Analysis
-
max time kernel
48s -
max time network
132s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
19-04-2024 01:56
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks the presence of a debugger
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD53c3f285fe8b419a2f6e97c8ec08a4a38
SHA10b181eef0e526055496b97487981ccc812da9659
SHA25624c55fd3e41d7e4a5ec23c721371b1c955f48a844dee3f9632e6b2cdadaf8b12
SHA51200bbba6c6eb62156586e2b6bf4b5ef65f5b4d8104c31325639559d533ed18dda29d085f2ef120638a62c9028efe5cdfd449789882abe15449f7f3bfcaf85c78f
-
Filesize
1KB
MD51981656261a53050fd0fe1f7caf3b417
SHA1db1250b620c80b5e8f1934c8b3a3e9a55719a38f
SHA2569c42207b94c053fa416169bbff33bf1fc7a366b2280cce5fd6edbdbd1736f975
SHA512bf87e1ba7ef83d4ea6ffcea868436171c22081d578085d35fcea69490f5acb279f059e9b4e5a39cf9d243a2ec9f2b959aef6ab390b92345258565e28819de353
-
Filesize
76KB
MD5244592a5662464f9e6e8aa5d52402428
SHA1885e44dd3ccf643475ddb16d7d2eec0c809fd1d5
SHA25654b29062aac9ef91d03294047b7780498a2cdf0ddd75028dcebd9b6b7a88214c
SHA512ce35edd0ec05450bb08d6b47583393eea034333b99e13ad2bb6848724f09ed71334a858e5cd5ccb6909d516ae70545c3e7c98ff15673005e25c9ad60b2a11b17
-
Filesize
512B
MD5797c31e7c19582d17e0d3ac4de8f0538
SHA17c6e4530c8da67e750e291193701385236950eae
SHA2564a68b998cc4584c4b8d5a8a5127525c8747ed3bad4c09a380c481e99483b4b80
SHA5125f75a45905eee78d1c45b6062d95017b7802e8988c21eb365a953f046877605da6893dc5fa82c024b69827b4a6e6dddd05f497353b17b684d5d9d7ab7cf55549
-
Filesize
8KB
MD5eada24e6a9c5bc9542ab62ed1b2d865c
SHA11fb7177beeac95ee6ddc75a71ec261b3b18bd87d
SHA2564f4251f99a73b57560f429c90a19e5e6838f833fe6269d1199bde5f53f49ff90
SHA512f1382f672b7948d5030d157c893ebca80d629e1322abdd631914d82db5303c44c98ad9b15a7584f73685d73c93025b826074f877d9765bf7d44f0e2bc6fbe4dd
-
Filesize
8KB
MD5b68006b2ad6386c7205842029fd3e4a9
SHA14424e72eb94dc1703fff0da793e863c4f45d3f17
SHA25602f913c837f132c0b125115e827d1f8a9ab4337c6ee8a7de68234482194115f0
SHA5128bd292392f4e829c564d9ad4c834d9f95a1b8e1e13ddcc2effebd504630bc97847d8a9e59c4626b3265640c3ef0a9dfef39b35ab992aaf6d82886e8b58966105
-
Filesize
8KB
MD5121604ff3abda5c89864de2128198651
SHA1ddf79fc507c682a588ad6ddfe1f0ce8571878ca9
SHA256664fe6f3c1503db657a60e3f6bcd23e07de6c8c2fafdc5f9a01e1e0ed548f036
SHA51232c90693664f0ef9a4f62ee4b7c11642de12698b8a38ec6da9818131ec6926dffb0e97088db1ea16d9b03f7126db191031aa1f08af4cec3524e8e301090d7af8
-
Filesize
8KB
MD5c2b46402544c9da350820763871bc2ee
SHA160c640076cb4e7f1086c0487af62efe4c63c6b01
SHA2568f6392b4a7f94183887b347e5c7acdea4ed6db2c7a5d724def5662be07ba1871
SHA5128e97d70ee09c4a45caceef9b4d3a07fb9a3667c91912a8fa7da986361762718a8585ab6dce8ef5f535544570c933b78e5db90af8fa089f269d57a442ee4a2913
-
Filesize
8KB
MD58fa447a687d10675c990b90eaedb4e21
SHA1d132a31bcb00864eb1604c9f8ba93e8771c89d89
SHA256faedde7b10bb624537d71330f2d9203def8ef43cd7ceff2fc8b02e2f35064279
SHA51279dcc88a135b702b309f7a051a3604a9e62e58f2f69339e7a47d9c6b8a752e2adb2686923399dfb16a1a38a6813acb3d5ac045cf88b54c8778f4c2fc022d70ba
-
Filesize
40KB
MD515d5b92dcbda7ef7f9ca327a903e46e4
SHA1ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA256e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
SHA5122352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
-
Filesize
8KB
MD530b864d29b3d0f61921e2c4dc97109df
SHA1ade48c1054b144403339f7c4d85f83320b2c38ce
SHA2567cf6fcbf9fe84865466b0e38d539969eafe9c98fda3388442540c05936fee29a
SHA5124ef7ded29d4562f5cf6a32e885258270d88ca859da3258ccb59ab17c909838fccf05a2caf05cd880c5c0628938b1e404aba4dd77d6cf59bbe001ad373c2996ec
-
Filesize
512B
MD5780eb2b5700a5727edded83a2cc55fb2
SHA12022da08e1df736c9987a310bfdd240fe197b0c5
SHA256241d9b08cd90835b6720aa7c720de81466f46f96a75f9cc49aac3f97d0aff724
SHA51261cfad8ca4cdb2f76fa5b893243a7314c85619ec74e53af89ee01c37f222af3f98279451a9513eed0686172d677ebae6c3e305800e1953ce80b269e435f66bf6
-
Filesize
8KB
MD51314c51a4bde2e1a9455b05edaf4cc1a
SHA159c5e2dd0e11d033077bebcaa3c14bd52c1f88d2
SHA25657c8cb1732a131eb771ab52a494ba5f15cccdc363036883d453a4888c3c36458
SHA5128a99beebd8c321e49698c2e88491f976e76faefbe9a823f1140315ddf290ad0b750c302856fd38d43b76c0beee52f2882e3d2f128e6d4df220282019a2c45123
-
Filesize
28KB
MD5f91bede4f61c7dc529d6e84245ee053a
SHA1a64ab9f8164a25316693dc92cc6b6af787946555
SHA2562559f1715306f0b2420ecc40e23ce911d1ff58206d04e333d2306c23f4d32eee
SHA51268c91e294713b2e1f4d38a1d6391428a3cf6756dcccb569b132d7cfe546900b8681a73c2a14d274cf9c331871564f44292cadb543f1bd13fd230c296b7268398
-
Filesize
512B
MD5d19f471de947a1b20b7c4e3a699e0f5a
SHA1969b1d0a591fb5e7566e0633399820b6c3affcab
SHA2563b38e41d15aa6b04152c9bfb0ae93c1a47b5401125b17ce9572c9a057e61502b
SHA512dee489a51cd3f630328cf20bbac4cbf474e0563cb46e1f12560633d35237997b6081ffa8b9d84c7ea8c30f56d8cfdbcf3916b7001c94c4f01df7b3d089cea838
-
Filesize
8KB
MD580e4da5c12a33446394db012dfbc2395
SHA1908a42a6c0091b2c50d0f6e206da459acebad0ad
SHA25660b02613b60b7665b1f31ed3f1baac0d89cbd9bb03c4ec54a34c4633072d5baa
SHA512a7f107c065b05e17d0b9628bfe2d6534cd2ba2b24ec428d7855d1115f1c38b4242e2ef09bff782b37ce1f73cc38d3f697300ce89d2f91a8af72f458ab8eb6fc5
-
Filesize
4KB
MD517c1776955ed8d28ca580efb1da18dc9
SHA1a7930140b6abd9388ed8289afc910784e81f62a2
SHA256832a419d5e30f8e50729a1674a30c118539627e5d0b19230100ddeeb4f7ab298
SHA5122d6f3b3826ad276ce603eeae38703d35510fb74261fd0efaecb449f6dfdeaac36103d5db73363557db3af25906a6ee4b16192cc7c5f3eeb5646ea50799c883e8
-
Filesize
8KB
MD5b1d9621d4191c854abe8bd229b14f1ef
SHA1155c126afd365163a067a596ee05452145388323
SHA256cc4e1a8726e01e45822ed05bb69ac0dfa929b3951fe1b1c51a9b13606d3a5c13
SHA512b7c99488d836783f15d5fcf4823843f0344276fd3ca8ee50c4407b8cdb7e84724184d1464c2d22aceee473f080eb9f9220c7029ff979251233051c9ab6758b2b
-
Filesize
8KB
MD55970998c12a94c8a19e04154b3931987
SHA1ea4fe3ea40051b727618eab6b4fc2dcb72969e7a
SHA256a4b8c68f2ea07778c3426f5ae0ef715348e3ff430a738ab59cd9dc078c5ad0d1
SHA51271534af780d97694ceab5e262917172a5b3471f2f6392a05eb4909392031220459f4671b0943157d9bcc328d741c3d117b77d5442853782ae6f491b1421c907e
-
Filesize
12KB
MD53391258d86f3007d74029b4930971ff1
SHA1a61b4c00b70ab370e23d61b91da64d5910b220e6
SHA256ef6d3dbb244847f7408c2d7fd1d67bb5d2115932f626058dc57a20227d3e2cf6
SHA512982922ab545617b6d0da2062a50837963db032c2d4229d9a0cf1e30ba02affdf99457b1110b117a42deba388023d66663d63381b77c15b939cf8a4599395855c
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD567465d3a1f36ddde7da0c554daef83e1
SHA1492c79e131d51f5d6501a0ef963c75f2be575216
SHA2563f07c72112e6886977004740105062ffe9090f783c7859410e85cfbfdf34f1b3
SHA512affa7e9f361583f0685b1d89fdd5fb39c610b669aca2d99d591c2f5936c19c09ff574739dcf590e8ccdb024eecac2c24b66f013cee7cb372a654c75e7f844cce
-
Filesize
16KB
MD56d8adce27ebefd6b4c1f7d0f9baee412
SHA1f81cfd208828256fba358268cc014a967b3e2dd8
SHA256e1ad2e76fc9685033137bb6e05bf73a965241248d1c040a88bb409708b237035
SHA512d8c60e887cd0bad48ffa396af23267d171d987996263e5b2a70fc6bdde75c1d9b8c7b950d32e4d2db5cd4cf80a37c3dd643ab367fc894e2f7e0390e1383d8d90
-
Filesize
16KB
MD5bcc5207285445b79391948dae40fa0fd
SHA1f81c3ed5cfaa2192f69f91f6f5c3866a8bd68484
SHA2565f2bd769bc72d5c8f28d75cb6912b41f9f3f79f15655b70fef227087e446b370
SHA512c8129a630fb413532d5ea882a1c97c50959e0d1dc33f040837a5b1c3c63aa9c71ea310958fa7afa4f584b4b8b7f986eeee3fd7d8a9837c45a2457e60e3f04906
-
Filesize
16KB
MD59bfc7063fbfdff4ed121e38d7d97ffc5
SHA116ed3af00172d00c0dc899ba96473df036d03c05
SHA256cf6892f945904df7abde7219d275de301e90da71d1951a6f67df81b0096a7844
SHA5124f3836a4b0186ba13ab4cdd1d3e2326b6bb981f113af07462321d9780d0ffb9bcd8806bb68e37ab338a6477510c384a1d499d8f0624113c990f5861c0a26e50d
-
Filesize
16KB
MD5eda96559b53540b070e486f526a4cacc
SHA1ace2f4645a2297d178ff849a13c95b9432445307
SHA256b535b1cc36838c013324c98e411f043cba25a911479a14bf498ccd52a51b3968
SHA512438403f921348431cd8fd0cecf380868e2dade89978c25a038b86447017a3c04f78f3f1ff9ff610cb1adb12919854ca66656918526333896ef39e6a2502133ae
-
Filesize
512B
MD50facac459ad8a4bd5f32d7b047134582
SHA1974c2a7264e3d7e9686dd4e55ce68b9f5ce6dfd9
SHA256fddf5624217ff05e33b852973da3215cb2556d1cbe0dc82a586bdf01670aca57
SHA51274318c9cb76b659aec779821a74227297446f9c1347131640d2a4f77454bf054760e4d12243e644d82f15b0256411dbff090f3a001936322d31cb193dea85182
-
Filesize
8KB
MD55fac5a6c4807e5a995c32a8131095db1
SHA151b8baf633f50d7cb34300a49869c24dcde22d75
SHA256b3db17278b6d6534047a9790e393ce1096b61121c809003846fc12d1e5e2ee08
SHA512a61154c83ece90a9e5364a9f1306f490fc55d0724afb4556d39e97f20280ab3e90253e8332d50c92c9b588ed50fdc1ec2818c8ec749a32fbd447f013b7635f88
-
Filesize
4KB
MD5b23c0eb2b96e028df6f8d3af103255db
SHA10fccca60f9805908721a5285b432ab5d92c4b720
SHA256f49f77a59df1424ef5edd86b6350c6c692324a93ff57da00b6fff7ee426c17e7
SHA512afcd593c938101a173b07fa0c2cf95b43e723d813012aaf6e66a1bcac9b718828b70d7c278340161dc95eeda02b00cabe6776419b53f5a795f9005811cd021c3
-
Filesize
8KB
MD50c98cda9f04fc1815e8259fa3ee77bec
SHA1e93c296202c1940fd34bb732b8b60d34ac021d0b
SHA256b641d8e0d1cfdccdda609a30d0c70e683af4f0dd75f42f56c03dac21264b371d
SHA5120341bebe0c14eaaf0071a766202e2eee9eb9607b7e9db24c1af75314fdeae3e0611b3e07fbaf7dd22dc469f6b7f585f328ee6f2d17eac7238e46b75afd30a31b
-
Filesize
8KB
MD5f761c2ef24d3766d62368033adb6499f
SHA1efbd3f8d77dc894e4f4686064a80aa8f4ac94005
SHA25642b178a4ac7d99b5644faad7c42616a46791eb7e22bf98fbe9025b3b7626ebad
SHA512b236cdcb56b7223e6d9e8aa90efb227fb02722cf65f82e644e298b558ab889de4c951362308a084053d1e3267bad255d1b4f96fcb589d7b890a823cef52e4f46
-
Filesize
8KB
MD5baf2e370c935ba4b8bb16f52068fb213
SHA18930330cb505f8e51c0de745a144723d50f8987f
SHA256ee05b3a0229e0d4c5cb96428627c1146add2a7299376f5f0988cb95dbdb3f627
SHA5123e73a0bbdf137eece80159331e518a1ca2a64df482c5793c4df0931170c5978fac004ea373ebec1526af151472501814d3a546d6b7f6f5955c35ac7a3d61fea1
-
Filesize
710B
MD547645bb32f97d22774ed5432b3e20d3d
SHA1df0778fbb1e9a8cc1f80ac4392008051e0c6c8f0
SHA256ebed51f558678dda05d18a149e2aa3523f06c25f755aa165ba277b8a1f1a672e
SHA5121d2e6020dfc2cbe7db12e141140e67186c59379e855ccb2566371166b176f1e2c9f5abdab8b09e4e7870ea64d66ff7c37116b98edbdc4f85254ddcc01a84559f
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6621CF46037A0001138729D081756B20.temp
Filesize438B
MD57d910b7712444724b01de97e3d7a3589
SHA104dad5e4d2f44d9f968f3d272774034e545e5e6a
SHA256670c784373167f3839950613509d0cd29a5828da7fb42cb5c5fab055c09cc491
SHA512c9814b5f9be156e5c3963867bf88256c0fe4101fb9f6d6cb102217381220f27288f1727986385343174804469f99db902c700bc05466271e65dda8a1940bec6e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6621CF46037A0001138729D081756B20.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/6621CF46037A0001138729D081756B20/report
Filesize733B
MD5303590093286284915fb413cab8dc4bb
SHA11937ca0a703c6dd3c24b424f31180216677a59c7
SHA25604e13fcdf9c325c916414edfcaf20629787eea61ce9306db1cb8f6e0df4a6f07
SHA5124308426bfac34f311b0a85ef6123095b683100ea84e743ce586098d7a3d7e7efc945e3d32a68013b246b7670a369b8b117f152beb8d59e61fb30427a4fd85799
-
Filesize
90B
MD579fc0ab0c808304b934307ab147eeec7
SHA153fed6c10efd6e61d66e171aed286c9aaf0325c3
SHA256fd385ebe8614de658157fcae19f096fc206a46e7d90195ce6a62aff09b161217
SHA5128c30e6ac41e7e613e49da6e11cde44349e8e2995a58cf694d6769528117797add248a438342898a6ec43e55b858c5e90ade9af9336aad03f7ccd3c4b3e1a9b56
-
Filesize
564B
MD506ab738b84b189fb46c410a6efc7c2bf
SHA19e81dd9ef498605e7c7e3679f97fbfe1a69ccccf
SHA256230997b2e2a9e3cb057fe858be4b16bcb6aa6a08b7ada2874b136e3710a467f5
SHA512230de010ddb566c0b3cc05c81a414c44604113c9e9f0462027e04bfb93d875c4252a7cdb26b4a9d3d37d459d7ecfee2c1b089232b8505a9d2cc6371eba4a416f
-
Filesize
36B
MD5da6fcb4e829c280220482c3e18e62086
SHA120ffe023be599d44e1ea41e46ca85dbad14e49ac
SHA2567d081c2ed3501be6e28233cbbb0edcdea60588b0edb6c910ca313c37057c7f47
SHA512f23e6535399ffa76c8f675357470711102a29e69780f40cf22e26eaa13e9bbd058f0c5d7e1d78b53b618489ad74aff1ebb5c849f0fde273d76e6a1ea18b923ad
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5f68c57ce4ab525600a333189e6b64eac
SHA1d73a5d911a8ef5f7b195331c1b8c55bfdfd3df3d
SHA2560b20445ddecb2803ae3f7f6dae9badb78ad7a09e33ede561c69275078c1eb461
SHA512d87235b8e4a9c978e2936a43d4ffbded54887a8a970abd463dbde9cc0279b305aadb3da607e13fd6493e0e9def6db61d008d5e9d72210590d7e900cbf7344090
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD59db58e107d396e49a1acdd2c825d6108
SHA11f11703f1d2476a3cf1de96cc6b632550ead7bca
SHA25648d0bbf8b5fc46357141623562da75c86e61b6d837b31b870644cf8c24ddbf1d
SHA5121b216b4237fa6f4814060c65640756d7fd5816057abe1eea0dc99b0dd22c8f1844a1297c57868b60a6cf02ceb7891932a21b090b9c16ae747c703706b76d8300
-
Filesize
108KB
MD5ca6cecd47c0aa59b037ed8dbb5ff02cc
SHA109f589233d79bd3e7de61b8025e9ee9c2e6cf85c
SHA256a092a47b1739570dce04e22b70d9a8d9038124a35c19e85f86e13884070fb892
SHA51258ac55083e99e775a035dd3443b4e939dc2a9077d28ebd1a9e92dac3e9215f44d4dda5464ee30b407430f2063d3c27fe277dcd46ade6be4536ae034b4a41e421