Analysis
-
max time kernel
48s -
max time network
133s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
19-04-2024 01:56
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks the presence of a debugger
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD57a259a00f9d4394e17c3ec78cee32b82
SHA195f3c04fed340ecafc4583b83f1057ce580f70b2
SHA25658ca34b258deb671f9913c9a2371434859df33729818f74ccf4273babed78a34
SHA5121593542fa52c4c2099a339c2fc9bb68bb23dca68848200d99371008b4433b2be9150485661776298d45e1743a96a8e53320502566bb37df99316bb2cd69bfcea
-
Filesize
1KB
MD50686960f18cabbb0c33915f069ff13da
SHA1021b25d5171aa547f96f45acc2374a335d8f08c9
SHA25686ccb269b5a93e2d48391475487a0e89922391ec89e57b51f4e419e1f06211a1
SHA51207e37202c69393a150cdb087a3e12572a25ba5bb3766ede49c3a2dd7070fa588d747c8bed74fceea3374ba5484f7f2461ffb39f5e2a27e9140dded836ac16fa2
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD5ede98f114e465a3fdc8c2a4426bc782b
SHA140a101ca4e14473c7dff4f581e09570cab5d84cd
SHA256ec494c7b696f79120d9946e6de3842f11cf2f8005f5650c2163405d38f669525
SHA5128f5f8a2738b5b9afc943c5353ea8f2dd59177de82faca25fb1756c1eabece194f336e488c219540873dd349d8d5100ae84d3d49164117b11e851a808cb13c78e
-
Filesize
8KB
MD5cce8afb17a3379e9408b8afb2b5e744b
SHA1f802db8a8642bf41e9faccf542f5aef877fb2898
SHA256305380663f22de87d71ee3a3da42cd8e8c0e86591e1db9f22176c129554d2dfd
SHA51267b72fd28dfdcac91a576a6671347f4454de44801769dd30829cfc1424caed86abf7e2cf40018666517d994c3cb1d9f6d5fbd12e3759a94793226bd63613e66a
-
Filesize
8KB
MD594e754b091d3e5ad81f697f4522fa0c3
SHA1b63adf3c9c17cdf756549f86b1c6534da1573977
SHA25600bb110f8c1691fd167556762aa49fe4a67c75045b5ccc08b201bc2e57a52128
SHA51268af46fdb285e9869130dbe9da147bb5553e55e2ee69b350f5e35f7f7f6a792e2c2c426deafacdfbbe5abb97c649ea2a9875a1fe1238156665d53f8762d901c8
-
Filesize
8KB
MD521db9040f4ed8e6b8d66c475ea3e5984
SHA108c00068324e721aa9cbc8436c844d7e4f5fb38a
SHA256feefb9c774414b5f0fd2f16bcb0d3e298f18bb3c7c8cdaca3abf84d06eeffa02
SHA512d093e79b0d39f5daf692cdd716a628a36d396c0a11cacc033eca06bef1ad3d496248ed9b5b0631456026cb50692d44b5e3b1f5ac63aaf79707c84ad93e298baf
-
Filesize
8KB
MD501cd0d91734493a939d7cc1418226f02
SHA1e9167c5cd51898c31bf3bc08feb3f056d4adecb2
SHA256f155c62f07381a2eb35348143b60ae2373d20d61930fe2d44f5b13c75f328c7d
SHA512651931f609d37fc0c4cd9d0215600c309ac24bedeb7a2779fe045cf79e1ee0667e1299a5178a45b69669960313c3657d769efd01de64ba797d206b82303ae02e
-
Filesize
8KB
MD5decc98cff47b6bde634d1514722d49b7
SHA1a8296e412bac4f61b61e941eef890b0b8fab98e0
SHA256d3fdc050bb7bf30ed144927ad19ef918a57ad33903af941159ad9a1b0f62ac6b
SHA5129152d895681b3105dcc12b126cd1138cd993b453659ddde9b963ee9f53c264d892d319e96b83f1f45bb8d5f4b6736488095d6d5df7020d226dceda29371ed72d
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
512B
MD528744485df31f2664da52664af93c53a
SHA1e1c499f80635db8a67e02418488234af938f73b2
SHA256b9ad0cd5fa8fa9de0791215be7899c76c457a95a1be8a1d9c7b0690a65e325b0
SHA51279ca7b3b31b5824ef5a18647642093c6aab41a5ce7973d82abda5ad17e0384f1468d987ad4c5cd54abd12070d25f4b1ef10f3bd18c4d9993619bfa067045113a
-
Filesize
8KB
MD51eb2624f3a8dc032451240aab5444b74
SHA185742695192ab4c7bc6ae1e8eaa6888c99535ab7
SHA2564a9655971c3bf566ce9ee65bcb2e759d921f17b6d3993f2870a8fba17ff94837
SHA51264d6135e0b1a565143536463816c90d6eaed185b11f2b1585c2f9ac5274e0b462e58428cd647026871624fd952f7b2d296bdd0ef0807a8b8c12f31e618037e81
-
Filesize
8KB
MD5aade41712d92b844236f744f896458de
SHA1566a5e36398dd7c0d4f3f5940ebc3c83a3153ada
SHA256f8e2cbb0a02219b2b3d45d0d539398254bb2b19317c31f1019f4cc497e2cc8c3
SHA5128cab3b6a0254bd7737f8bb74d2a50d2a6999813917064dbdbeefb58a5badcc8844c0c0651c319dd5685896e51dead8f25fbfc889fd34c6fe1cd8960f4e5bc7ad
-
Filesize
28KB
MD5121dbe4e8cb462d00acc8e7c99cf2fbf
SHA15f77b6ae1b411881fa714f4f9da92639b0aa4d10
SHA256983a35ed290dac6b1ae166b1082704301eb18e60e258e30da3d2c42146d59359
SHA51269f15f21dbe4b63e02cea71ed5636838de91a55bb4495bb8b6e2ca5951a30eaec97abb2498bfcccfc69d97712a3ca03dc8aeb9c579570e16f6a24830732988f1
-
Filesize
512B
MD5bdbd7843e8f4211ccb864f64cb7ad51d
SHA1057b968c2cf9fb81825f5efea74376502fcb8813
SHA25611a2f60e9d8562017d0dbb5d51d5840afcc5570ce3f9f9d37b129fd92ed5664c
SHA5127c22e839c58f5afdf598303816d6a1e7f60e568edaf6f71032a0696ceb57cbf751eaf553fbc12528e1593843dc5a33b74a500c00779e86aeca3c276d4681c2a6
-
Filesize
8KB
MD5932d70f76226b3b8d71a88b628ad4140
SHA1eda409e7359d47d103a2c60875d54de70049c1ec
SHA256bd979b59adf98e927364afa25684eb5b56ebfefde93239dd7585217e617f8f8e
SHA512de7a03cc87a55621d13f4373f919ee89d0f72f6f2931ff376940c9966aede9b38c9972527f00ddcbc6629819c2a55358aba2049e4a45025eb7ba6a268e64c816
-
Filesize
4KB
MD56619fe40d1b742967e1a8723e3150812
SHA1bd7e7f19681c4dc3402f68f5fab8db6a10e842e1
SHA256c96ccb843ed99f9e51665c09f9194873e757da11a53d57b0c33dd9d19a179457
SHA512197557374855aed3fec42b84fa7eb45aa925e7148d3e9c8f87720657b6be681a4fdd78a368d2333b8dcde98459e2e4f7a1671e062544a42591a509a6de34e9d2
-
Filesize
8KB
MD50cff8a726d0aacfc401b8f5c45db151f
SHA1ae87fe7fd5d4119586378574266d8eb0d7c4bb17
SHA256e46bf751975c125b1886a149d985e3aa47743f609e64273a194cd2a50a232909
SHA5124428dbd9c16282dd5f7102273336623bab12ce204bc37a1b0db996b4e06cd2e60d821f888a47f5fbaac61fe494183f8b1ceab0e62b6f82610bfac773c7aa544e
-
Filesize
8KB
MD5fbd1ed8cddce5c39c1c84dd436fcb868
SHA12d3b0558562fb33838c4a0b4bb3f4b54d4fcb1a3
SHA25671e7ab7d3a98fa3fe0a40c85ce81a2564aac2d1392f23052637ade79d8af6114
SHA5121c0255326aaf25964b88200af0dd11c447906e376ca92a7dfb7c8d30a7dee99abe3ac0d1fe14cb27b3b6a8fabb1d99bf1afc7113741779b63b3b7a49eccc3fed
-
Filesize
12KB
MD5b87d46ed55cbdef12fb910986d8f6d03
SHA169dfab7722648bc5d4201cc71f9ea4da8cc0499f
SHA2569a938dfba7886ed684e3ad209fd9a471382adaceadbb9dc7cf062f749e6e437c
SHA512ad9218398948990e141116b32af1f3543918c62c971499b7fa086796453585d169dba608283aef43a469d17baeec8215611a84d00ea452601e6a3021ea948c7d
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD52281b3cce22c7da1bea0f5c70ca8f666
SHA14c2489851e39685bbef15551fdc8d761994643d7
SHA25644724d1e06ae42a7215e92bfe04c3a766a48d308f19eb1ce162988a7b9900a7c
SHA512ab26558d2aeb37c8861d4e9ccbd2cfe783ed58ebac5a4e8a24fa1ddaa0e823b55c758e03823ee259ec374c0bc92d74d3f7bdb42ecd6a650cecaa1bd9852a3205
-
Filesize
16KB
MD5fd3e727937de99baeb5cf3b5edca2eca
SHA1222d74bd755f47069ea4ebaef27cb6a118dd4524
SHA25678ea256e0d73a6397ef544adfbfdaff08081ba41c6e7681e4bcc78932642a8a4
SHA512b79b1bc0d7a959d918d74abd36a27278115e0fdb8bf156e8882265f8aa1799054d9bd9700ee6fe99931f61294174c21a483496e4cf9b2fc522d8fc05b809974b
-
Filesize
16KB
MD55c2aa578de97814f63555fd8e53a1f89
SHA10d0d12fadfc68e1ceff7e5d423a5bf807f1eb323
SHA256627db484fc0c162b0109013a5949453cd67fa9543f66225ca77cfaee8f4124ff
SHA512f486080849c2fa39e5d5ff0baf1f36c84150015c118ccc1e2f76eaacb90d996e0f60f4bd4829af8600ac95417335a540aa2736ce4cbdc4302a11796137acba24
-
Filesize
16KB
MD50dfdf920976a8678c030ba7eeb273d41
SHA1d39c2e14a92cbaa192cb5899bcf3e24da3868d86
SHA256821363b110044ecda04736ca1e5e49da607312fec99c5892dea8a12c74415736
SHA512d29d0a2019eaae51d5d079171ba1d37d8e191db2edc67596990d98a8b35381f7bc5c32b26658cdcf12801e3636d83adf2d2bf6d300231096d1acf0caafbf9d7f
-
Filesize
16KB
MD50f181047bd390948771371bfd3c422c8
SHA1cf70c26648358c6fa73c5f2d6de5304226787064
SHA256ca7d667524102949585e985da9ccdf546342345b172f539a9575d68d1678cbc6
SHA512b88e54775d8b1ac4a03fc4d7d15b44f7be83515598b5e64109d9184262ee418e885294bdb426fb210951e1e2be8966afe05a77cb907f7a488bacca821088a205
-
Filesize
512B
MD5335f6c3d755a1c34ee676f3291e57504
SHA15f528f819fc5b808a50ed8916a2eef45f55fc5f2
SHA25678f95bf88dc186e42d24af1b071def34b17aa1788fd1ceb29c68c6d87b120b1f
SHA5127cafed220c99ddd241d8bdbc36a861b5a14f642e6c766141235f6363477430d87772232258f47f1df6dff43a64e04d2db7bc0a7ba1e44478708f65ab44d73476
-
Filesize
8KB
MD5bd73cfed98ec2324880068b0491a076d
SHA19d71e9f8dd4bed073f8891ac3f9f78b4e9cf017c
SHA256f7308b50bae0ab06f39910d6c30294125416262d1fe1109145bb8206ebcfec06
SHA5124fde6f52061b0e51b394e0af68ed60c1c642994d42248c4f0ba06d8ca7d87c3d9e2b28c9bef7ad141c645e3bc0749bb92cb0fca943d1548c3d324901e3ac962e
-
Filesize
4KB
MD589946c486bb6187fe98e0a82a85803e3
SHA157b5fdcaf21cdcfff1d7b36368e9d2dc7fcd9e54
SHA256f2d6b1ca3b5d86de48cef85de0b830e9e68b4901fca4bd92e818fdbfba630490
SHA5122d9638f3a0be5d5b7b2b2f97b3836283cbd0a26a01236bbbd11f355e6af940f74c08c37e0713e7090f0969c570af3bb5d72f6608173b4037a9b6cf4623ae279b
-
Filesize
8KB
MD59827acd45e789cb2d6c34d996b7c59b5
SHA1b9e923bbedcdbefcb4de802478f4bc4603d8e25c
SHA2562a873e735c3bd3e5b2fd08b7452d8ff1931f4dadafbcf9de48ca4d453a994177
SHA512ab218ef604e30bbd47b52e0eb3da483d04c1971829ce0b9abac36a9b15d2dcb956a56e58eeab661f5ab15e9ca084834fc8d4de69892445445842e59652ea7018
-
Filesize
8KB
MD5f13b3adc1399e27614ef70892b203a88
SHA14f977f9c677d1b194f413b7c911241621ebe5d1a
SHA256994f68aa14236c2b892e1cae1d2476aadbe406d7e0fa17cb53703cea4bcbc64c
SHA512e201bf03428e488982ce4dba0f9fc6e9fa7449e56aebedccc4ad6bb3d25298cf03ad4169a15b043d15d4af2e67577dbf314af9293eb9d9c52115a50b9b836c2a
-
Filesize
8KB
MD5dce9544d1fe49669909776ecc3772a46
SHA12884a05e416f389a6e4be2dfeffcd4aa90f22e7c
SHA256afe5c43ab9e06d8e8b8eb2ffdee919b382ae5ea4a8d950e8d9384491d7f894f7
SHA51276da7a6b0e319dea009aba8061ede721248ac6bcab049216329a0ebe640b70de9a7a741f01deab6854eb0e6b112f3fb3dd718c2c85c20292dfde93ec84b1eaf5
-
Filesize
710B
MD55ca895ce15c159f0bab07ea1838b848b
SHA1f49e132f11e54294c06567c10ea6cc205bc1beec
SHA256beaba2559cb55b715ab44fb6e53536feb5c2970ba3b3680431e470a247de29c2
SHA512e08dfa5a7d38ddc2c164dd19d57733e757108fe77090595db39007d42e7309e178b5a281b44a9038ba314ca1ffed4a9b22b63a4aa65ea9738a70732cb5c2ad46
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6621CF49008F00011114D34E67AD4DA8.temp
Filesize437B
MD5938f00e5bd6824de5e7069263866a277
SHA1ed737f9fe36fb2e00d3aa3648866cb62b19f7d0f
SHA256ea5833eff14135bb5de60047ede9984b5f440d7168e648dc96e9af0740b9d303
SHA51248fc2b086ad7aa908eb32fc651f3b97691332a6faa4bf51b6d8c845b3dfa6ad8eaed508cb7111200a8f85ac6b694a8a4f0dfbe86893b81e5fb8a5fd017e822c9
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6621CF49008F00011114D34E67AD4DA8.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/6621CF49008F00011114D34E67AD4DA8/report
Filesize733B
MD5c01f3f580fca57564d963b51c0bb0b24
SHA195d9cdcfe13c36a666a8a27609ef555a790d6fcf
SHA256c923f42f35798fd5699e8b63aea52efa90a1d592e6279157d2da676575b72873
SHA512950294511b969aad4fd819d026b3eee38fdc570810c51157002311014c1d37b486a597e25812b9cd02c4e349c85f0f73067512486dd25a8e52e96f44ef6f8c8f
-
Filesize
564B
MD5197433103d17712a68c79f8850f9c609
SHA167243923402dc52b552fef69661553373b52ee27
SHA25635d4529c6c5d01a15cd59a88932c7c277130505a0370ddc0edf0879c84934596
SHA512db889ad95d54186a143826b0775678a255cc4128787e246ff3371fc2988fb7290a5badbb0cde468b2baf2d81f19e8aa8a3e9c2dcecca259cce90fb3deab4f2a0
-
Filesize
90B
MD55348d3fea7e55f898a3415e20a9ebeb9
SHA12219d8793724982cd41e61b039aee6316cfea550
SHA2566d62b4da550e4c12daf5f0b942422664b7af5cb8551a238e703d538dfe39429c
SHA5126da84d72bccf5bb84d10fd4fb433c03c28cb186ad70571b889fdec5f9c9451ee5cbee929fa662a7e50bcf5216bfbf26bd47f4111e712dcae2754301853e58584
-
Filesize
36B
MD5bd8d1343ae788e73d0941f795d95b45b
SHA1b6b1e9e31a38a378225df343ccdfe1a7a5d60273
SHA256f6f8ff5d40ba91e6a60314f30be443343c84efb5c7aa18b0e617ad0fd4355e98
SHA51235271d109a16a05ff1b49f6e89e95207897d00a3a23c1dea5736ba0108846c867d7431d443c7aa7b7af51cc5aa1c221fb8d28ea58fc609fd0fd1d579ef70e9ee
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD54085f1901a49c57763a98865141e0eb4
SHA1c9a246a3839c83c85b2626e1a684aba512c26a2a
SHA25621d9117620722433e45ffd0c4747807f9cde6fe4f606f00d7f5f77a5acdbcedd
SHA51291ca25fac34d99c84a1d7a87dd7dddc1c0503b157814edb2d2c04aae3b462108fdc44cc974bac33fdf5eae768ae08ae283b9b74b4034707bcfdb05539cbab315
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD50c5c413c2e04e019847c83dc7b2ab610
SHA15cd77c6fcd6c5598d541a2f2d2c52cc083d5fd71
SHA256565394d7b28e67c966eef6d2947680eb5d662e2ef508f582858ddee676cd6703
SHA512b96efad75a7661813c4f030965461b190c3d561f4be8194735b3f98e11c3a7d90a40d084c7c2545ee9ec4ea123f5f738caa0a0dd8813084581a3fa0a46c96059
-
Filesize
108KB
MD5f1e0c59d6dada365d5adf2cc356e4b15
SHA1bce0e3f01f52130c8a7ddc7a6c26bd625ae54118
SHA2565d3a66d6563842379d19a2565e56146b4ec9d8be7d1016e0a5feba66ddbf161d
SHA512b01caf5d55bcf0e0eaba98a7e5d206f08cd32484ba4d45248ac3112757252d7b5f1469bbdf2015b6a2bff7a9029b95cfe79c1a7d1735d6b70102138d48fb8087