Analysis
-
max time kernel
48s -
max time network
133s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
17-04-2024 01:57
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks the presence of a debugger
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD54e9dea6804a1c99e96caf7f4e833ced3
SHA116ce9ef8d057bed58357ab26979f3f623812fe0c
SHA256ad591deb68895a4ae41886b0b0ab89bcc47b2c9114cc909b6aa8a812b7d6ceec
SHA5122d7b7f609f0074dc5f5951bd9b3802716b7ff36846557c13a8f5f9baa5d4dd45bb36a5a9cdd1ebf63285ca2fb49e2ccde921518f98535f469da9a0a3ea4bab99
-
Filesize
1KB
MD57821e66e12897c362b76d4386946900e
SHA1adf82c1723b8cc9b77e7670e199b25ae37f68d49
SHA256a932ed765be6fd4316950c4f08cbb896b64a5ab812f667e6cc463fe1d345f4d7
SHA5125f30ad7a6477f52d162a291dfcf72d8524cd3a8b828912deb408a1335eb44942a7c5d75e31ac5435157644998231c74abb3e1a3094ebde52f2d52f387ac7bfa2
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD5225e5eb7850432525343dee61a3315ac
SHA1bc03fb24698c35c27c6d973d2ae4fe6421d62366
SHA25639fecd3055e8997e65941b15f50fe607d22edf4dfcaa6a9b22713f5b8c381dfb
SHA51271b674175e6d005dcb5b0f9a7aafde594a148bdfd18f86617213ddaa201847cf093cc9f8054b687037592a9ecf557dd75ff861a2c3330c9c6b08205ecd3c4aa6
-
Filesize
8KB
MD58ecdfceb15e51476bcdfddc7a32e364f
SHA1454c7691c2f0d6ecd5f1bdebdc8f2f5d0d78ec64
SHA256fa589ee44174b8ec5cda65924ac9c4b6b0b0594407296920a0d1612a53661c28
SHA51280e43d2562dc33a9295184530e47ccf3220b295e507c329f2e0a686fd6e71f83c8cbb297338ff0a559839cb6ad745656d3dd142a6f7eb51f8cae59d2cd98b85e
-
Filesize
8KB
MD5dd643f41e26bd5752adcd6c23d9b6012
SHA19c1fc359642a1732b8217fefca8c9f4bdf962534
SHA256768d7dc5b3cdc57b54232f6ea72f71f64dc0b3f6bad031a557b2381cb3ab57be
SHA5122537a6819c9a5600c0dd618a9cd6aba0a24e841be257170a959864ff14d9f514d7d517cb748db7709c3945147e0b79fb7557a4e0debe27579571cd87989e54b5
-
Filesize
8KB
MD5b36afa8813891ee86011fba3d0eb8820
SHA11336d886f6e72aa561555f4f8400ec3169de9d93
SHA256d308c7869f0347a68cb6596ad530ffefd360778963858af0090cd38bea297617
SHA512f08353cb1b726ece311e6e5b89d99f99bc6899d2addc8a522289164b848f9b94a24c989c74172fce0d2e966cab18d44a4eabc8145ab0d1249e32c832c1612139
-
Filesize
8KB
MD51e8d3c030d368300437cf910a133f9a9
SHA1a74fcf8da66d163a0fb1fa02950302b110e27a91
SHA25622daa6591e8f792c08bf58446bebfc59b2b45e71fd0849b2a967d7fd37609a19
SHA512949981d3168b434bc1b768b3523ee10c41044ccb1f3a6195cf773aa0f6ed1788c5563dc7bb49d26cd97436c03395b67bd0051ea618b10b792b06e0c1a43bb3b3
-
Filesize
8KB
MD59be8396e562441a7391993d1c5e68734
SHA1e780273e95e5b13c4f4c7181386a76dda17267b3
SHA2560b0442b9a262a9db3830b1201fb82bbf3b236f8ef5a812eb33765b67076d41fd
SHA512596198787c78f96945f4f17d56ca196c72ebb61f39f2ff06d2c1a73b890984ded150ad33f4810c3c4b9acfc6f45da24ef8864d4334e822650d5b50f88b57c96f
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
512B
MD57f747295b5e603dce451487b78c7eca0
SHA1d1c8f098b2b200836a54f9fa64d263178a8bfddb
SHA2568a8b277429717604ac9928b916d523d9b2825e0171a212c3fe5ad19b3ccec086
SHA51279f8b39450a65fa0f8aab0deaab2e149198373e57c6680b71adeffb435e1a619fb5294214b03446b5fe8651d5e0142f71e76d3a7ea174133a859bdf51488bbdc
-
Filesize
8KB
MD5c5302f7b26c7fc8f016e9e951603ab36
SHA137b7ad8ca972828dafbd36e2fbe2e9466f923bcf
SHA256daf405daaef3f4438afbad237874d140ff47da067588d14fca16b81a53f312f2
SHA5121734efaacc137d93b951f04d8aa8ab3d80eecd268b06fdf1f13d37fb5d6e2fb6bf736cb7b3343d8225a7016957ca3f1d50ed44689b8c166e457f9ce3b0943a17
-
Filesize
8KB
MD596afe6d8b05d2438d5943ab9e3a8cc9d
SHA1e4d6232b361548698b3998133d3ce1698db8feea
SHA256cb9d2fe4561e5c5167e66b9e601c30367160e04e2b3edb0f12a30e1de7e7c94e
SHA512503759a681d399a1216ab8ed41762a8f04a0a11978f2a4b882ebc35356ae572850eb196b14b764c91e4a7bce7ed70134c4611b0d0467a8b5d1efca29a4afb330
-
Filesize
28KB
MD5286737cc5e7f6fdbaf63cc5e82f7b0db
SHA19d842bd13fff70ff2a98d322313b0fd5b9238684
SHA256502d29dce4424d955cdf2496b2a1f8bbc5708849b5e3982e55cae1edfc42cf3d
SHA5120ae7949446d354a3f85d506a46421a25128a84696349d01a80843245606346bcebc9d64d9b3689a824c2c1cf4f9999c30b082ce0f25776e5bba4c1517910288e
-
Filesize
512B
MD57033537f7d9f17f0ff0ed24c35e42ac4
SHA1400625ce35b79ad4bbb42cf7ad72b0045f4aa69c
SHA256dafb2ec67c5a79a2a4a61e1545e519c01571799e2c1315cd270fd17d294c2d39
SHA512450b4022fb69585bf3dd3de89f5eecbe4121b36f636a786c42bf788940bd155dc1f80112764301646b5e01082a21db42cd367844f23be6a6191377710a50cd39
-
Filesize
8KB
MD5c960eb5b40ca702574fb413f37959913
SHA137ec19f52eb63f87973c8f3036cf4c3d6932f54f
SHA256cf904d9f5766802bc65629fb175f79e93bf3eac664802a37605d853e1a138064
SHA512469ce1d65d31e3969fb7287f9a9d6cffd8052527b5af3408c10fa0a9c9e15f4062b8202c9d2c797aa53a8a99646c9830d35183106e75a1967c360192a04efc92
-
Filesize
4KB
MD5a3b2bf317b8b27dd93040fa6a5c1f367
SHA17e77c2d573d347fbebae0bba8b1057dfa126c381
SHA2561f406879bb5c0a9cf046ff15ec33edc4849d937d917d99f483a06127943db843
SHA512f3fde079b8e22cac28a33f092beb794c6492259db774a60da70ca04872841f04fc93797839854df2001a68c281cc378b9dfa560072ffa02b104eab1f427b2463
-
Filesize
8KB
MD53f1170b5968d72843e77d154f8bc7ae0
SHA1922371f65c9d972d3c00cfde940dfcb5c0703f98
SHA2564fc0f3a4645c57d2c90eeac20386b3dfd00b4346e9cf41c6ade63ec1e65fb68c
SHA51270de7d11d2cb6288cdaf216d3c8f7c4d9655c6e08e931b043c50e35728eeaaff08aee6a63e0a54712940cf2e0424187f01304bf389c0f09664ed790ed956eb37
-
Filesize
8KB
MD530fed65538f3a8d36e035619fddde45a
SHA1b08c46017850ebdf9b3c5390b650788eed185681
SHA25650796f4fd73f950adff822edf176240664723834d13d29dec950d1d642b90ff6
SHA512de6946b5852bf8fe16e8808c1e6a8a1995042982c87549f6d8d94520303b4a70c409c45634d7635b886766798aff31cd79b320e13524982347e400dfdb449373
-
Filesize
12KB
MD51bcd912bcf475c744d1ab006f7dd0278
SHA1a610ae6a54765757835bb94b74f4d560d7ee3ac2
SHA256ee9c8f2749cb9756316d8ccd538876009c9f7fb7e7d7128b982547e52cbb0b96
SHA512dd3c31d935fab47f7afc64b2f68932cf45a2bddc7eaeab0e8bbda3959b76796532e0a49c46c165f028899f4442d5cbf2b31281e6f5143a21e5e42e47302c8924
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD5e0aff009655ee02cf19899c299581421
SHA1921dd4038a96d0aafea5b51a6b2342b4c4a63d30
SHA256d48d2c94866edf268f13fde656d42d9c7d8a5b28f9e16814b594920e2829bff0
SHA512b8a91ae9006d877900f99109c6361774565c2d4dddf9c0963cd3a88edc9de2d669c7adcb6f6d7ec318f7731f50fc484ee8521644cccba43be1d6df664ff81327
-
Filesize
16KB
MD54fa49f1a05e86e7151f1b6a5a06360ac
SHA1fcd32cec59a8425352e934aa1fbecfe9121311ec
SHA256ce0593337d89e6da0f921da236ad8a94ae4fb16939d8b72adf607caa544399a1
SHA512385bbe621205b40db11fbc97ab1ba82986569de133bcc72ff45464f40928627702846b87bebc01c3aeea027bb9427e3689b5910240ec8084cd40409f7d6f48bb
-
Filesize
16KB
MD56231013079696b8b5f29d488fedf0637
SHA10af400c5f63f4898881c4e87d81788ed164d5731
SHA256cc6e0de663d42e1d13a3c0f1d073f8575539272a23b90914874537ed1dff21a5
SHA51255e0af8e6444d4994153993612bfa8e68966e90800d5ea05d1ccc5b386ab549a713558cdd6b65e1ab5441b6101b0a3541477cfd1b72849209f6e2a25e25729ca
-
Filesize
16KB
MD5ae06b2b3c32a1ab7594267611242c79d
SHA1479373a63743b73c4db56c58f4c78cf37f4cd5d8
SHA256c501cf04fbed9507a128cd21110a83636c768c6ff66b3757493c7a286fd30313
SHA512a59ea2337a00eec271f548b68bb2fcf9e4fa9dffe57abc546a6eaf4659ff8990409dc2d6f9cc82c2b128d88f3a43c825ba55674ce6b85d24d4fb486812456380
-
Filesize
16KB
MD5c6de019a93b8a298c139021e0283ba5a
SHA150dc2c6c159ffd1142b0227eb079e94e90964692
SHA256bffd2c611a545c2a706cfde42b9a0ec3e42a0d439b29dde7b97f04585eeec3d0
SHA51214001d11deb208c3c9a2a2261fcc6890df0979a120fa7fd71983e03f04d763efaeb4cccc517f58e4640393e1a01f93955f9436a5b78eb05812cd81dc67c13b1e
-
Filesize
512B
MD5b685273f2e9ea9537d43529ad9c9fc23
SHA15b4d05f622c036fe1b9d2e841b026cb2e676978d
SHA25669c982aa6234b3a6e456294cdd8ecdbd1452d46daf82455e3fc066e0843b5b8c
SHA512f3220425d3fd57566f0cb213bbfe6ab373e3a4925706ed82a110261442fa617fb37105d58c56f93a21192894bbfdb5ee6f712dedb6d19a16a589b5edc954a02c
-
Filesize
8KB
MD5719bc6242d7dcd997833d17b3fee4390
SHA1ae2c183a3e1bfeaf486589c31959d60b86b40032
SHA2562f5709441414857d62aa2b61b559c51023ac98c19a1420f0d8455c402f45a2a8
SHA5121f9fe1b15434573dc24cdeea48e7d1346ee18b6be59b779cf644451053a52e913ddc950b4e657e048cfbdcc083f81deeef00a1649dba76d83daeea76dbca132d
-
Filesize
4KB
MD56277932b55bd8b3b6f478878e261b172
SHA19edff19c42103e6c670fad84e6911a6bed8f4d91
SHA256de2bf0ce5ff78f71e76d0b0f4bf7943c4c70e3f9deacd39c11a3ef75557e2c7a
SHA512a5c6cf1b194d142f87f9f0b77bd2380d9ebb8f02bf4040e4cebfdd880d231bea1a790a30a467ccf1b8473c48d3d2398e201cc3a85b0c45e271476bf1bcd1497c
-
Filesize
8KB
MD5ddc0c75c20233c5f28a849886a8ba4c3
SHA1fbc3d9e1c066ed08f5f73af905035176768f7ff5
SHA256388587f9ee90f4f1ed775ce2f3cb05dc4c104d3b4d0ecc493d673e43a5c3afc3
SHA512ce086f9b566ba18bb32d2e32660e6aee9cee50c83afcd8ce1d90f5ed7dd5c5d36dc96e61a30633725a08ce9bfe0a337564b2d5c5a748c450f93b1a1e2d525133
-
Filesize
8KB
MD5b81e1cc9418d1195dddb98c41b9eb88e
SHA1f74f8011750c756c3da01a765f5b4986fcfcd71e
SHA256046c819afad13255d6eaf97dce0ae76b3cd14cfe77965c542c56822aa004067e
SHA512a28d807905ebc47bb01155fa2a118592c8f88c04a6352d40402f825a99002d1878826d95c880f7917e3fc36c7c9d95db7986b8f012623da969cf31748d573196
-
Filesize
8KB
MD59e92692388645b0f2e345797910dade5
SHA11901460d3ce8cff8c4934d9b8618d692a77e7920
SHA25644cf743913bfe8262fc04a42298bfdc403fc9484971ace6624110e614fc33832
SHA5125af43fa7d5151ed3a66ebefe23355e29b69db48403ec38aec18d124af68cbcb97cc565dd9c28b8557cfd087d8ad45e453172343917fef301625eca0b4b838b0f
-
Filesize
710B
MD53c42738f68bb2e92e1e628892cd0a005
SHA1bd3b9a7cd1af280aa15f029b99256e40b3d56360
SHA256c328a64fb23cf7ebefc47c0b960f773cf52e87b6539f9e0addd5db0469c4c45c
SHA5128c2cb9153edbd07db98e99bfc6d867298b1d3ce31ed55639b81615c6dda88cb46949b4d8cc28f430318f963c5494a2bd898eb5157d18f47f8215f585c33c69b6
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-661F2C9300DB0001125D2871E03AF52C.temp
Filesize436B
MD5ec72638c2b63307cc382c2e16348e4d5
SHA17bb2b92478342aa299bd18faa142047ca4039a6a
SHA256ea95f7f189bfcbb2acbe59a68110b2faf0bacc25a516f44461429d59e5022662
SHA512072226758506d411672487b5970629777549feecf881ffb6796564f9276ffe8520d258bd054ac4d3dfce32559688c118cf9714f39b055f869468e9ef1ec4f661
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-661F2C9300DB0001125D2871E03AF52C.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/661F2C9300DB0001125D2871E03AF52C/report
Filesize733B
MD58708019fccdbb835f2e1c4512b94884a
SHA16e4a3ebd09807231481a676ac434ba09b9fcfb53
SHA256385e07b2179b112e44d5dc649f8cdd3e04624b1d746edba4b68e2a73ac589663
SHA51272979c191ea33ab3806d8b5c24568b1c0b44f1e1cdddffb2cf12d29f2783b68c862a1b4f7ee830b5efc39c611e800908659d8f53b3c05376352be3f7618f9c8c
-
Filesize
90B
MD53ba3b9832620b64916eb86984629db5c
SHA13bbef93d30539fb86e129f04a864a432bb63a0a5
SHA256e8012ce00c45355d03cfd85333e1d11a35f9e303d57f49519e5d4fb90966af6e
SHA512b6e9875703ca6a673242e2eef62c9d9bd4c5f5a2d7c77d1671f78e942485856b7984db20e5cfd8a7a8280b9a91441c277ca6ac2d9613d1ae59e644f773933e0f
-
Filesize
561B
MD5414512c761c37049d8f5a143628047d6
SHA1a00deffaaf686f6730f09e4012e05be9003ca7d5
SHA256f840dbf00cb41f842c5f1c66ae52ab5ff19d2e166737fb16ceea8231c514abfc
SHA5127204eb4e079b44d1aac81d784e3584a8a011a7033a742a209b3a3ca9665add71aa777e572d111de3bf5eb11997831bc3dbbd0c94a6750cf9126f72a36563709f
-
Filesize
36B
MD5a1778db531b913238059beb2895cdeb7
SHA1ea70253af7be13ca795e2584b9207d530be78e6f
SHA2560edf45de1272220e418e313c25d0e38c17f87f8a0fb23204b83a5a8629c7b8ba
SHA5129930f4f351e60ea7652815335ef2e46e871192c6a08ec7a9751fd0bb5a19620d4a90e36f2259b171917f56eb6ba580980c6c11eef8664d34c9e0400c7da38742
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5f5c78ac03d0f4e4ce4d067d50bf6fc8f
SHA1bdc5b51a66b50435119bf7a5dd4eb0f24b46616c
SHA256fd55fa276a791dc8ea2a85b53e3297cd3e07e6f78959b8f367dfa7576e21aabc
SHA512bcb8d4495b1c9aae812ebbb52dd1629bf6bbae5c8940bf9b186e45bf28d261d81aff5e570be5221b0607a1c013df567c7aa0e994bf5349cdb54f6b8680d3cb9f
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD53e3618b8ab8643a0b8c2a82fe8eacb1b
SHA1dfcf755304d180dd662a0c79920a9913bce7b8c5
SHA2565503427adf893a0703d46a430d6e8400d5619a4fbff00c349a73268733baf6a8
SHA512d945ec75cd75327a0ec5af0ba21c90783e6151866f12cb952f54f4e1e989c6cbe41903f5cd82123269ceb2d1b474cd930aa574d21713fe8c74d5151526a6f4c4
-
Filesize
108KB
MD5edc370403b747b25fbfa6e0d64585c2a
SHA1dcfc77c125f5326c8f8b184bf897ce2690e7b4b0
SHA25686b524b7f9074c5844eb2da4be2bd6a0370c99e405ae3521f07dcc1d044b6589
SHA512b4b1adfed9eda0c89c30a476127e0fe69cbec9f255a34f5f641dd0aaeafc757200803f9afc92381bb1e2f795607465252882a6be64ca63aaa650d26cdc4beae1