Analysis
-
max time kernel
47s -
max time network
131s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
21-04-2024 01:59
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5b24c0950a40e91681d0d205d0bac1d95
SHA10f6ae4fc9450b9100062e19820b9272426e90c35
SHA256c6ea56f1ef691798b05cc8a5cc78f658b31357ba9617e439e9174f154f548fc5
SHA512d4b4617c678e0f579aeef0790a63991ff52c155132c3fb1b26161f8dc53707cb29d6cea5d5055e578a5e370d12bed4db38bee7d536e973be012c73c970b08a8f
-
Filesize
1KB
MD5a4c3a90cdcd06c494921cc762f879a62
SHA1e86083f03deed87b68d59ddbf5828fc9365b9279
SHA256f12817df9e6e1ab7961d9f421a8cb706d61c43dd115c4999fc1049ae1c6e99c9
SHA5124c1eaf8643590686474c3c1b473d2cb32e0c62cfbc1ef605fdaf33225a9a9626ce59d831988f0476527b2db20bfe979ffa0a2af7ebf9dd238a19fe97480cc8fd
-
Filesize
76KB
MD5244592a5662464f9e6e8aa5d52402428
SHA1885e44dd3ccf643475ddb16d7d2eec0c809fd1d5
SHA25654b29062aac9ef91d03294047b7780498a2cdf0ddd75028dcebd9b6b7a88214c
SHA512ce35edd0ec05450bb08d6b47583393eea034333b99e13ad2bb6848724f09ed71334a858e5cd5ccb6909d516ae70545c3e7c98ff15673005e25c9ad60b2a11b17
-
Filesize
512B
MD56d0a28378e4c12da60b01e5e7206b847
SHA158e52ef7781637b001297eb21adaea652c0b9be0
SHA2566bb7730abde67cf48c3098add14fed94a424fd64225c12a3cb288ee268bbcdb0
SHA512800bc3451fb01ae5bc02ed0729e558a70752a2885fc6b3a2adad335eaec754dae14c73af2f24d405dc976e3cf5f862dc057c698d03b2a280580d3cfd80456e22
-
Filesize
8KB
MD5562005c8bd95860664b04c3a0c3692ce
SHA13296f6b3db4c2ad59de4a6f375db3456c08d942f
SHA25674d07d514f0742ad1fa524867227d950a3186712f9cf9e92d371152b6b19bd80
SHA512b1a421998a4b2c6ef73f993410037503dd56e97c0960e3a58d1990ede8702c6f1ecad25be97403edcecf5ac7bb4af3230b7381185ffb84a4a199b67cbee39254
-
Filesize
8KB
MD57a3a275f3a7bc69b77b6f471a5ef7efc
SHA108ccbf52a781f3fa1c7c5d4a2a964ad074a305ee
SHA25635b172499b03cecd9fd3a5678bb000b06225443fd36cc66f215ecd661d2e52b1
SHA51247873d1e5e09afe9036b500328e6ec5b008352979cc12b0d761614cd29612426caad70f7d5eee72838502526b2e5e3dfa5efc38688dc10f69add0601f0329822
-
Filesize
8KB
MD52ae6f997578b299fd9a23f79598e46dc
SHA1568ef1e8671f780d2086befea605f9e796f4946f
SHA256512f790abc93ad5f2de4532fa911a01830e7bd88ba7f397cb52b72ebe09351cf
SHA5124b4bfd1faef0675836a7dc1c6da0f5c8f332d3f0983660f1401e9a674bac373002daaeea1bb332bb4bfa206e1280b263c6aea11c81719be821a8442960649018
-
Filesize
8KB
MD599b1edbbddecd75ee0d686b3241e234d
SHA1eddfb87b4240d07537ffdfff535b922eb9e28e24
SHA256da37b39e72063e11cf48c0331aa68a6c353b6cfe585ed61e608fbf264e57e00f
SHA512150148cc844717e5456a448d36a50d45b93ae57d2c4fd05e3d9904aba3a195e3d6c1f952c772234916554428051f712ed7c53ac56611b597dfef071f2bc57d23
-
Filesize
8KB
MD58dcac46556d310272081ddff8e629908
SHA19ada7c15710e1360861d9261aed3e8b6f3f4993a
SHA25670c59cc29d9bed8ffd49361f7336d7dbc81390dea8ac8fa48804125cda062a4a
SHA512ff255c716eb134cca0455c068c51789f56230de6bd7eec77144f44bdb8ade4af4a000b47df9efefa86811530101968217e301549e961d37d6fbdc40a66948aba
-
Filesize
40KB
MD515d5b92dcbda7ef7f9ca327a903e46e4
SHA1ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA256e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
SHA5122352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
-
Filesize
512B
MD594e1c4886cea7d7b033ae173c40f5227
SHA168e41102edef6b0738061773ac4a0a2e182f2de4
SHA256438f975c296f78dca444b543dd28accfe5c19eb199a4e58e52dd2538e4d7f82f
SHA512aa930623461f438e101ad9fdec25b1b415a9e3ae7119fe0f8945a0ab0cc9179b69de2f59a2ad7f71f241ea816ca07030caab598bd958bdff90cb48c6ce5f8215
-
Filesize
8KB
MD585ff4167f0f891bf8af7d0e1dd409205
SHA1cce10c98cc3574b97125c1a53145c7228a40650c
SHA256ac5f60b69a97ae733e1eafbe89605449da80ab10cd835856e9f16d965611e9a2
SHA5123e7fc1a1491c0a1ec48104aa83387da807543b29fda952543cbd5e7edabce03c98cc400e00a718cc1e71675fc7f79a8e2909d501dd86fdb20f437390195f049d
-
Filesize
8KB
MD5766d078997066523d04d88af30b2b728
SHA1e4580278917729b06e97c9396cd24d9594fec6ce
SHA256f067822b7549dbb133664d043dfb02a540ce30f91949a63a14b3386ad20c60af
SHA51282da412c894a4ad36011527d3fcecb714da428d6f518cf76e63999ac4a98dc0d370242bd87c400500caf3013ac20965afde579a84d9b5be99b0ce180ee17994c
-
Filesize
28KB
MD555a5eadfc978ae0a01ea685cb10c6dae
SHA1fba602586316ae18aa481de6999e20d7c925873f
SHA2567944c5447e5b2e59a979d396f0589953729b866682337b5277ba65e7b2c960cf
SHA512a4f638067e194cd847e4a525920a55e98670ed19a42953b6f0e1b4b538f477ed186493ee26d22f79b63f2ae3347089c6a76ee846efc1b4f49fca3e759c18f805
-
Filesize
512B
MD5496c2fff213cbe0bb7d86d02b7cb5c82
SHA107bd7d937e694452a7de0848a281f70489d2ab9c
SHA256c66705841e7ab8c671563f49587bb0978a947c0276736ab6229bd35fcfa46d09
SHA512b9a539217952cb3851ddd380742a4ec215d9592a2f6cd3e2c86cf1b26df864716fbd871dddb5af8f47bcb516976bf9b6fc7672a0f14ff43550c8fe4dfdc886d2
-
Filesize
8KB
MD587182428ff0823bbcfc4230328ab14b7
SHA10e0ff51f020070bf3efe9baae4778f87cf7f5296
SHA2567be081bb6780e0508d310ed4d2a246e39b310b12b8335f72955e15f9e1d9c6f3
SHA51212ee543f6c3dd95f4850f0150d1dccef91ab556d761a96c686841571f5d59a55e441e21788719475bf015e477f4b5d03f8fcd3cf477bc18df667c5ed7e0b5a9b
-
Filesize
4KB
MD58896ebe007e105156f3e4f23993a54c9
SHA15621e5998f1cc55319e333b01d4b8089a154b4ab
SHA2568aca922539b51bf9376a50c4b4b9695a13243f2d655c2e258eddad0d79e63ef0
SHA512e4b9279078047906f5050fc1e5335d3d1079fc93d91feddc525c89fc95b3ab5b279cd91b8204acb21f26051278a61ed4c8eafc0b05deaf4c32e93c9d80e79e5a
-
Filesize
8KB
MD557b4ce183aaf99c4d7d9a09a2a2755ba
SHA1cb338db45c39881e65afe70af0c19ba895572c63
SHA25692366c7379dd6001a4714c87207e55e2df170da6169d7eb90a2a0e4e63e875a5
SHA51269749f952f73d947fdce10163c61048fb6d5bf60cb0bd8f0a2bc3a88667b1bcc049b4ebfe98b03f2844dc543e0902b3f03f0c7784003b36daff604ea1bca3929
-
Filesize
8KB
MD5d4c00db08f29d3cfe79aa56073bf131e
SHA168b3feaf82f3141030f098eea878e82159d0e30b
SHA256e42e21ff354cbea5ebf35b46d42c3a43a30a4a815f33d669a0f57a95551a230a
SHA5126e67a229f314162db350bf7a7d25ac42980f063d3cc4c133e555c1876d09b5a34ee9b405191776638aa6caecf1b0d0a2f115881b68fa3d20e1597cce0a14f775
-
Filesize
12KB
MD51781b631205bea92caea06e01a8baadf
SHA1773f85011f48df74100117cc151fe99a1647b7ba
SHA256bc7665bb5078d0b0b1cfd0f9fec996fbc3940c47253bbfac0b1a34dce854485c
SHA512e1059def9c4b3e1b9feb4957180ee43f17789fe0652249ef829fd0ee18899ab13ef27178cbe672915b9ff111ee35b84ba19c0e8163cea12e51fd096be94389cf
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD568106a2dec25887b929fbf4bb04367b3
SHA106f1acb7b51ab9ed3767b9323e96f649bb5376fd
SHA25678059872cf8ff84bd8455551edefd79045ac293249bb751f934df73a080211a5
SHA5125a06a4b71230b351900c3992d22db667b0a224fef1057f5edc562ecb2a487f88a29afe1cde220b98c933182ffe8e1f3a1b1a3cdf079b4e9caee305bf6e0ec9be
-
Filesize
16KB
MD5e6378eb8eff4cd0713e6e6218046bd4f
SHA1cf58a5b122e23b6589ee4e5077b90adf69ce58d7
SHA256cd138841f53b8434b2d1935f41fb7eeb50f824e4d81d9a1065ad6b7a516ba31e
SHA51247d601e5cc8bbe4ba7b0c533bcc10f80d50e5ca13a4da8a99240e5988337e210c6c37563bd1013dceeeafe68cd20d5b5191da983a67436ea113510e5c4ac15bb
-
Filesize
16KB
MD5dad5956f2e35d8d7ff6068a9f78d466c
SHA18cc29023b7f629881a6afb4ce383a7c167406519
SHA25638382c604c5c877eed101d132ebc790e1d7a34b40effa20b20ea68cd85cf08c1
SHA512cb9c3619c9035a1a16ffd78b82c4fcfb188e34e0b8ca0a61aa7aa753df08ac27b65b9b549c6ff5c97f008f7c6faf6349de028f23b51d23b6f24cf462d90d4968
-
Filesize
16KB
MD5151cf06a56f07490fbbc3b6ec0bcd5ac
SHA1227dee5d9ee8937933b05f13dec77964937c1203
SHA2561c6972da3f945abf7dc31630a8520fc0e97e4523496574f7c3cb389ebc174fa1
SHA512b4bcc72d452981c6f4d95cb2a2c00e02a72cc1e6e771f6dcc3588cd9389fb22c47591b225e145ed424c3f16585f6aa930b547959465ac52e7da5f3f5e02fedd7
-
Filesize
16KB
MD5eda96559b53540b070e486f526a4cacc
SHA1ace2f4645a2297d178ff849a13c95b9432445307
SHA256b535b1cc36838c013324c98e411f043cba25a911479a14bf498ccd52a51b3968
SHA512438403f921348431cd8fd0cecf380868e2dade89978c25a038b86447017a3c04f78f3f1ff9ff610cb1adb12919854ca66656918526333896ef39e6a2502133ae
-
Filesize
512B
MD5aae57aabefcc2b6811adc332eb3fd588
SHA18f075519552fb9aae06fa31529404461086d660b
SHA2564d1854a37bfa8b6096433705f4189235314f5c49c3e8ab6dd90706f9454090dc
SHA512ae5548278d8fa44c5881c78678e88f24d3e8d3704339b5e99af7e3a02e4199651eacdf46faf87b1bf9998fd08d59368e374595423fadb9fb2f45585d37a17c8e
-
Filesize
8KB
MD5423ec4cb70ef130bb8962c962e45a479
SHA136fcbd1bcbc0bb533739b1ed9d14cce296d28d9e
SHA256c7f7127c33d09e9a031baadbb21c90357ae99e381fbf2fdcdee8a407c910d2e9
SHA5122e2fa3e841ce573b0fd70d8ea01b3b69d2e593a55bab9946fb22aa49f4e32086f9aef249cffd8d8a3de491957bf3a61434c506450c686cf1b1219427ed2e9c14
-
Filesize
4KB
MD5181e84f9ce8ec8beefba4c6dd121cd0b
SHA1c475723c1f4527b0c2fb98583c538a8747cd179d
SHA25638bd5fada99594d8f5e1441d4ae8fa22be99180890afaf197385596dc0ee3cb2
SHA512acbc3329f702740e059e154a8a35bbd1fb6099d2731f0c6cf02fe8453006b7794aa188df2fbf6a09435bcef3010fca03fa085e0b900a59bc85a28fd002271c73
-
Filesize
8KB
MD5f66b2bfad3007010583dd1f678f8233d
SHA18de207d6bb2db70a1257d09ef31128902b5cc054
SHA2563601d5ddf323681f9159976ee14eb6211f56795a2d0172733214e5726f528cdd
SHA5127940a590588c5a89963274e2aee0fcd04b2abdd96adbfbecf6ba17ffa0c1ecacddda494d28edd7a3e537f2bbc874fa34bbf7e00b3f76e0e2dc17c4cc6f3cdc58
-
Filesize
8KB
MD567ab582e4448b895a6370462da402f48
SHA1020496747e8878f7936d92c952544bd101742c85
SHA25611f10dc259c703625fbb23649694e1fa9684388d8e59d7294dc3f07e6c35a8af
SHA51267675134e9e38fe97c614318978c1ac2eca54bcc20e8faf1d19002fb8fb9c998e64bab8fbba4e85fbaab2674ee8d849744125e0ccb9f916b9d0f4df83ba41077
-
Filesize
8KB
MD5ece2ac4a62451adc8dbc15100686bf28
SHA135a13b8675eb23527b419de45cb5a46bf44d4b94
SHA2563a920974b189ec41bac6c82b46a0ca23554f21f98b29c888fab13fa8988ec847
SHA5129b991128b9b5b5448e9f14a37c204d1a075005b3161c168ab5c6dc50e0fbeb18f7e480cfda28daa2466429ec16c4beae059d0673f6cfdd47d7b1eb4061425dc3
-
Filesize
710B
MD5639ce19bc2f2397f8d8b1ce93f07d120
SHA139922e1600ccee427e60584096039eef392efbe8
SHA2569336a6b8008ce07a6edc8bcf10797333b0ba1cee191643b10944d2a227e13dc1
SHA5129e6bd6faafa6580d6fe45b27c1469af7d56cde193f6d0b81689dba6ab68929c28cef00e8b081fe63231e8ec874103fddf480854f04baf00700e92e9ae8f27bac
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6624732502E9000113B7215DE57DC3B2.temp
Filesize441B
MD50094f58183380174eee40bfa7ce4651a
SHA1f9e3cfdbcd2d69e665c3c87231278b51fe8dee6e
SHA2568af0f2938892eeef3920706a09b685f4fe3539c33406ced28c7be7d3daef2f0c
SHA512513abc0278dc2215f3cc3844e4b0aa3bd3707fb7a12202bbfdba887a556ebbe84512e3b6d133e32250eff3cbfeaf2d573135002c16b962041f0b79f7304224dc
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6624732502E9000113B7215DE57DC3B2.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/6624732502E9000113B7215DE57DC3B2/report
Filesize733B
MD50ddb81ba5c213be348f363c01a228cf0
SHA1d33053f7927f64778b13500b4f0e67a6235b6497
SHA256286fc641f965df3b324c7d4b88166468d792937ddfb2d955c9103781831ab711
SHA5129d95684771912a33c2f73ce9014a67fac42bd3229948cb5a7dbaf5ac9290daf724f62af7cc368df7c938b95597fd1555c109c860efd6be69bed16a1a5f843f4f
-
Filesize
564B
MD54775b783d60c5943c18af68717b71b86
SHA1c05ff837f21389ba27bfd253f98e9d0c4886d1b3
SHA256d41b0f3363d746b258922ffeb881af99a74597b976d182fa131e91f70f41a12c
SHA512266c7d5139fa5b9393f94af03fe3502bb11dbdd03fff725e87ba61d398b06baaf7096aba4117e5a8fac4a8adb055ce22e320d94273409668ce625e4eb2c78e05
-
Filesize
90B
MD5c48781040f911ce4d86508036bff7cf4
SHA1375bd0a6e938f05f6df9cc0872b653081112a441
SHA25634c334e6ba6cffae761c0abebb820155941d5bbd97138e47063f66da02cb2e30
SHA512a31d6cfd13adc517f48e909d6956d16241f40c90a41234620b5281e8f64d3a4b761a5fa750dd147c8b9e02dbb8894879320ec1b8e04cce3b94e6a9ee84797da9
-
Filesize
36B
MD55bb6b91951d5bb077b63bf1da17770e8
SHA111d9d9eb29443b14a45da9e1f7ede111e9999b10
SHA2568f84c49f1208b00ac8ab9e473aa567f011b51ded741fcebec0ba2f9600127a8b
SHA5122455bf7b7a712912d0e13786b0f914d2f39e1718e93ad397c2d9c50278e1078ca65ea12bc9d6dc69d6aaa0ec6166f1e9c04808adbe29bd27e2e610df279a69c3
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5da2ef1a38d7cc0d15d974854e1b81026
SHA150ec33528830b4a362f80716be597d8b595f3043
SHA2566723e7984fcd0ae43221e8a472a734767c5e6b1e60f9416db658a83cdbc8bf87
SHA512b97b191a65ab6cdf432552e21553b4593483e56f867965c1c2e8d198a9def7d79b048abbcbd3b4d1894bcc5cdbdc4de8f882a79f337ad27172ed16223a65a03d
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD533fd2bc4b2a9cf9e2e1bf59d2d878851
SHA1226493392c27295bed5c39861f8da2ce4b44438a
SHA256e2343c847fe4f660df21bc816b039be060fec05d55fbb91f1363f3c2dc2c7a8e
SHA512e916f383f4603ba7fb7ee4c10ac192be76d3ed4d13b307db6410cd87279a9fdc1541cc13b53ce1014efcb6f2659525835b3847bebc8193059596bfb4edda531f
-
Filesize
108KB
MD56051c3536b3d9e9ff047c8305ed9f187
SHA1e22e8e9ad41848b794785579a66315615d83f800
SHA256e805e0b5835319f269160de5a1f83be7d5c68eac16c66fd689ee835188190fda
SHA5123defd12ae91a68ea9801dfdc248997dd143a4441ea4b0baf943342ba6a40c29e678a111497abbbb4460bc164b77455bc98d2732573e36f38034a11bb1bf089f5