9d46d3ba0277435d09d409fd8f00df
SHA512585b94cc0ec4ea4ec2ed94c9edfd0c591ffe2c08289ddff9f723906b7e237671be5b0a21621dc4bb41ed5fd9160c499365a687af91e540f3c5bb9f6aea0ae2c1
-
Filesize
8KB
MD5486e8b38b58ed8a3e638a955f882162c
SHA19b0c5e5af507dce3ea49090a4926205f510ba258
SHA2560d85904c9ffba7e1688ac9b55bf30896707e9543a55370b41e598472089651b8
SHA5123d2ee37022a9eb85970721fa195cf696511d88c9b7af77402693f55c34d7314e6e013ed1876bd60797813e0ffa6d0b3078653c0b11a82ab6dd0570c07896cdbf
-
Filesize
8KB
MD52564e524a94c102741067e4f5bf9a9b3
SHA1e91a12fef0b1fa0fd39f26f71f60f9e0f252fdf6
SHA256057766600fc6954219dcff97642e2278846a0cc8413542804c77a021d4ee847e
SHA51204d9e4b45141b68f33cd1001093c13f018c23982cc4f48e40bbf7aaa99914b8e95def856c4bfe420725bd8ced3256c68749f56ca8122188e6bd7dc3019956935
-
Filesize
40KB
MD515d5b92dcbda7ef7f9ca327a903e46e4
SHA1ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA256e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
SHA5122352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
-
Filesize
512B
MD546552e43b5bacecc142c638069a4c559
SHA1f2d35f6e42beea42df74442420aa66d6fef36fcc
SHA256b9a0d8fb78b109cb6b2df5feb01dfab73b434db9fe6474fb6f8b38636151d240
SHA51234437f87964741cd3a81349680ea93b44e5b24fba92278555ea911f203b7272992a6d4a314b168c7a1616f9a1dc3bda22a7f6c3c4c5a69269e93b3c63f1fd7f2
-
Filesize
8KB
MD58318af8a00b2030c7b404d793967bcb3
SHA12c7d0ec2b1c57e883fd42a8cd252e16dc42ff2e0
SHA256df479856a3fc737036ed6112b96d0d2ecd6d372560e6803d60a85fb92312bd10
SHA512fb802b5e88e09aca8e1316db86771d8b8e9a402f3836c2591ee17d352d9b06f8967125e38492237aa968f0267b294a25bfff04c690c7eb4bd49ca1d4d7ef6516
-
Filesize
8KB
MD5a77a74461cde75cb6917ac05a3e1d0d0
SHA1ee2c97ab5aee55ce10a2ce986c148634edc5563f
SHA25649e58a0dc3461ede32a83f2f01ac7f213e80c6260005113ef34e42c2a5a361bb
SHA512a2c620fd6c70c9014e3582696b170f614219eae1c7414af77e4feee7e10a96fb419afac9d58816a0f08ca690256669257245bfe9e1506cefc315b7828dc6b08c
-
Filesize
28KB
MD50f7fc5798c32af0c1cb16c3c8a07824c
SHA1e2df36b4d1e95016bb37de02921dd231afe2f252
SHA256d850146384fffc49302ed7fb27cc261cb3bd2ae2f8ea4ef22cb1e3e2577b97cf
SHA512690ce6c22eee4a09b407c0aee54c41ca360af3f015633bdf7aaba8b2bb4120a7e22a0851229c162a6ba482db8dc88706ea17b53a7678e3f10c5d34272581f89b
-
Filesize
512B
MD54e671930bdcfd6f917df18e534e0ee56
SHA107f930809695861e01ca2dbd09aa4d892c39c8e2
SHA2563b9c59076869bf112c4dd1d59bbe1cff25e3c1d900b505f092854a55d7fcdcb5
SHA51229009aa206985241d96fd23192934035de8dca9e48949dadb1c752e312ec46779a280b7e64254fbe7a4f43fdf217b3e567b34a9ca0300c0e2d7267d7d01abc34
-
Filesize
8KB
MD5c2248b1ff0529f914aa303a18e675f4f
SHA1339bbf7d87c3858036c5d10c96fc7df0a4163a07
SHA256e77df035e2f1f4e85f4ea46e243523355ee7ce59e6a33859184c31fba77fa071
SHA51257523da201f431350653c9d84db36e97747325ca11229241ec471bd0eed723131e24fb79714d99e39c85b6addf4c1742cced072632da4a356db1d9afdbf343bc
-
Filesize
4KB
MD5bdeee66c4fb9c8fa78b800b6f863998b
SHA1c777b04743d3e836ab4abd26368deed021fd8243
SHA25675dee175aa216d8b7f9f3eac5d5fc298735109c813c36f345ec474d436f03238
SHA51226effe13be40e12ea89106c5b59561af367fe371816fe7026bcea38ad8ac942f0f9dc6933ebab5c3556b7fdcef7cd7ba33b5b9507df7e591d5f756a31b5aa2bf
-
Filesize
8KB
MD57028185fe2b6db575c2650adcf964806
SHA1aad0d33a741df48de9494a4399d10feb6471c7c4
SHA25655d6e894e4b741a359405cec3c433bfe43844ef6138ebcb9b88692eab20c6c91
SHA512cebe402415736f4f50e389000dcbe37d117e0997d159d57e8eaf086869e74686478e9f7b4f6b2371483de1e7ea9ae295e963916ef2353f458b8da75f2593904f
-
Filesize
8KB
MD506eced07a4c99bcbf9d2ac475056245d
SHA1441deec3aba83d120f2edf5eafbdae87f0257635
SHA2562d10a19206149c7ede262b8277868d47042f39e3464ad4cc53508a36e1597307
SHA5128b7b97aba4a379c2f1db1dcd6835f0fdeebb6c01cc7053b901e26f3687dbc5c5b6b90617c40ff9208115b87795dfe9d8daec951bebc02916552e1ec086900d5c
-
Filesize
12KB
MD58fdb2ae3ed4ded4ed33ee2058177329c
SHA1e4a3beb5fad851bf359477527c84ea6f55010d66
SHA25697395d6ee5622c108837c0821fdbd7799ce2af297f10c0a9b652ab738834d50d
SHA512821ec52c5b9f54ebf4a566dc0f1dea4364514f4fb9c3734b4fc7a8e9b5dcb09717881b1d5007b5e4d3e2bb6a0b157a5be88edbf165d285217e7fad4eb6dd845c
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD53d96473c7dcde8ca401fa260da07f573
SHA16526a810d45c4b52fa4d6fc7fb0a63a570e347ff
SHA25690e0f07c2aec1996f010df68bfe55e8b8bdf4a14a7aa3ca9ef15bc186f1406d7
SHA51249f0ef3e89489068462c5cb778b2e37dc39069f7ee1db89aed7e914b5b127d8770dc4b517c40ddc0b0cc69c4ff47b9406a1a726f539bfc97b6d666abdd18f745
-
Filesize
16KB
MD5e854e3be2433c7782f4c932c18994e7b
SHA1eb2ac1bcf9121dd3d86de2d4b34a1dbe7fcaf9db
SHA2561c6f5d788b0c9a2ccfcbf1f8d432a4d3681337d73e4f7471f903fcd92b008544
SHA512dc5d54142447b6b641282ac4e335bbd0a061a5f5660200a6a15d38c4d2157b3d776a7180b27ff0e153f61a7a6ba26b6f119b835012610fc43990e07cc08127e5
-
Filesize
16KB
MD53953071ee6852abf97cadd871159bea9
SHA16c3471d9e6f36141846eea657d73603a3f7a53ef
SHA2567eeeb3a06d4e73abd5de606558af670ce5a208fc01dd8a3663e9f4220bdff644
SHA51233dd19ed862370f2d01058db1cb0d1c37c37a4971f2b9516ca73974574f5c48d66527159403fb47f7fbb9325de2d075ef50927b359995bfc99f04f36d81b457e
-
Filesize
16KB
MD5ff26c59ec14039c2328664fa93c2d0b4
SHA1950352568370fbe7625b29f3b004c943f9d9a73e
SHA2567529efe7b7a911e38da65be2562ae534fe4de26207f5a2d3bc40e349ec5eb8dc
SHA512ef6b8d5d0348415f528d52b601ad9620186aa2a57ea40082a65718f68d2a3ebac898b05eea891de60a3a23e851cd3a8e67d14f211248aeda6d89b06591593cf1
-
Filesize
16KB
MD54f020ac6f68a0fec86e93e46dc4d754e
SHA19bd495e227b0f5f5bf5f7020cf8b28e016d44c57
SHA2560e15bbcfe36d388cd065c151592231130d40ce72b7c55a66fa15abd95a9f2d12
SHA512f4517dd8acab07578e2291b6752ff04c69e963d77441910492c904c1f95654e8528b6a84e5e268b30a7ab616d5d565d08f44a1fc547709c799815ad36f7e4611
-
Filesize
512B
MD529b873364608ac0edfd6e39ebd54feea
SHA198ed49ca16dfb0e9ea59abc9c34fe658ff4ccb32
SHA2565d380fea7b1206bfb25e826779a92de7d81745eed651647c4fc5255c382f10b4
SHA512460edcc091dcf4d3f9fba6e3e9606792eab5048c30282deff43e150fe2abf89e48141a8e96cc37c2067f2569646f1c38990aa56a1811d9e76402415a368012bb
-
Filesize
8KB
MD5bc083ffc62a041b003275390b27e1f59
SHA1e8ebcaebc52182c0dc799cb59099daa8b4e08a32
SHA256c9912e4a07bb327cd688b668a56747a16cdfe03756b8e2ffd91caa97a49ab25a
SHA5123e364a387423ac80a63b9de877c14030058800386887da62fe6aa2989c8ab04c4d813b95fdda5c92d03662a473c6288815ed2ebebb511b92e062fad492924771
-
Filesize
4KB
MD58dd15651b0abf07101d1fb2c1f925533
SHA113463cd8ff3f05984b1186a23dddd28db0917dde
SHA25631cf835889c15517250ef951f54b5de8410f6b45a367d95923b46d4cab9472f4
SHA51220f1e2335c29243d646b045d0e30ff29b553c2be11dfb85d97bf7bba313879466bba36e8c31fa1d1ea1a1223a83dc9ac8f263b7ab8ec4e5223de0afc502c607e
-
Filesize
8KB
MD5870c9adc130ff4bf04718da1d9353508
SHA1cc69cce386df3aee1b248f9c2af43a7fee9cf6fd
SHA2564679000f3940822d40aaf0f491d1484c319ab5200587b35db29f9799b87d50cb
SHA512a2b6b486964bdbb38ea084c5815c6b55eb7a5a9a40662e40dec9ec187cf0960e5c95d5def346086fff13cdab08f2a4cc1e440a04f427e096e54787b6893d34ee
-
Filesize
8KB
MD54b6d2ce8d814e81eca3088877f5d9814
SHA1c2da3380104f3ee57e357fe70466f4d9b5eca01e
SHA256f322bcdb81c25d6e2be812dd5f61107426a9df482739057125309d2fe7d6438c
SHA512b1e14a96b7345e58f39c1df837cb320a4516d164aa6297b6951c44964066859bed4fffb08928ccebad79f1cfb3bbcbf3215ae40a116e81b0c26a3b499c82ca36
-
Filesize
8KB
MD5f1a4432ad878c7ce2a0642f2050ee8c2
SHA1d4c1dd7853f7dbbd180986787e90114a8f0eea30
SHA2567020b73807926629befee6d650d8a36dc65d9c716126cf01fc2a806c2103a564
SHA51215d487fe12989f16161e01cc4a14459b25b39822f944d8e3b600c313078cecac7b5c98f8e99ccc2febaa7752f68788dd796c54f1968a6a009bbdba140ffaa1cb
-
Filesize
710B
MD5fd6b6406d1fb3dfc1ce507beb3eede4e
SHA11d45e344c4a9970655e034ae6b5413364e98c8aa
SHA2568bf068f6dcd4425c4688e0a939d92dd3b9d4958b819e3a4835a292fec4c88e26
SHA512b893129f96aa6d85ecfc0709159b5af069e43e06231149caa9f43d7b564ade00145750dcb6006af93fba0a039dce2c682095206bb03eb9f02e2b4916933585b5
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-661DDD780271000113B72B718EF3C672.temp
Filesize437B
MD5a1bca7662cdb5bb808c34b17ceb9e0de
SHA121279ad3843f19bf17339f4513c26df2f67af109
SHA2566493e9de3085de13f3af08778132be3e2e819d28234d139e4ac3b5d677f66ad9
SHA5126ad1edd37836c65947ae2b7da3f795eb5ec34dd8caa0e9efe214251eced06e5eddc0377e0592a185d8a57ea5681bba2b4814777322aabd1ec515b7abe6af807b
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-661DDD780271000113B72B718EF3C672.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/661DDD780271000113B72B718EF3C672/report
Filesize733B
MD5b4f98ab94e967670a7bc5e62b02725d3
SHA131061afc22071280225d3db366bedc1394f4806b
SHA25671456e97daaa603df7dcc76bab84ed33522450fbd725a985ed1e5da224e91435
SHA512ab1c4d3cc2605aaff6680c375bc5d76a9388c2194b6f3a9df835ac71965b6aa3d5ad9c4900b168ad18ca965cc70e93076f729d454fdf1b0991abaa325083d841
-
Filesize
90B
MD5f36aa6a18d33ac84738a8022485a45aa
SHA1ccb0439bb496d84739e7395692be9a105feeaaf3
SHA2560673e7a3e61a7217c13310c97eda90ef6f45967b9c47df8fcf37f4bfeffe0a19
SHA51290561a430c2f65aab1a245155129b40e634d8d946c221a068b3c43e6e9fd2ebde4ab053297d5c025587664d092d4355722cb3a944618e70e0b8717eb8eda83f0
-
Filesize
563B
MD5d64f1910703a1bb7876b390ea4302c04
SHA1329e083037065f895aa2e7035531fe5f3a55bb3e
SHA25616cd5167a0d83005778be6a242d8e7d889f8fcef35f2a0fdad7b13249896f541
SHA5126ac183eb8bb9ade8aec90ae2eecbee12dfbce227d52098729d71900aebc3098561c94cc58a77ef770328b05b14316457c07a7cd80c77ab4bc5bf144754bb609c
-
Filesize
36B
MD5167171e3fde77d7a24c1c12685a198aa
SHA12239090692aecd121a987aec4a7cc225da754575
SHA25654893e094b22644b87a9c0390cd867b4e34a4f6526622d426a5f9dcec1744a99
SHA512037b40658d37c4f4052cdc611b33da4618ec8577b9ac3e0305b98254bbcb0aaaa7cb6358b80e4c724573d6d39289176b854309d372d45748a2b5c1785cede603
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5206a1c6631929cdfd99983236d5d9921
SHA1fcd04fe86fbb7b9a1bfbc717cbdf56e9b6aed0ab
SHA256799169a7331b21085baec40d0a8bccbaae2275ca5c77b620e1bfa03e56aa32a4
SHA5129fd0af6709b53812824bbbee55d663bad4eab1df7e51b122b49efae873a6afff54d297c4445c10a8ced320a27b50815b82a4d371672dc494bbc0652c08641636
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD54e9a9b50b48dbad70059b4445e35e19a
SHA101419c5c2a78cb47317435044e02f76b1df053f2
SHA2565e147c7c08c0abf2909fe510d9d7a71c7fc6fdbee555294959ae545a886138ed
SHA512547f955b52bf36ca09e921838ea1a7f6965c6808916329ce6e49f8a4a19befa358414c3222bbd6e15f18dde073f7775188307893505ed5d665002ada767421c1
-
Filesize
108KB
MD5463c803ea3d39800fd955de15f37d92f
SHA126e5ebe461f39091700d0b2b69535a48432ec973
SHA2567526263b08ffea9d52df13440335438347805a93fdff92afd6907c3ffc7252a4
SHA51264e9b3aa573238725a6a0b9e5f190e575afc87e7ff725c61bc8bdb7cb01ccfc98ccc07c9fd7a21e3af2cd1273db2af10e673e996d47d610df557cc4a53378b2a