Overview

overview

10

Static

static

10

798fafd342...ae.apk

android-9-x86

10

798fafd342...ae.apk

android-10-x64

10

798fafd342...ae.apk

android-11-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae

  • Size

    5.8MB

  • Sample

    240423-cf82xabd54

  • MD5

    1398c9c6999be6f56f2364ec680f8557

  • SHA1

    396c173b4c084afc3a2c89044ffa42a3f0e4dad4

  • SHA256

    798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae

  • SHA512

    49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc

  • SSDEEP

    98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A

Score
10/10
easyloggerandroidbankercollectiondiscoveryevasioninfostealerpersistencespywaretrojan

Malware Config

Extracted

Family

easylogger

C2

https://pulsesolutions-net-easy-logger.firebaseio.com

Targets

    • Target

      798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae

    • Size

      5.8MB

    • MD5

      1398c9c6999be6f56f2364ec680f8557

    • SHA1

      396c173b4c084afc3a2c89044ffa42a3f0e4dad4

    • SHA256

      798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae

    • SHA512

      49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc

    • SSDEEP

      98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A

    Score
    10/10
    easyloggerbankercollectiondiscoveryevasioninfostealerpersistencespywaretrojan

    • EasyLogger

      EasyLogger is an Android stalkerware.

      trojaninfostealerspywareeasylogger

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

      evasiondiscovery

    • Reads the content of the SMS messages.

      collection

    • Registers a broadcast receiver at runtime (usually for listening for system events)

      persistence

    • Acquires the wake lock

    • Checks if the internet connection is available

      discovery

    • Queries the unique device ID (IMEI, MEID, IMSI)

      discovery

    • Checks the presence of a debugger

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks