Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
47s -
max time network
138s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
20/04/2024, 02:08
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5e6e368282601a9d79ea5f1341ae477a9
SHA1ce518d8274e22c842c4cd0deaac678d7162633f0
SHA256fe9f8bf37e2dd679e38238e7a672def1a716ce425dab3d5a62b54640f5799a02
SHA512082e932cfadfb36b3f86a1d50ad3a5b5d0d0ab645969bdf82d323dc1f5c4d5ccc06564fa15ea7fa5bd3ddac0c8d43bb3de312badca6f7f43980b20792bb7a6db
-
Filesize
1KB
MD50ea192f92b844c032a1e86156ba97c85
SHA1c11c6c2f22789cbd9599d7341c3be03bf75b96bc
SHA256182ff90e201611274f68fe7dd2d72e272b53db60f9e44fb4b1ae55821c25e67c
SHA51247d3bf46acd8e48e240057637400bc60f7139a0a5b2043e116f7532d0af36884a8a2929dde2985332dbacbaeb222f457c65724046f7f3aac2ffba5dac87326ef
-
Filesize
76KB
MD5244592a5662464f9e6e8aa5d52402428
SHA1885e44dd3ccf643475ddb16d7d2eec0c809fd1d5
SHA25654b29062aac9ef91d03294047b7780498a2cdf0ddd75028dcebd9b6b7a88214c
SHA512ce35edd0ec05450bb08d6b47583393eea034333b99e13ad2bb6848724f09ed71334a858e5cd5ccb6909d516ae70545c3e7c98ff15673005e25c9ad60b2a11b17
-
Filesize
512B
MD5b65dbff08c970a5f5416df91d418cde0
SHA15091caf943fb479941f7ac0082c4dcb95dfd5ecb
SHA2562ce8442578bdab36674a7cadb95b07507c50975a1e5d7bea8c7d996734fa3484
SHA512a30b1283a6cd2b587097e236915b507f1fa71a7aa348ea93a188f8a417ed5e44df45b21f1a86817449b1af3c6efb20bb8791920fbcc8ffad03e9e20984f22453
-
Filesize
8KB
MD521f3fc63f7fcd203e68a591fa881a481
SHA1238b714dde652968b6173a744fb888541a0dfb14
SHA256bc9612634df48445ad361ccb9aa4e2ba7b389dbc67408ddd9fe169ab6683e81f
SHA512ef1a5c58ec3902def35a7b3bd09ca2b6f9a675e2fe672f8647f4a71ac3b14a1e80d7bbae035f758199fdf56dcdbde246e1deed33c2012d8c829dd41ab9ee88c4
-
Filesize
8KB
MD5a3b9152adb456eae8dec69a689e5e90d
SHA186f35eae4186870a1291e3ad9fd5a0427a493df4
SHA256625f24dbcaa268def56db8fbba443417efbef401cb54da494357835eede862a0
SHA512b65ff3842ba4587f51107e08fbadbbace59fe466396ae57a5d5d6607eaa9ed618f6f0223fbb5a9c7dc4aaa9ec6cf144513b9de8c2ef0105d54226d9a1cf32b05
-
Filesize
8KB
MD5800e6a42b2ed2c45f13abd070a58f038
SHA133e0168188b7fe0a4a727855523637667d29dd8b
SHA256458866ac474ae07625cee8a32ecd0db130a2218fa8f8c45159367d1c1bc32c64
SHA5122c4ab50be192751a8464d04f78c616f5b6207a232c66986bd8619ee4965ec94b138379e3117115caf636144f84d63de483501ae97f6e029cdaaa16e612878aa2
-
Filesize
8KB
MD558b610b796b74ccb853c9ea1234a406e
SHA12f30bcea0dad8dbad0c11fe1e318d01bbcb833d4
SHA25617f5f349b1be348158ac7c6b71355d89c0e17ecd66a916339bb541d862d60e80
SHA5125b7304e7b5db9446734d863bbcfa417016ba9e758a1167983c2a7f54ae900d742206bb28eb28a9357bf72995f2d01d23a528fb35cf1beb819e102ae589f2e135
-
Filesize
8KB
MD50e06ea7de3bf6b4013b8283c4150dc66
SHA1b3ec0d976ee741f6982f57020b1836dad0352b62
SHA25643cf4693d36e6644d6bd35873cc305628dba54a4388aef6d33f849816227dd30
SHA512cad1dd5125a4caaf9e325e8bdc1be8593eabdc3a2b078cc6fecb97615b1c4fea332ea77ba57cb83e945433d7252d49cfac272b01ef23164e748103a74f5ad801
-
Filesize
40KB
MD515d5b92dcbda7ef7f9ca327a903e46e4
SHA1ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA256e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
SHA5122352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
-
Filesize
512B
MD5aa287d082e5226cc9e0b0c580430691e
SHA152f09ba690de7e392186b9c5efd425abb5d4f5a2
SHA25606b06c35c6e1f5ec8e926adcb1a964afe1c3446e5022f4797b86f65816cb81f5
SHA512d94a9f6d2458dc0479799673f49831f940acb1d6ee6d94b5a3a1476093f16ab10c95474db35daaac46f7343af89f5dd92bb3968dcef2e078fa48fcb0cd23c770
-
Filesize
8KB
MD5007a9e521acc2491874bc97c867932cb
SHA152ef09ca6c1a73bdbfb2078af6c94cda0bf4a81f
SHA256468ca6f1c0d6b10cf12ecd12d997d66921be3e7225a177ce9bb63cd6f77234a2
SHA512ac277cc044c9aa1ac5f616fd96ef5a2ef624666595f0dc9cba7de825349c9292ce651137ed2c9254e1ed7f4e4eaedb5d04f0092d56f05acbeac9eea77a8332e6
-
Filesize
8KB
MD595e9d0d067fdb2651041b1da5f4e4f1c
SHA16396cca20e686fd6e14cb5387ccfe75c0298a4d7
SHA2567f043cabb2b89e8a49939fe860033727624e790d88e6f0861278bbba71779d23
SHA5120741ba9e8692adc03406b889d5fcd2bab273301dd139881cb6b40651a1f30e5cacf68b5d1d64949653016eab4c09a77d5567b7004b6795945e7f1f5ca00fd55f
-
Filesize
28KB
MD5ab73be641589550f37056e02d704c938
SHA12d4931b68453c7abeddf6c44ad8d8e6b41fb8ad0
SHA256db2a2bd7dafa79fbb36d71ebfa85b5342011d727905b9cfc7e2cc60329ff7512
SHA512d25bdaa8efbd4b011b03c26975efa276657409c8487b2227640547c1315e7f7f4d4466aaaf11800746bd1f41c4ad22ef1cbd7ecd5aae4a834715f376aceb0e3e
-
Filesize
512B
MD57c3ca5662198ed8eb9e6ab38cf32b9d5
SHA15768af0a56e84b9e13996bea4692ddacc06799e2
SHA256b9cfce446034001d0f22acca1b7ea96c9efb0b88199c8c7d017e128cf06aaded
SHA51276ec760325e9492008a0ca81e32eb0c03bb6842124c2908554ad0bce057febb1723909faaa85ac218ddb338f99cdbbb8ae272f06dfac05c8dd1fd5e35a77b105
-
Filesize
8KB
MD586d47ef5962b7ed0f856358e78ff1a2c
SHA197de451b6e514c7274159dbf8db41af1ed034fb7
SHA256cf78516210e4739967977c3a7b27b83aac6cbde485998c60868314d0bf5687e3
SHA5126d25232b2cefb0f9bc07a4ce56d5a65eea5ca8a53bcfe2137b6075ec72fa032a28e2b56d64eb4cbcb6a86ea016b5ae9e7889fbe5497c5658a644afe38d2d127d
-
Filesize
4KB
MD580456835d586b3062b00b9c419c5fbaf
SHA17bd3a4409cc1b5463469f57a2ed761acafa1f264
SHA256b808d24d17b667a9c7a8ca7b6d8397df2b347c0f933b338055ced53e59569034
SHA512f7c355199ba2a54d64c9d1acba8a125ab4594d4ce955fe51203498f21d53c008a06a0ca8cda58836b65cf712412ae49b676137aab52d385f602bcf9a4aacd64b
-
Filesize
8KB
MD55ddc9d853595b0569d84280f0dc866e8
SHA1ca82d417a8822841e6736c0f413d18b973a80d5f
SHA2561e1d2f7d5bc647e89f043a1e060fb77d39996649c0d9a688e4f291cccb9dd176
SHA5128be4da669c3a81ed2b6c1db2f48144fa2a693923f0b6ae920eaf4754aec4779cc06d802991814897119eccdaa5871ee28c4e2ce8af8f9b8b12cdef52507161ff
-
Filesize
8KB
MD5be8dc1d53e7e47d09f07639d06937cdd
SHA1a2543680c55a2662da30ded822979870395c5e59
SHA256607a0ec9de89d25ee70537a7d76b306e3363704963b2b859fb01660c8c34c981
SHA5120fd3ccd6e01512b1b34998ba524e85e63fd18aa104f07423828a33e1e27ebb291adec53a34fb81b53801045c99c15d831da3f09527f22fd86c19cd369606a62c
-
Filesize
12KB
MD511793314b80aae5ae22c63c50d12ec33
SHA1f7201267446cb464d26a3705c8cdd65a2f124ef1
SHA256a1bc1c741eb1b3c3be7fa8a1ba788ca3bd2a7860edae9af62e47af3d9dbb8eb2
SHA5124a5cdd71b7842bc50d2f3b5c0016303baec25627210b1c3b16a1180fa951cc3d5c8e6717a3cbc7c887f54cf94d1e6ddcaacb1fbc9baa859b1b7ffecdbb86ab3f
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD57853e4f28ea2aff72fa1ed514476df8e
SHA1a05eb1c4e2c6798a2237af70a923eb70d8cf04b8
SHA256262edf057c9742fef166d27dbef81bfa6dba2e87ff57e8ebf1deddf3a30f29b1
SHA512314c78ed1643c94970899daeb1b15f44ea298e0049140e678d8d27e8654e31040c268d0dddd16318396dd2be5889089e8fb539e5a950430a03e3e2b66822efd6
-
Filesize
16KB
MD51ad36ad612c89a7ee8756cbf42316c9f
SHA19daebf44e12f1e3c668eef420f943fe815cd52b0
SHA25602ce5a1b6e539aedf7cec53f41777ae2380a9d2e893eea8a9ff76c205790473b
SHA512fb71009a2c8df2ee7e4fa5665daff13e201ab8dc1e8875e77a51c36d732fcc284b2a81c5034e51a4df0a1a2ae6ac5cf9a245f7b103f3f2b1b2343f9c63bfcb3d
-
Filesize
16KB
MD5a308a271a96dacfa4e6d0cda4a3558a1
SHA1cdb33fdc3dcfec3b2a69e292c9b6af86a00a05eb
SHA25665a91cf7524df4db50127482558801fdeffd8418883ea03835ac40887b810940
SHA51212f0e401bc01db47b1f93ed467a31a038b23fffacf526ae91c53831fef082f2ae2b41e01120bd8b1086e01266805603344173dbf4df943452bd60d18b13b89b9
-
Filesize
16KB
MD580a2c5cc266088533225a54994c31198
SHA19eb5f5df6dd902a2f6bc580951c4fd8dabb44ed5
SHA25600054abce32ccb73303c7b997e12074e0a4b5805c54e9095cdd4c34b58cf70af
SHA51258a1c94a5e0c921c5456a5d56d26e3c6793d9cca4596d857ae2f728ab8b4f076f7cb45d501db069a5440583dcbf1351781bc86879f962286c26d8c21dceaf5f0
-
Filesize
16KB
MD54f020ac6f68a0fec86e93e46dc4d754e
SHA19bd495e227b0f5f5bf5f7020cf8b28e016d44c57
SHA2560e15bbcfe36d388cd065c151592231130d40ce72b7c55a66fa15abd95a9f2d12
SHA512f4517dd8acab07578e2291b6752ff04c69e963d77441910492c904c1f95654e8528b6a84e5e268b30a7ab616d5d565d08f44a1fc547709c799815ad36f7e4611
-
Filesize
512B
MD57ff1e9757abae3227ebb4fadaf7ef754
SHA19453c85097ce27f885ba45625757246e10f70568
SHA25649be6d7a0e40a10d3e346a245ef7ad8cbe36baf547d676fdd8a44ffaa08c000c
SHA51238099da95d68ac2b21ed665230426f37b82dcd2d510db999a34f4d2050a332cdce81a1efa36807f6447beed660ac86c362b8895f31bcb98820b374f8b815cc2b
-
Filesize
8KB
MD5981063865053017e72e7f16be859a705
SHA1a1d727fa9a6fa8a1274b3bd9e6cd08dfaae4cc09
SHA256eee48362229513eebabe8af6abe6b5f749016f407cc4fa3f1b55df289af17991
SHA512784da897dd51f65db1a64d79db6b5c02d47b28804e5566135df7aab93019f451895607c77976e1db1d435e30a50cca2d7f04bb7cd460ff54c071ff3604181ae9
-
Filesize
4KB
MD5d230056152ac45ee65aec560eb77b817
SHA155cc3fad454371473c9c35a5b83335fdc5b5bbd6
SHA256dba5c476bd4162f7247660a6d570cdd3bdfd18862bc9c15e6840674dea8980f6
SHA512ddf12d04e6233ba55913f283bd1657e8cf09308d8942dba80912e48897177601273f6fa0a8df101dd2feab26e9c818eaf017c409da40f3131ebfe03f24de3482
-
Filesize
8KB
MD56b9152146546eb3ad69cb9df49163736
SHA1b6abd1cdcc09040af2a6a668324bf04045e9c034
SHA256042840266af08154b6f11a37f349cc213b5ee331df6251818c06076c9743c13f
SHA51247a962ec7beb6e28cad03a742dbe68325005a30f73918ae40ad5936923168af17f1c6e82a297275d6702938bb110b21ca07775df2c3c7d79d667eeb90b7b2849
-
Filesize
8KB
MD56b87f920ff13bc3e601e73bd350155a6
SHA16b254fb96cae861b17ae399d3965997e5c706ab5
SHA256cc8ad3fe971584d69392c20a4b2ee8e1c4de80e151e24852ca678bc34b4c9ae7
SHA512b6a97f738465832297698b9fa96f81abf9d645fd25431141210312050b18ab26bef327bfa4752c030321e627d95db772cad5b59bb683b8bc1c8634246206da60
-
Filesize
8KB
MD5a6ba675a98ad03e91744a32fe34824d9
SHA1b78968a3aeb2aebb7dd10b8a457cb27a663eeb7b
SHA256ed7df86950ffec5cd2104b1fb3441e0e9885c4f649205f097847b4729770f577
SHA51299c12918b08f9e4f037661852019331011d6b4cea9720421a877563c8248fc667736d945b9f015d46a677a74c48d1636087c1b204fdfe1f3028fb79053b98290
-
Filesize
710B
MD50d685ae4b4e02a2ce3b70ff505c710da
SHA18c9b022984772b132c631f93b144fbc171ebc611
SHA256c2899e5535946c0c9549f87d1ac281231723a8cf8bb7ff5c84620fb91ffc08e6
SHA5127b3f37333cb04c8d5201a88f3c57c780dbc8aeab0b198d96dfe9b28c27f4a99771c2ce9d32bcfa317487dfba609bef0b91d1f7732bd0e71e28995047109b3f5e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-662323A4028B000113E44891109E842E.temp
Filesize440B
MD52673191b1836cedf75dd5f06c70a864b
SHA1c40164a42c5dfca86530140ac88ba6ad1b16d266
SHA25677faae5d9ecf6f832e3d228c103f9b8f4cfd771aa2172897812523180dccbfc6
SHA512eeae4b5ede323142ba17f5525afe934a8a87fd083357809551cd909b1ba6e2af6403acb7faba5b52d84146907848f83fae6efd26c81691132729da5958e813b0
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-662323A4028B000113E44891109E842E.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/662323A4028B000113E44891109E842E/report
Filesize733B
MD57418268125c98e24eea38f338bb0957e
SHA15b238d740317806a32641266ec8556f8480044a9
SHA256573911efaacea6d532162940707928c1f0d72359a74625f120357c7bd4c28e53
SHA51278dd715ff8214164f0d09fada79a60105358a849f2801ab16412fc95360778f7d7ad5448b8846fc410432fd965acef893918db642aca064191d04bfd901fa2f9
-
Filesize
564B
MD506969ab9969e40f218c9a9b5df31ae77
SHA1d20f782ac1344136e60c237d21bb83eee977f44b
SHA256bb31d9813cdcb54643ad9e8948555b7af9598a6ec029dc385320bad8857c5110
SHA512bd7c5f9dbe584b337f8974c979aa77077f700b2c1afd1356b726417e702ee299f32aaea0801d3bc2b16624311fb89fa0373eac360bf15fe1ccb6c82b34a125ea
-
Filesize
90B
MD526447e7225f6fee4a70e131f5f73673f
SHA11818a01a6264a4bbfc2f9e4c194032ebe6b2970a
SHA2569621f521fb048b747ca1bb40263bafc5871f788f26f611c3c71852ab636af23f
SHA512ea215ab2f5c5d620b55d538e0796ddc4ed717b7b679e0a8b67c86d4b65733aa56bbb29496a178ea3efc2542b02b57063a52753d7c34009cad5c43c832760f390
-
Filesize
36B
MD5a1c76dd6445434017651276cac3b6612
SHA18bfbcce2959e2d532459c34d895541dc665423a9
SHA2568ef27a4e12b2129498ce060dc250c28db2599cb0fb52e5f1782d345dba79e071
SHA512bf0916893821e84674e5094412e57b14e6d0e44ca203685adff26a6622c24bfd4df900a6cc846c5227e55d072cc49082d641b0083e460bf657aeb012d4011a83
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5148ebc6dd15a6b4111c77f56d6d5239a
SHA1e420ea886a9fb075f3c83fc1edd52a3309c85aab
SHA256723ab5fcc4011eb36cb2a057208a74a953e854a037d6829e3a8174c86025def2
SHA512a48cb4675886ee22805a92f6316d3db271e840c2006e08027d4d872794aac4eac748d64396d7205d05313a6c34b234c190ece176863906491162b1d7cb4bc6e8
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD594273c731830ad794863a5ec7c1f7b56
SHA15f280ba59fceaca935bc03204bad6f0bcb9d20fc
SHA2562cb16ad060c7cb6bcd87dfa95314b0544a1cd82b8b83f6708520be96ae80cd8f
SHA51270a5783dd68b7f96f2a55fa43b5a94c55d01843f409e6f059b08580a996cb98706e3e349e9aa321b741c8d9d4ce0d22877f6acfdc06dbe343212c784c1d07538
-
Filesize
108KB
MD54eeb788b138810e2bd19a1d87ef74117
SHA1343a9e13abefb95d6c825b18af7035606a1a1384
SHA2562b31a4b7a4b725da77a07f9aa4566d0652135e09e1eb20b78f110045356d824c
SHA5127efe52d56d87ddd66a083b90e5073796205bdb3f77526bebc2bf0626b7b0f38f370a527986a821085da26dccffc5ff5d39f8e7ac3fc6f6e2bea8a3e572570cb1