Analysis
-
max time kernel
48s -
max time network
135s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
22/04/2024, 02:08
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD548df2f722ce4207a279ed602c6373dde
SHA1aa3623e83ca5451d6ae9432640d297f93acfaff6
SHA25682ce88e422527f46d5997d309cf6fb7421899daefc301f505047888bc18a8baf
SHA512dff99e2f22907c85cef07a92dd68072fb63fbee89cfb33036aed20df0eb1008b156c0a0229b518856047a92d80d0722c26b4ebbc82c6cf6066be9be92e9d722f
-
Filesize
1KB
MD557eb0d052e36905eb8afd4e235df8167
SHA15e5ef3665acafd25087a9681e0f9d999c7b9b58d
SHA2563ec2991b46961fd19a3714f591ddcbb3847b95ed38ce60c6018dc4e1111a1b6d
SHA512193c8f59d4858f4addc613bfb5d0113faf92fc11fdd30122c6c0871a6d65d84e4e9302300940f891fde8931a0c3672e3ee31e9fd6af6e6d65aaba9da9b971c10
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD593c9de6b69815c12faa88e6d49840a78
SHA1521a7e2f112c0aabbfe63241bafa0c569d88d2c9
SHA2560d2f2788a3a4a4ae31ebfa50338ae75b16704a6eeb266401224448376a22120a
SHA5121b9eddbaf73e17dad0e818a6a05ef55bae126c411f3559b7873c3b491891eee28873e3be3f75a19d60d96a81208c99ab90dcbfc04838be9cf46d0dbeaa6165a8
-
Filesize
8KB
MD5b73801d09b6049ca8d1a0ea53a9059c6
SHA14676f8f870692960c17fbdb708e7ffb1ff4f945c
SHA256e6a17e3f9147235a619702f2699c42c8c997b092dd09e686009af377ce98dcc1
SHA512cbb03165b0d68bf04f7328799b511d9940960025a0e1dff4150c1aa10bb7252c0caaf9c29499313064bb806f92a4599da3487a997991911d79981c6a7e856fc2
-
Filesize
8KB
MD56abc728a50b849c8aab458d0545bac75
SHA1ce0e63c1a9cd4827c57de70d82eb5506937ecc27
SHA256a23b48bc8a061b326d35114e22a986811695cd735b88b8632496d8020d2480f0
SHA5129bf44b39fbe8df414e5c657a491ec8c9d7b6cdfc5cd14d0ca400d5fb87de011e102540deb04a05c647b599496cb835e3d55e01e30c428faf41529dd64f1908bc
-
Filesize
8KB
MD520ce5ecbe81b5a003f095558917c9a41
SHA118f66c35a532d8d26e14d71571e60ba735725994
SHA2567ef59035241a4f852b86a382eaa695a77cb4252607f8115cf4d63a9883290b40
SHA5124a8369842f878259448bb2c8b2993eaecfb40cb6b9e80b8d49cbb3d95980150ce48aef0bea36a48bfe08ae1c56980cd6852e8695c3bfd9c69402f982825db817
-
Filesize
8KB
MD51af5ff6bfc0587562037f7857f72c220
SHA1714a5709a79204e5da1f32f640cf2b108cbb5b67
SHA256a68a880ae1d5930718aca72d64098689208513e32c36bb068a7d5cee16a68044
SHA512c5968a22b9fa3caf1f6f0bc22ab2008c49db6f9b5a81a2fe0c947967c4eb58435b3e64e686afff9d24c2f1c484f5e0a10c223c54e5c79aa5ccd11839825a4d06
-
Filesize
8KB
MD598525487294850db3404a1b2df0e4b41
SHA16c0fbffe9baee079ad2dc6b70f19ec69d62d1c03
SHA25646f14d53ec7da484cb30151f55cd9a3e621193f5cd37773fd920312087e074dd
SHA512a9b953c02cadc8f361e97a31a40eeb2ae8fdb4368eb3578d036ca4fe7d3424758f832d76d9155d8c088ae054463fbd1aab09801aa361d3ff5ccbdb217e499030
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
8KB
MD5ca1c73deaf64a5875711145b51e57532
SHA16b98b0c2ef6723173301634e3fb2630e42e55101
SHA2568aea7d12a2381397cec4dacb022b1cea9827964847aea73ce8714d6e038afbd5
SHA512cab793140f8ce41a783239b79c4cf58408bc902ff9762791b9aaf1daa852c3e94eed3c647d609322874e4e8b1c0e34a8f7fb03da5fae354fcd0eb79c57ebf04b
-
Filesize
512B
MD586ade94bd061fe544fd4eb50a3b5276d
SHA1c17f15b7328ee4b5119228321ac7e3ba7141055c
SHA256f1585395da5bdebf06593dacd47ce426b5c3377c92b9f13cdcc0059eace22ba1
SHA5126a6a9939f16ba561ac494dd025ac6c05a2c14b10fe7e8f47114a3603fc7be622a8b1fe4ae0232278aa16fa7817ee1fad1a61eabceefd6d0d2d2589bd6c2b2544
-
Filesize
8KB
MD57d287a944ed32c10406f2c1cff85a87e
SHA1cd4d2fd15d318e86bb54f99698d9dd2629af1d5f
SHA2564351c12db9444f3f1d5e5c720459cb5b468ebd95a810c5f9ee56787ee937e398
SHA5121a3a1c200150d93da16a39358392084139115dc8e12bc982797db843aafbd9c4bfa4f8e89d9f84bf7b99a90c376672e2b9332ba7cd7146f1edaddc7df640578f
-
Filesize
28KB
MD53c04bedea8da3ecac2b48b84b856ba05
SHA177e9801e97357b5b8e470437db07a005cc9441fc
SHA2564137d8b4e7f64bece49a3b5a73148bb0340d56d6dca88ad95f7c6bb6dc5304c0
SHA51222ed3b4943d802a53c55861972cf64e7128e54e96496d80d3e70d644dc663eccef308f9dfcaac41f7a19f82ad4412a059cd74c7b6b8d6bf59118330e61edcd54
-
Filesize
512B
MD5ccefa26ce27b8411dab7a989d8beab6b
SHA1d4b1cccc0cce462a3e4c840dd1dd90255259e78e
SHA256d85eb9ae08e7ef801969a09fb4b7f2b8f99c55ae3f2a3375e14d4f9cba0bb3fc
SHA512df852e9217ceb1683a9a210a81a29abc1956bb49cabd194367f8297c52c8485535d5ea2519e616144ccbc3ed099ca33d8f5702bc1b723f9ed33885e615521c4e
-
Filesize
8KB
MD5fc03a4ce20383db44da27d3986890e8e
SHA140d1c7cceb35323f8b8a421526614a4c13dd209a
SHA256b6553a7f7a75797e774d6d4ac3a27dd00cf1aa7492c820340edc78c9abd43672
SHA512430c86f5ef61ac6847596a3230ae7e0608ffd4cf5e98b42294e0a7178f58010c262048073b913b634e1e87cca8f406233f7fb8d2bc1656ec27d8573c1d729158
-
Filesize
4KB
MD55b24afc257379df1a9ea3da15c58c99d
SHA1023a891f5f5227cadb7588d5bb223bd829262919
SHA25640c3f2b86d135261d99ae970e00e39b9491d0c304ef37c75cbf50cea49064291
SHA5120ae52e60238d4536ef87cfaa3e054e12a6476ff270d686c3d065baf0cce57db446d9a888995f4d441431efd0d5fb098687d48c05ec29cecf036e3cdd3e03a4d9
-
Filesize
8KB
MD56eca58f8c4955a54346431da7d35faa6
SHA106875f26d9102731cef102d14ccf2f2cfde4b19b
SHA25636620adf75da7486db2a5dba9ff1231d612a736ef6748773d55e2d4636cdefba
SHA5127adc2b2cb9dd0fe00ce0af7061c22fea895843f6e2723dc97cf708e714ba29ac9c737c8052f77ec46d69c945cbed934139d2ae43386ec1ce9ac8f575a8da479a
-
Filesize
8KB
MD5038fff7541c836535bc8d3d7df58b6f7
SHA16379a15cd4f19de08ed97620f1fc2f8a6b1a2e08
SHA256f513d624b8d34c1e963249dbc84719a892107b93cffe4db3e75a1ea9032ed7eb
SHA51299e010c3a74bf9e6bd0eabf5f6ab281f058e513948a32910fcbe4c54c3493e940871d4c17a5cbdd7bfc51575c22f41b1464c6989932fb132a32312de28d85fb0
-
Filesize
12KB
MD59ca9675ee8ffc16d4e5384435dd7507e
SHA134c69fb207984715a010eb86d6d86ed92f2e0edc
SHA2567345585df192ab2a524ef7a212c5b111c3d36dddf93dc014180741146c1077a5
SHA512f43406bd438dcf8c9f78595d525e9c8eb260c076fafc54bf04bf10ed0d640e02350381880614b945731d51447db32b7d96a52edd6d4721432a1c09136c673469
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD5ecd6592b81dc4c1b2718d3ca3d6e1176
SHA1278dc19a8de5323cbdb9e2bcd83b91119b723c3f
SHA25675724d045fbe612b853dea933eac33d4850795c160dc6f3e1db07102bef7612c
SHA5129f0a7c9fee3151920cf48d6821db5fed45770d7bd42b132cd2827eb16b58ffd026515b065506db0bd45f22ab5be2baca8fcdc54f2d79e9825630e19065c96f68
-
Filesize
16KB
MD5959457fcb07901c23c7b8e43c4592474
SHA1c3ade94adf16a72c6a0fd3d922cf50b4d46e4fae
SHA2566dff098a1411bb7c5a79ed4ff36c3ded4ab3e62fc2cb96e4440364cd07873fef
SHA512907f1778e2c5e9a92564b1db819f6d18e0dec6106837cae978d572f3e665d24ce9b70eb4c8b347df9df747e753de80791fa0da49ed988795ab35c3c25749ffbd
-
Filesize
16KB
MD5e66d0619f14875f8926ab26d8a7927aa
SHA1281e4c441b950833c2e43393d1598a3be96345ec
SHA2569385c4faec4f250eb4d61b42685e6f7b72f89885dc8eacfa533874648fa5e7c1
SHA512304a5c074ed3b1550958fc5ebce46a7a1361273ef854df77c7cac322f88229a9c8a13f5de2078d7f57fa31833d9e8bd74f8f91509defd7a3a43f5f8d715a1942
-
Filesize
16KB
MD5bffa3d3ad9e873954431ace154c4030c
SHA1079a6658bf58cf5982ebb94c027833bf39c94882
SHA256e667884093a839694048a4446910c5a8bc3f0b350dff82b869e12253b0d92fb2
SHA5126299ddc6a0736e416b8b740603dc3fd7b5f02d85d0c0b71e140f884912141ae8467d9fcfca2793fbc5c70d1bb28f653c4b34b8daa50618730eb4b2d73356c4c8
-
Filesize
16KB
MD5c6de019a93b8a298c139021e0283ba5a
SHA150dc2c6c159ffd1142b0227eb079e94e90964692
SHA256bffd2c611a545c2a706cfde42b9a0ec3e42a0d439b29dde7b97f04585eeec3d0
SHA51214001d11deb208c3c9a2a2261fcc6890df0979a120fa7fd71983e03f04d763efaeb4cccc517f58e4640393e1a01f93955f9436a5b78eb05812cd81dc67c13b1e
-
Filesize
512B
MD5178b42eb07fa1335386e1995c05e82c0
SHA16d3470c5ba2c0d2a79571df3405a9e557a04326b
SHA2561da68865bb20dfed23f8ea886b9e7d4e97bfb6d9b82ff773b07bf6d01a5ea82f
SHA512a87565001e00759892d1e709f18dd413029448cfaf18b649bef40727ef23c670d40ca0f96d9be2b6b12b0c128cbe5677ef12188766013b59e146462e7eda054e
-
Filesize
8KB
MD5922ffc9d0fab0701ffd8e29af6ad4e51
SHA1887ac8a39acfb2868f5779fabbfb718ca41d7774
SHA256b553e5a2a0da507ac5322135b2a96b30f6cc0ddd785078365ec746182235aac0
SHA512ccbe817ad20cd65ca816c16fefebaed0117cdee3b6fdb19e0d2f3acdd47a65dc77b2acf08957dbec638445f7f1442d8fdf56489ea28243038bfac350e755a002
-
Filesize
4KB
MD58b5e5ca5a0cc9977826c192e8c99f3db
SHA12676879fb947bfa28f729c281052aeeef553cfb1
SHA25602e39af9ea2714e1d3d3b64dccbefeeb84674968db2d7a5168cbd53d582072e6
SHA51223cb6c1eee13b9cfe0178a64329c69d35ad2e4d54c9bf355a9fcca2d1f9ceb9e463d502638fe0dbde0a596e7be472ee4a9b55d3e20295833beebbb7d80f176f8
-
Filesize
8KB
MD5318f12f5337d4cff555217ac49f2420f
SHA11dd31e395be540d2e86e78f028584e04a1384709
SHA25647e28764f58683505ae02ed096db637289545b2c9f2c8bbb08fa25ac9cac240d
SHA512714a96de8b8ee6d384c397bac44cb4cf76791fcc2d33e088bfbe0e19b45d143d6d82a485eac7bf2b47d0b7a081c50f5d704d90ca138c595f5987df92f0c24a93
-
Filesize
8KB
MD594839bec961189d542e134b213ac2495
SHA104cc0e6fd15be19826cafea8d9e3b48d74c7d700
SHA256fbd978d620036feb29c5dfc45c11d6aa07e91ee16d9f15aa8dbf45d6fc52a447
SHA5124d323fe3a3065a4c5c9f34b18edfb40cc4515cea93eedff8a4d3b978b60a062baa7510f63349cb6ea440dedcad4b999b650482579765adbd52090d51cb6528e8
-
Filesize
8KB
MD516c1ba006bf3e9e91ca562b66fa60d73
SHA1437218a7e6fea86e50dd09350e21c124f93639f3
SHA256971bd599a1fe0c82a6b0cd4da59bd4088f075ca1b36f80e9f23e053c8834c6c5
SHA512e782f3f23fb87ae4a5a610d759ee8dbab607595225bbdb56b1e423361b3f81bf17858eb2c59ebae463aa95d08816e1181a6b0919a38187434f32b565048b6cb8
-
Filesize
710B
MD566122f79f64caa912ce1ec297f8c3b44
SHA1c5339b64dc3847b281133174fb6b6a4112ae78ea
SHA25607969a09556c8633a1e877af45db1f376119d6f3f769a305b73d468185d7ba21
SHA512fedf102f33f984aad452a2086bd1ebcd8a9ee321d85bef1c72b172c532b62ccb88e6867a89602dabaaa78802c5f6efe849fa4a66d65c86eb763180e696181417
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6625C6C102C10001125E2D38E2F17BC4.temp
Filesize441B
MD565d312c34cb5d37a26aae97158675e4c
SHA144f86d53f12dd6954dcc86cdbdfb25742437d33f
SHA256d407c8386e9ee3697d33cf39ed59a3174c5e3fd7aff2b98c6600fcc9e8bc487c
SHA5129e654ae5690191b963975e5c642015130b2636cfe74d705944d29c784818bcd1c971cb6e3b2dd280a10121eb0e165ea643bc1f9ac1f9334ba646e8c9f5ae3712
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6625C6C102C10001125E2D38E2F17BC4.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/6625C6C102C10001125E2D38E2F17BC4/report
Filesize733B
MD510b6a4218b60eba62dd6d1953cff8b5c
SHA144a8db8234105afed3bb668179521c9b04dd79b6
SHA2560beb09687775c35e4133ff8efa37dd81e5baac1ba07636e1bd0eb9113a20b77a
SHA5120cf16471262523f853892fa06d58704fc20926040ea4e9de4ddc4c7211c9920dea1d993bbfb3e4cf608b5a9571041703c22fca201108bb47a9c9f4ff35999cbb
-
Filesize
90B
MD5a1d51ddb0ed155a67d20b1bc487dbac3
SHA11dea2bd3e508ebb6fe577e8627e74e7a6d3cb18b
SHA256dfae857bf71415c653e4168d36a0a009e88278bd9b2cb8c148af611766b268e7
SHA51295e684dbda5b317102f45cecc707a6286e0f852c281355717aed794fcbc8c64185ff457036b9759e2b83d026eb315ab77bb67da21f5bb8ba552b4f88cd9f727c
-
Filesize
562B
MD5d6628bba6c7d9338433cc08565e4eae1
SHA18fb3948a4a538099ae37340121d03ac79f25b51e
SHA25619fdcf5055f7f9b0517d5f03fece1dd2e0584302b14ae1e406e1455f9176f86e
SHA51232ff0e54804cd6da10025bf5f23cc50f7c9b732a327a2c1a85f0520663ef73048b40e1317fda3bdc0421ea072081c3751731f7cff6b5085c9a17f32dd5e01928
-
Filesize
36B
MD5bbcdc1b052866f567b182ce2d871c0c6
SHA18ebf2464a49fa3c77b5da8b7714b62885e5f4be8
SHA2560a4109b8ef18c00f8ec31082eaa6108d85338aa9800b182d13c9b384ab8aea3c
SHA51227b046bd083dd919c15f8114a337ff3646c8e7cd640584e2984442b8c8fca316fbc8a818f2cf3341aa72be139f493e0ce5c55ef05e44f0c96a87014e5fdfff52
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5542298e4fd146dfc6c4f1382f71284da
SHA1aaa45add89d041960a6f5bb11ed7bb53a655e3bb
SHA256588cd502a0cae2302202b05109c39ba274ddd86ad96db7b0182c74acd87c20e7
SHA512fcf8c4f0aa921a192d43bd4c51951d3c5e265278f9320cce75f64b1a93820dee49c9c4b77be13589fe86b0fb8c3e1b61269e8b27b189320070a18919bd5b360d
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5a235b1d99799db20e611f449502593b3
SHA194407e386bc9404d9d0e88a75fd8496f1dec894e
SHA256a475b6f943eb2cd3330916c19cbd969e28de91dc722e468319f86a54d6bb1797
SHA51292cbb5bfaa559cabf8a4a70f8f4e48aa5025f86dd079afaf3f565aea11cc2ed01964adda5d70e0514b587acaae094d0d928ef7be822c0ec1db0d9e92ddb8c50b
-
Filesize
108KB
MD56ba993c7b5ae33e9ce717c351f5b7696
SHA1c6680633bb52c6c5ca6d85da550a96176ea2290b
SHA256f9d8c141d67de9db1b0b29009e5f60deba6e97e01747b913dd6fcbe49726cb64
SHA51234c6a67862b476faa260732e133df8c169a671113d973ef01fee94ee99657e1cf795c8dbdf23d74df85032eab29d73f25049edb1b4d3c5a8d6de8f5bb8819f88