Analysis
-
max time kernel
47s -
max time network
134s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
18-04-2024 01:53
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks the presence of a debugger
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD522364d2986a882c62fbe55a22c8e1c49
SHA16b87e0a76c8ec104164bcbb5b24a649f0dba1510
SHA2563400dbacc6080a36944296bab144df7582e92e8faef8924204b82b460bf42d79
SHA5120087556be4ef00f1c365251e3c4b6950636e14485fe6fe58de9fa320353f02e09055163a62e525192de9d4ce83c4bfbae8039b417170432ef0738651f41acc56
-
Filesize
1KB
MD5fb6376e58b00920b5b93c19c888645ee
SHA17421653fc20ddb50d6b878038d336e78abad40ac
SHA256648585f59ba334821d0958692e108222f2aba7413b32ac7d9c80075e72858afd
SHA5124452b6ae2a10a99d7c53d780ef2757072ff1aea61b6ce7159147c5afd8efa76e0333d85c73011b9feff80db15b17cd472634e9c1517b79baea24b0bfc6d3d3e5
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD56da40c196592b1c3ce614be7f3ddc7d4
SHA1fdcf7ae914d33dc13f34bdf49eb6e6620bb6c2fb
SHA256b2d3b74debdab921ec26cec47001250e2f028a8e5bca350e8a0197aea592f5b1
SHA512b332afd75fba14af4d2ad3823f07d4c2c1381d6c8b5cd8226b13e6898e3808e787fceffe7c398c7b675ed967e4e4bb3fc13d761ad73362723bf7d5c3b95248d6
-
Filesize
8KB
MD52a23e628e9182bc417fc2fd082465657
SHA1a9c89685f13b176f9c215a90ba5e840f60420535
SHA2565ae7bec902d933cd2892ea34b30160e62cc1996d800df75377cb4a3e0670b305
SHA51210a50a8eb23b1c9fbb6be32ccb3b99bdb05d00e700d460f24e6d2aad13965b3e1f31e19eb4995c9da635e372f1872f197a24c6f013c6add43eb962df6e325730
-
Filesize
8KB
MD50f36bb0fbb9ff471c69c4b079915aa9b
SHA1ebe5f187239274e727fa40f783ff80714f344bec
SHA256d97e15e5519b3804555cc1cff326931febb3d10ffc1854f9ea0233e68fd336e3
SHA51277c61f36a6494a0d474a1eb8e4d3ddf8ecda4cc0db85304aea43525ff76c586180afe896f87035ea698048771af7be9a235f10afdf1daa6008151cff38f805c1
-
Filesize
8KB
MD52e123206cff5662f8e4cc47713c04fc5
SHA17a4c4d314b2a116a620aa089a8e55314a2589d57
SHA2562588351b392cdfa6248980e893231267d44682b4cb3133de65d14b409f6f3963
SHA5126ddc229f2a01d9e74b7379d2c38aafb4035606bf54d5144f69bc28cfbfdc6401cb9cc7bae10c551d20699809e8cb1b22831b120e81edc61e03c6f59c98d2770b
-
Filesize
8KB
MD52d26c9a1674c6f6adb7777dfa3fb3010
SHA117b469356824e0573b1b626cff23699b1ddbb8fb
SHA256e16222518dd862696661c335f938fc411aa093e564938577b26565ef4d7c1e54
SHA512be44592ea9f0819241fd45947512a0daa04fb00b8ce4141edbf1e1973d0437960770d4901e3a905673cce5f347060d11afeb7b50e9757769322fa84de594c3a8
-
Filesize
8KB
MD5d866b5595d4586039819b15fb337f5da
SHA196323a47e4c768bb487e29811e9106c46247d2a8
SHA25644827234b3d8c27b5125f615131a6e412665e141cf31c7cdc2c0032d2f127524
SHA51254bd9a2211b380e550b8958e6874cc40aa3f7eb0a4b225cc118990ea3c0a3b21cfd9fa92abc13663e1dc53a3b3956aaa1780122d94c1f4952da4644aef9b1f88
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
8KB
MD53842a8ffe649c1229d9e2c61e0ba36b6
SHA150f1835da032c952c21e6ee14878ae2f2933d6de
SHA256ff67eb1d806e897154d6fda81f3451cfc7c6ab77a0618be3c5f220c2084ccfab
SHA5120c9b5e9feb07a816fd49cb2c3d57763f1243904f04453bab3e3b69c16f139cfdafd55b7374aeeebbfa3c8966affdf68c95a39d20fa0aeb9d31e1eac714a904d5
-
Filesize
512B
MD544eb18d287c15591ab3106793cdb4f82
SHA126e494245cd6c7a22d33897dec0c504900648f3a
SHA256d73029443a4f02d2a47d5157376456496bb97d1fae00aa215475a5511c22447d
SHA51277153af9538653040f1a738760d9932490e8eee971834da2be30716ee52b0b24d97643ae4453ba3d4aab2b032884895fc24c612e406dc16a447ea6a47ed22584
-
Filesize
8KB
MD5896a8101c18f827054a8d1632ef833d8
SHA1c1ba0a59ae09463b3186dfc13e065208ac11b7ca
SHA2567c1b8b6166ab0d9b89264024fc5e6007321fa2db032269fc2ccbc859facda3d4
SHA512ff6b0a0fb4f2582cfcf08e02f9aa76084b9da6e57df3d2220dd183d82ea9c97b113d2225574a6c72ee7e0e3a57a7c8f9734c387d4d0a0081fcc39451fd70ccb0
-
Filesize
28KB
MD5ae78b579c013d413f4f5d4b7d559b36e
SHA1fb2c1396d0b9bd30e5b8e78e622daeceb7ead248
SHA25629863e2ca3af5d84da3ed5d06040023e07cee721bc7beda40c6a00aa076a9bd5
SHA5124a19d4c8fafede7146baaa95c0055054771e33ecf67d078972d6a22c155b4676dcf4fab061734d018e6821f056c489433e3525592f9743e4a52efd00350520f8
-
Filesize
512B
MD58c81fdc9bf9d51ff8832735e0ea66d97
SHA1c8d1c24fc20f3e6e135ff2f80d07d2804410ddc2
SHA256fe1f925d6dffce376d84d6606b93fad3f759f0ae11ba2cfec57b86cecec29e2f
SHA512b2a4e67fe1907404d072549e80614ddea4c94fce288f4c7a8c8d58909728b3e9757380eea0a129973bcd979446488a442e00a81b233f0bc04b0955f3dbd4113e
-
Filesize
8KB
MD50c723af72192d6d098ac69304d27c12f
SHA18d750e01d5e71715c1a1249005f8e239635dafc5
SHA256b449ebe4846fb206e4395986c80f25ddedeecbdfc65a68638b49e3c658c362f7
SHA51291c03e9a804b13a25e110a89f266a52a0c6edb398aa1dd85d77a43001c5781eb469e1e8a62eef50669046936a55df4a13b27c8ca7d893f8c5fcf1e91c2cf8955
-
Filesize
4KB
MD51a63ec0d88d5c1a54d6f9ceceb21b578
SHA14f13a1c4b650635390370624a19a22dd15e3c101
SHA256fb750685261b8da2da0afcd1b23a397d9afdc564d96a38f035ed0887c3a6d7e3
SHA512bea2817c9e4321df331883e9293ee36c4e340de570c40c5ac556bd19ae30c62b88ddbc338ae1ad50de7a93740365e6e8539992a407e4b4b51c94ca6e59955007
-
Filesize
8KB
MD55341f010fd399009bf0bea9a16220a72
SHA1c5b09f172b0c00d1be836f88605586efd171f50f
SHA2561fa3f67d5323015c3db0aa64d63249549f4fdb37a11a7a00fac66c50bcc629a1
SHA5122df5e5615e01f1c8ad85d60c53688499aa24276e95f84c79702bee5ad9f45bd13c27a9a1f30047bc63edb29bee0cfb8a8a823681b22339182aa7a2b8c38cdae5
-
Filesize
8KB
MD57b9ac25fed45c26627ecbe769f0edaec
SHA11f84c5467565a40752fb18e7be9f1562e8867016
SHA256e7c2126d074181698e494a870ecd20c3bb6ccccc50d56be55f3c371c6fa40b91
SHA512492614a2a33a23f1703eecf02dd0797934f2d0d13c1f711e12988a94ee8fc658b27564510dd6179d977af1fe254dea0ef444d3e41cd3c6ecdff9d4d6da20da08
-
Filesize
12KB
MD5766df33821c704bf14c5f85fc5b49594
SHA14416b22ffd34dbc3ff724439d734995676e69bf1
SHA256257094c1198853e0343a06852c7c9159f9f288de1d744325fbd8acc8486073c8
SHA512d7155df1ae139b891e99b601f456dfa289cadb731cb70bed5cce459ccca9b9068ceda687aa7b5975f3736520f21ecfbc8a87174bb611a2805a78527a40c8e31f
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD57e4d34673257d9c44770118b2bb581cc
SHA15a06942bf3bd57e3aed6e5e0af9624bbf66c6cb5
SHA2566e981b421f91b7504e2ebdb2f9f6b8be8a0eba8ea5cfbdff43df0c4ee6126d67
SHA512a2c5a399e44ad50a75a1e86328a39836a3acf80003061bb3d61862afb2ce8c12fce43a857eca9548fb9b068e8a88e50109f521a7986dd45c6bd0a8eab1763181
-
Filesize
16KB
MD5b64821b88b4e12574635775967181112
SHA1526d3523c682ebed9a67cac1eb0dceab79688da7
SHA25613720b04f17fc86612871c0049b93d04cb8be3c0413f70513a177b289d66576f
SHA512867547b45fb61ab8fcd2eb84de6f4ef641f513caa5f044a7a9f62a8626bd5ccb66aa1c3fb4b00c4b76361be21c1b5b4d57fea0680a9900e8f29b60963dc19fcb
-
Filesize
16KB
MD5e0a30190d221648fd691b8680f7f3fa1
SHA1d1443c31d561cc349f2867ab8a199d3838927c2e
SHA256e669c14b322006ed1aa3d796c1bbe2c7f07f326f26aa41eaedf141e54aac4a79
SHA51270db29a5b6a3f80deae9d05e9f8c003f6a235e27334aac19f95eb22401cafda6d1a3eab00cf71a9c046c99ce4c92beab3e1a6adcd4221ca138966d38fcff3906
-
Filesize
16KB
MD50c5905ed47e5e4af4768c4bbe8a8cf13
SHA1af7c90381d4a4d2a2fb2cd1bcfbbef5083e8c03c
SHA256d2eab94cc06910cff92b94e659a9cbbcbe4ca00414182f0425c6626f7913b649
SHA512befac26a69ca0061be7bcf69d6a26e901e76a291bd4db5ddea0e4dadc53315a47cb881e9fe2a909b2d3c8e1d8c988ba67e17aed0396c4f55a78a18c7459284e6
-
Filesize
16KB
MD5a0325ff5668f4474177bf7958d70a597
SHA1f9471cda55083be6cbe3f62cfb230b2b317cc4de
SHA25671baa9bc34c3832c1b0a51c8aa3bf03424c6696ae37147861da52fcceaa0f688
SHA512c8365efeead343b31fbb858caae4f8b1b6c9fcfd04dadc3bf4e39a600eda4fc4540a727a023cd06bfc28374a21e0655cdb14a680e202383710823032c8fcbc26
-
Filesize
512B
MD5b512e61926ee20cbdd85726c3a1982db
SHA10f22b2770ddbeabd273c7a381d061490d2b043d8
SHA256399eb27576694b66761f521f97476cc26c40c91f48c270286ed89a5bb01b2d5d
SHA5120b486488a7f79514a8ce880dcb1de3c648e498cac6a9040333dce8a01fd56d201739abf827eca6427ddbcc0e41f568ed917ef21217f0a8406c38da0045710f0f
-
Filesize
8KB
MD5e4fd00b8db91a63cae6cc95d065cfce3
SHA14a4ee928c75de957b32f233c90fbb3d28ba49234
SHA256dcde8c59831a0d72ac118f6fe46da7d4909eb9c7e4e2c68dca92176d25f38982
SHA51226d038be54a4b7ee8c81f58873a6057a6f761bef3bce01bcd6849594befd8b1da381f242f1672fab335076e29bd8b8ae6c7fe72706ddc3941561506da8d3bcb0
-
Filesize
4KB
MD5d657650f97264e3f5e5cb02ec57284f5
SHA141eb724a3933dbf70530351a2c297cb7ad175c1c
SHA256421a0987ec44efe6985e2858ae25d5002847729cdb4afd0cacc4fd274e8eb514
SHA512e5ce316cf75d96d779a35d7ce5c03540616eb25c1879268fe8c4ea3bc95e015bb2a29635d3ad5e7edaf7f5c8c466a0040372cc697ca4cc8899604762760dda4d
-
Filesize
8KB
MD54f05e418596206b1659a54428fe24cc9
SHA1bc44c4e7a9d25ee678ca18679f037b5012827bd5
SHA2569656afa64b625221a28ba8b13d768acf57af8618856b0aadb0d82f25e7d9e611
SHA512bbed80439315d51f1211ac80895e71a62db79702ec001c97fa2194b8407aff9b32392b560a466dea564627e491e1e79cd428cf332aa77d8d37ad95472d05314b
-
Filesize
8KB
MD52b7f6b5677e9277dd0b65031c8738159
SHA1222df9905b3c6971fd69cc95f46ac9378f77d73e
SHA2568b37fdd2cc685a9336706958503aca16dbe90b4388981de71ecfb7a712ebf0fc
SHA512d57993ef88dcc4c916014ca3e32acc9060ed7a72bf55b8ae3d4fbac21be44fd15608a397460315d6396281fd6768256ab4c4e773168875c71ac03dbc24baf418
-
Filesize
8KB
MD5b4bf2e23ee4eb9529e1ad1c8735bfe69
SHA1693bdbc4cdecd9edcec1ff8edf0ad56820d12da8
SHA256d6fc4e039c2ebefba64e6fe13bc761e83693550564d0cb825d4fda40c0529043
SHA512cef11890475e5d2cf84c75d02693e1795c5f5b8f19cefabfc83c5e15d1d7c430ddcc8d46f26a38e83ba3d4302bb417e0ae937db88d71124cc79e310fd15b49d5
-
Filesize
710B
MD5d1550ba097134538b24b11fc3b2754fa
SHA16d8e78c574e619392328c2b42463a297d7ccedc1
SHA256d374712507d556106609109778140db9a75ec2ff20b280417c2f0422190fc330
SHA512f3574758ce8bfbd9eba49abd5d6bff87f5e1f24f098fbaf5e3a63e36236bafa85f767e21d569ae5821a0a4e55c753d166ff3628c793835c733f741ac46b3cb08
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-66207D1B0302000111DFB752A4929DFB.temp
Filesize436B
MD5ace548d1ce5ff2b6e3e26b27c1d60f92
SHA16f0fea27ef9857ce09f7d8f1dc23aae82917dc6d
SHA2566bdf4aa65f98afd452df84afa12d933dc43e96a03fa268fbdf1f94f12b3b4013
SHA512a03eadc8d4d7b61049db5f13a05fde285eeee5cc246c03aacd37c8537472089fe2f1d971a62a60cf2ae968e39b234640634b194fd993bac696a984073a1f83da
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-66207D1B0302000111DFB752A4929DFB.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/66207D1B0302000111DFB752A4929DFB/report
Filesize733B
MD5f910e6016a77695064496a1e49bdcf98
SHA146b304e8c2e63e581eb74c340a8bf7177e3be797
SHA25684fc29b2591680810d3a1ad6136726c63e1be63f0cc6324d7ba6b8660b7a0b8d
SHA512e0901456229e92f4656bb33a029db8ac827809acbeb1bdfd8713d8de9e3004fd0c662621335586c1843ab02c7e7d42204a61a723e3fe33c7746c61d638accf58
-
Filesize
565B
MD55c658c50e76e57cf1b2b3cb62ae42886
SHA14d17bc944f315e35719bfc1533e9bb30e99549fd
SHA25616917065c61e8a89385f9d42f960b37c860fe324c63e87b222c9d92b84d8f466
SHA512072ec9c6a578d63c93013b2f04d9ae9de1f4cbd91bc3f9391ca8ef60e3ca679b74fd95b3992ab456e722cd3acf525a90607ccc1c498d0685074635b7e13c9c1e
-
Filesize
90B
MD50a1e95553094a06d8ecd1f62f735278f
SHA1711314fd755b95f527c2bf41f90b4d475ad942c0
SHA256b160abce68527ffcf7bfea04b2f2e9c3c9e3c20a2747cba8b1d038de8560a5bb
SHA512c81607578a7ee15ee09274a10e84f8872c2de9973dfe0e81ddc53b579e9793d6003bbd91cea1aa442706dec5cefd00f000828b0f9fdb139d07dca78db03458cc
-
Filesize
36B
MD50014c6b8ea0a095140507394e75ff630
SHA11fa9b81d5a784b9f90dd1a49f5ffcf96a03bb708
SHA256b621d48737f5c3aa29f9b3858dca802017212cedd8691939d3308e59730d754d
SHA51270db5f447c5f524cdf7999e19791736f75ba6af6c78ab2ade34bacd07b22078165d0e1c114d0ed06ba9141b6039a0ad2f92c1fc9e874bac0578cb949cca6e268
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5ee1d628c8362c75cf69936f6f8247b3a
SHA144eccd9863262cfe9b3a24c728c83abf74025c2c
SHA2560efb21d60d68bf8be26f3b2e5815af50c61efcd2e9b7f1ca4cc53ceb7965bd41
SHA5127d7390aa4fe4ee3e19dc5abd2b1c47b46ce4775acc598dfc3bf2664bf6399152a6c6acea777295668df9a0ce4eb10e5176f76d4f2400b3a517023e79fbd54a3f
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD51083ce611a75e0c43300f2206093891b
SHA1851db0241d5004c0e6366c5e94e519d9eb2a3264
SHA256ed7f4366a673df21ea58efbd59167dda4b1c02a736b5672bc31cce4f2146d153
SHA512e1413eb10a25ad2f64d36dfcb3bb3052addd85c1c2ef531b6a2749b24e110525713aab209037e8fb340afe5f2b1d9c7034490cf564de2b63211b96c2efa5bc80
-
Filesize
108KB
MD5b0d6b6989920cb4fd0465c28c5e83c0e
SHA12dca63787cc1f3f037583f9f6972330da80a0ff7
SHA25646678f9b83f36bb0000a5f8958b42547687c6cc4b519499668aa0b61f8f0dbb8
SHA512b281884dc1142d881d433014589e6debc0b676fd28531cc0568f20632c426eae285dbe2407752533375c65632edee10b79a9e801184d476d1993914c6296c6dc