Analysis
-
max time kernel
47s -
max time network
153s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
24-04-2024 02:07
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5da214620a617a4f908ec286783bb3473
SHA1f8084b65636cde9d85df54b57fd754bbf2e2ed1a
SHA256b07193a9963979ae4bc642c951bb20b0677d1010488ed05c78c68e50a3535918
SHA5128ef08df4ecb4c4b0c3bafe158c3b814a0c2a94f4f988606b4d6103096576501ca1b1f769d07edbaf1e1488c3d9fc1911696b5438bca509053e52182fe1c287d2
-
Filesize
1KB
MD5cf22409caf110074c30f148c72ae936e
SHA1b4e4c6ddd6ad690f89f6fb4fbc48b66c5fa1697c
SHA256a185ea8b2d276b221bff3c8a7d021d22fca11a63ce07a5078507caff2547e866
SHA5121b78ef985eefedb39713cb821291656290e37dd15b0a373e154c29bec13416092ff3316d6af6041c5a98ca2b38edbc82c34891281925117135e6fb0f306d8096
-
Filesize
76KB
MD5244592a5662464f9e6e8aa5d52402428
SHA1885e44dd3ccf643475ddb16d7d2eec0c809fd1d5
SHA25654b29062aac9ef91d03294047b7780498a2cdf0ddd75028dcebd9b6b7a88214c
SHA512ce35edd0ec05450bb08d6b47583393eea034333b99e13ad2bb6848724f09ed71334a858e5cd5ccb6909d516ae70545c3e7c98ff15673005e25c9ad60b2a11b17
-
Filesize
512B
MD50bbf7af574a59f88313876beb8201f0e
SHA1c20eb449cd48d13c4a2acae0a97efc3c8fcd2e71
SHA25623833979488a668d739f2c2cb7e29fc5e6a5dd48584ba5a1eaf2f9f4c6b26b5a
SHA51227b8260d7359b76ddfbd20a7aa899e095856d031ff1db2d3101b57073cc1827cb4ca56093422c8ae22bd66f2badedcdafd21e9afa938814adc5bf7790da987e3
-
Filesize
8KB
MD514865c462bd0fcf58db3e8443fde835f
SHA110413f390541d3501abfeca6ebb977452397e352
SHA2568c39e0c376ca8eb14a3b31df746e094eb8a198a58737b6fc383b6c794999d3b1
SHA51292f29472ebd1ded8ba5ca914c9a84b45fcff31e843908d7e0972f901761799c00c513e7b8587c78a3a19768ce035d99d7ebfd10ac6ee8186692cbcec17f3f473
-
Filesize
8KB
MD570c82f894370abedf0f90fff08db99b3
SHA13de63f68842d75ade15d172d82ffba29986bbf98
SHA2561fa9a42f2f2dc8893f537f5e1e4b0b9a9e0b4325d1c4485999d858070f62924a
SHA5125c57934e6b668a7c055a1941ba92ec942d362654ef25d39a208df4f531fa8ed85c761efd2b8628c412c9350a7ec829beae36f6e3addbcb77226671f15dd02df4
-
Filesize
8KB
MD5426371ad8ac67cc3e8bc9d8c6b114999
SHA1953862b08dec0ca7929ee4b0ce3a3acc07a0d2e4
SHA256538d0d0349eaa7b216c896abc44676ea53243c1bbbd13d321f5f4cf2c979bddb
SHA512f22bf4f275738ae991cec88ea90798e19143d8194c3dd4adcc0b974d4918071295753c7a9e7d9b05cebdf23416271166683264d85377a3ce4f0861929125302e
-
Filesize
8KB
MD55a33ef5635b860e4816f6a3d60a199da
SHA1e2894a26ff3b3be2fbdae85b673ff3272a302784
SHA256fd8e98401b2830c1235bb9b9d69cbcc02549170bfcd6f4e7b0d6d02d5ba3e664
SHA512d640e2904c0d86fcfe963a2a36ede4ec3ac0d998fbacce313484a999fb8e44c2f720478e7a0a7ab41214afefeb6f63127fb7d24543a5e6d68b12a288345bbd28
-
Filesize
8KB
MD5a8b3857416ca7e5926ad4838782b8319
SHA1c778690b29e67b29d1522a98770ff35d3831be33
SHA2568604c5232674971b9f176342f4d343f02cfa00bdd09afcd7ea6fcee33950e501
SHA51207b06a5c05e58bd8bc7ddf9061e40e818a6e54b0b901a7fff956bc9aa6be8e031addec18dd42c7f8b43b6668a46211e3b35dbc40ad6003239254b86bbfc956a7
-
Filesize
40KB
MD515d5b92dcbda7ef7f9ca327a903e46e4
SHA1ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA256e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
SHA5122352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
-
Filesize
512B
MD5ff0d4cb4faf580fd2b9a464400089746
SHA19fc0a727cc707e085f559f15a5fed5ed35ebd8d3
SHA256a1e9d01873d8053eeab1066f4e5231c477bdcd0fd3ab9197eaeb2793ce37e96f
SHA5124501e6c5062dadc2860afb01250752e0461e7f7ad5e207527e0edabd5300710960af302601d49d13330e001a9e5601c694df983c25910a03972119eb446c6ba6
-
Filesize
8KB
MD5597c794e2702ab30c718c5db540b3d46
SHA188862fb768023aec9c42f2b526e23bf98712c96d
SHA256c83e856a86aa68ccc48637bb1c087b4f386ec53d0f234f9e3b92f9f99a114c97
SHA5122f9c7dbdf95521f885951300d4ae057015bff51ab9f84eacf92fda61f5492392159f892a16a26a1be99e024299be09b8e7d1699e8ee6a3fcf53805cc3af94565
-
Filesize
8KB
MD5ce0080082c6427232bfa27640e83514f
SHA1428c8340bfd57b5effd3700c685e52c51181f6d0
SHA256d15b5c91a3045cd82fd9e9eb0dfbd0d063adb86473350b7b4428782cd543c42e
SHA512b06ed691fca56d8c06a67ddb791931d4ef24d73610232e1b5d2d16e02b18ecc0b7ccc9004bb1d738cf68793cbe6828c8bc31875257ffac54c8d38a451ea69640
-
Filesize
28KB
MD54ea55fe95d6c96a39fd085600f30c745
SHA137a03281da09f52e580061eec55510548d2924b0
SHA256f419c400b9e892fbe2c84d13b298bc0567d715028d37cb5c2c547e176bd6cc8b
SHA512359355f84e425c5821c94e12fd1e7886446856b977d06a62b77cd6423f756c4bd78c1e61e0709f0127552b4156e086b6c60a2a3b357879f207cdb01a42f49c44
-
Filesize
512B
MD5f7fe931c1c983f181a6d7da34c285593
SHA1aa4b38969303523146bced1d1bfbbb8d2014654e
SHA2560f0fa2b178df371f706cf39b20b06852bbd2aae2776f326c4b7acb75896f1d4f
SHA512c4781eb6b3bdcd202d01a470f2b63676d553da32e749378b51b94334bd09d677f6cededf7d8aa364b35d3f4357ad17b8af3fe474920054bfc4eca85006aedb50
-
Filesize
8KB
MD5d14e82d61a147affaa0a3f4817d4577d
SHA1841b852cbad9ee6bbdcc268859cb7bacf6a15298
SHA256f5193f262a7368ac787ac30703367636afbfedc8dae091f7e5f875e95f0ea51b
SHA512960e87fd2a4572de103a4d12ac00c750b91c4f0e1d128f871928f371cb8fe673ed2c3faeec3ddc64d2cd3175afd88c04adc1c59a87eced4bc0afefeac50639ce
-
Filesize
4KB
MD569da96710cd813a0a48bfc41c4932766
SHA1ec596ec9a679956e6929ee749b4864204ee2f68f
SHA25660b99029137ccd23775c72f22409da4f03c57b99b2e0fcead24827f969ffb0c7
SHA5120311641d991b56183b5f52f4f9b1aa443e24fbd04c9b7553e34c1027566cb3bd9c61820e2bbdccd3517c09318f8c65b5c40bdd8d9e6f0b2649b6d4779620aec6
-
Filesize
8KB
MD58b0777a737f02228578a34ef90d3ea12
SHA151f6a93e798b01bdca12d6286661ba88a82bc3d9
SHA256041557b947a261c92e05e3c340474c8212673efd1df4ae8d07aab608470c54f3
SHA51249494dbc245d78884a7f879e9c3eadaf1e61038ac08f6c21f9329c806133aa9e0d0a1ac26fe9e4bed4f7c59b207cdb9c29ff29982fb0cbc0a858b0b7a28f6f29
-
Filesize
8KB
MD598c07e55b1ae21568581512182eb0fa0
SHA1256963ab1c1cb0b90b0791b917f63061ff179a13
SHA256b1720cc457eecb76e00f0307f6f97b0f13a0651ff1e06d9c4f6e51d13b993c82
SHA512fb4b623c8576276a6f2f829c8de98d21eae123d4739c1ba528d6d1f1efc464b23cafb715d2340c2fd2b9456c2c070f7ece901199b3b97bcf66bfe3413e3094cb
-
Filesize
12KB
MD5a99b88884ae88a1b4c4b76dad99913e2
SHA101ba9a7d8796c53d1b1dd55540acdfffd81d5c29
SHA256890c0c6e9f8a5596a1eba76e898d378a54a675acd985385f47dee9db38b0e957
SHA512cb89e7f0ec5983a9910cd1da2629a85bde5ae84e52b66b09e3f2807c1256489c8318519d29a76eee3800b6d19323edfd781161bab63302b3035ba0ad9f194257
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD5b9e5d9bd1996dc2b1dd2ec17456c724a
SHA1711fcb58bbbdd948ea818803918861f38e599927
SHA25699782ee9773edac7e5fe910bbcd394e4de36aebedfe1339eda4696b57b5f0859
SHA512d7edbceada0b90c2e7f30cbd571233bdaf4b1cfa47011f1accccf2b88d7ac1661f272393163e03b06e1b08db5042e838439c8664aaeacfef2e161f8242b1c625
-
Filesize
16KB
MD51de99f4d36ae618dac4c591c959835f3
SHA18c62ccb5d467188e3c6021f1b337ba104f1d5498
SHA25694ee9b598e86d3dedbda180bc31d0664897b9df6827a642b53b2cf60f6a0c186
SHA5120f15b653ab451f02e4dae45f13aabc276b7b7d16e8e5e6181b50aefe1df8722cc3d3fcc3b13ed1374a0cc1493b071f8e57d43bcd2b704f89ef7b07aead03eebc
-
Filesize
16KB
MD56ba3909b52aa67884b74ad0afd886995
SHA183671fc24d44535fe01411fa97aa1ef8d8b85429
SHA25636d72107bc95c7b99ea82a388f864d83254d5c5865ad063eecadf438d4c92557
SHA512719c01ca786f83292d5aa23a36060478e5a9f8ad3ddcab69e96a636c930b9a12b556e59dee34f091c92237bace6f0579460fb51738c67d422b5f5c448f7ebb93
-
Filesize
16KB
MD54973888369503b118869b77f69f8a504
SHA13f5692cb350f3c36561e12367aac289b9b5597b9
SHA25669e1ce041d7b4fcafa752c76abd72ea47d1df476ed591a7159f95fab1988068d
SHA512f56e4ee553166ce8d4128171e9fa140c4cb46698910082795a2f9ac70be9b98fecc96e4088b1dfec06adf6e95a346f37b135e53ba226e4fa7f280ad5e2a70f68
-
Filesize
16KB
MD5eda96559b53540b070e486f526a4cacc
SHA1ace2f4645a2297d178ff849a13c95b9432445307
SHA256b535b1cc36838c013324c98e411f043cba25a911479a14bf498ccd52a51b3968
SHA512438403f921348431cd8fd0cecf380868e2dade89978c25a038b86447017a3c04f78f3f1ff9ff610cb1adb12919854ca66656918526333896ef39e6a2502133ae
-
Filesize
512B
MD566b498c369016c488dde4b2f537cf06f
SHA1b53347f564b4ce5c185dac3e7b83fc89ee9a40ea
SHA25698d2c8228f298065e086351c5eab9e530c8bf1038a1f588f9bf70d7767d73cfb
SHA512c60f26ed82971b526fc9e4295b376bfb882344a41240e7d86da054a1cd6b3128cfb79c6b2fcf1bdaa4787833e94db467e6b6146c0c4e733f7fbdd2ecca10f81e
-
Filesize
8KB
MD5f74efc200860b4c82bdaab3c1984f94d
SHA1eabdc2836ee0c24e82eb0635f2abf05eff567f3d
SHA25617750f26820986d6103da62470835bd1139cec2db722bbd6c89fc0fa803bb914
SHA512d8709636c8c9b06b94ee0afccff9c5b612bfdda594caaea91df83f09f1010f00324c49945c0b4ad8c9f1be72a414698eacfdc34424809b086fd6e76ff414f46e
-
Filesize
4KB
MD5a60ebe2965e55c92e8ab2fe39365de7b
SHA1ab2af1a0fd0894faf1eb9b5f2beee595aacabd2d
SHA256a656709361f9b38e0f0a04c3002287284450bb9bb7df06e3369ea919d8c12e8f
SHA5121e5a85a67ee580d33d79367a8257524e379b48307524579b100c85615cddbe8dcaf61bfe884f309dce93fba5af0fd43e74f537cb15a81f745f71ae8e1f57c72a
-
Filesize
8KB
MD567c85d86d2135c2f9496db538d383928
SHA1984362eb502893fef0c767aaacd31f2ccbc3ed50
SHA256e78858cdb1fb7ea2d79aed13b8bb470d3e6aa0f8724c7d02d74f5bb873c12af7
SHA51269ad2ddce4ffbf6771dd4efe9a3bb8891fe820e6d75b2b3430f2abf39762e65708f458f093cdd1310918b1bbf4f80958ceeee54bd83e9d8196a801cd36b50d02
-
Filesize
8KB
MD58ea6be47b24c7e2b436b4702905bd199
SHA133abcaf3dfc231ee3a96bf8c2520d347cfcdbc18
SHA256994ab462ba5156f45aab24589d93c84b379c30a18514d39156d4a3722572ff94
SHA5121090e336153abc395dfd7b8cde2f86bae1b5ef3608ed38a07ecc8b7ebff784fc69b1a683ddd8aa065772147d91c22d79c5eafbe46767574c3f5cbb49fe6c7d8c
-
Filesize
8KB
MD5b048d343c32e16c27ec0e91586e44fbe
SHA1a6c8894a3c055f0cfde54a17197818e8da620246
SHA2561e4cc1eceb2ace9b0468b170db451fd8e5e9b4a93cdf55f45c3a8feba1a21d6e
SHA5129646b087cef5a54a39a4f39ab0deae65e2a679c7f6531baec73e0312782ea870e4647375052d27dfec18a7fa85ab2009ad7e00cc09eecfe37b95fdd120766eca
-
Filesize
710B
MD5ce197d9e9dcc082d38b117babddbebbd
SHA11cf6bd84ccd6822d33e184945c2e8cd37ab043c7
SHA2562bca50fe03cafac8f79ff5d9e004be6c70136229826e7819d3a27602e2d2e177
SHA51201b2a1b403b6be08389d89a58635d4c2f5f2adc9e8b08129315a19d8ef931f81bbc0cb6752a1fa026a5713ff377ab5453c86f692f20fcc5cd08b6bd3854e8e75
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-662869560258000113ADC1666A802F8B.temp
Filesize440B
MD5597db6fae1bf41de2fe546f6f4ffaf7e
SHA1188f98addf464d8b04cd6beac44423a87023a535
SHA25607a461dd6f2e7c140a443abdbf719952131c99b9e131640e7c53bf7dff6788e1
SHA512466933ab146f33a28211fa957bb2be99495ea8bfdb10a89352d500d7e4b911204bc6fb6d86ab6ebedc1c8155b01a71611fd5db769ef0d77ad8cea69622053524
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-662869560258000113ADC1666A802F8B.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/662869560258000113ADC1666A802F8B/report
Filesize733B
MD56e6fedf59b15482d7973655675098181
SHA11a18d6242cf8ba0f7fccef8a7484d94141966e37
SHA256e7b8d2027dcc2c1de08e1e742d161d6a69e4df3f300dfb9236c70a7ca4204b77
SHA51299bf2d51ae00b13b34878ffe5d75c0dea251979bf71c372491b4851c0e2aaf7ce6d323756858d6b296e6c1461e9db1c4ce04b00dc92f23957aadec6c5ccf88f0
-
Filesize
90B
MD5d403c05346cea2343c59354f29dc2e9a
SHA1514aa711d0fbbad512d2c6e5cac4fb7f5827bd71
SHA256d2c95582bbdb0e156ea2cc4997839c34487b14f950ac7edb79f3aac278eaf1ae
SHA512e8cd38d4a503113abd839a5bdd61d0f39880e99e9635aeb7a520a1dd9924f7db0117fb56bc9004e4867f9b992eb0c6dee54a123738c7d95832589a81348bddbb
-
Filesize
562B
MD52d244d852624c3534c29638a6f64b7d9
SHA1ac65ce3127ae3afb8e591c8464fdc352c987edd3
SHA256ed0d10b6da174ed7373d99d90cac5dfa17bcb795b4d6e26334cfd2657ea2b64b
SHA512a504529bce714b0527be4822d0a657a45b956050d770c1f5689f8821abe40884a28aa15e90494edae26ced184757610b2883cbcd95b5be32a6c0585edf18ae38
-
Filesize
36B
MD5954c04c7910f295cf75b212ae3372d8f
SHA1a40cff8a1a3c6c6ef6a5287e3b8ebbe20595a3e9
SHA2561b6158650991835836781e0f889ddfa075f1d5a9f6d115534de4837ff241f712
SHA512ed4e10c00b3d4bd5863815857979112c941e44a3aa6dd6207ddecc684b3030df459ee4e5841ac584e29b29b9ad57e8178395849d796a69cfca59e37101fa8cbb
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5e4d7dc32520e43790ffb8c73ec9fc254
SHA1f63f9e87a1617d0c24f6909ed4344cd6f0222709
SHA256e6c38f2b91f1a7a6082eac5d6feace387c8c2b7ddaa5e826a7722895fc2859af
SHA51241550f17f78f0919ee7188df1d09f31bd4d5af3a8a039434733a856a278d4a969d9a602fe4010ee91544e1055c21c30bd46fc1d4e908dea9d5500f5a71fe5b56
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD542dc50c030c033dbaa692b2cd779a57f
SHA1222a2d29bd7cc4ac94e5bed5f105c8a591c7c671
SHA25637984708390040118eb2d1b3431c83a5f943e23ae0df78136b4d19be9e6ceb51
SHA512804a3d02b2d822d8ff84aa6892255b809a740ec697db2bcadeff1ecb172aea19dfa324252fe5f5c0221b467e14616e3402eee468588bdf2a82ecd5ad4d56fd26
-
Filesize
108KB
MD5d20f901ec2a389117a726f726e031622
SHA1f93ede106457edff907c3e1bccc0627dfca287fb
SHA2567f310affde1218c0944ab9e8840114b4d24a3a5824142207af17dbd1cee0230d
SHA51279b538b4e399a998cd5bea689ceaa00bae527e086dffde6a0f075accbd45134056deec2011498557d38f6dabfb70bb6e72630a87520bf84fc949852bf96ed9b5