Analysis
-
max time kernel
47s -
max time network
131s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
25-04-2024 02:50
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD535816249b64d271ffc7f6a237b63ac51
SHA177ac05854aa8e367bb731837702f615d0588f87e
SHA2562820f4543c477a3db7175502fc0f2dc6dd97473046a8f0d99a1d42e0ba6b55ca
SHA512126481ab96524550847693a82a3bd18f337751111d86b671bc16cee423dc9de1db1b9b4d623033ab74b9d59e7d1a79220a9da1f264c7bfda992e7662de5fcf8b
-
Filesize
1KB
MD5faf775a0087ba4641d78ff8dfa1baf2f
SHA169771fb43ec73f415975767e120ac5949ad706dd
SHA256125f115f53c787e2eef76c170783683fc23981090314240058db9238b8f6da79
SHA512fccef617d886de707e7a368b05ad51daa7aa9bcafe4a464bd58e939c61b10bfa689fe8305f47e6f8d7a2135efbfb2d8ce460a941160c6b05d505df3bd8aa50b1
-
Filesize
76KB
MD5244592a5662464f9e6e8aa5d52402428
SHA1885e44dd3ccf643475ddb16d7d2eec0c809fd1d5
SHA25654b29062aac9ef91d03294047b7780498a2cdf0ddd75028dcebd9b6b7a88214c
SHA512ce35edd0ec05450bb08d6b47583393eea034333b99e13ad2bb6848724f09ed71334a858e5cd5ccb6909d516ae70545c3e7c98ff15673005e25c9ad60b2a11b17
-
Filesize
512B
MD562429a3ef3515ab349878d3e78026974
SHA13c9a5f5ccb85cdf45b287e586304ad9bc4438dfe
SHA2568dec136d6f9f3ba52aede8c835f8d1bf13f71c9c660a3434d102469091a413fd
SHA5129b3c6f6b1e70cf376b7f07e389a563593ceea8cd06c8940c972c2d50811d5a504f4373d3a121a27c3b120270fdf27e63985f548e0b6d3dc19d68dda3aae6ed89
-
Filesize
8KB
MD52617338e50572e6c5d2b25e3b3760697
SHA11ef58104816490df1e236e42de12b8042ce65ca7
SHA2561ef310eb82ba3f2c60c98b29081ba4f5ce49b00dc64820364679dc60d8f3fe03
SHA512c0283fe92764b2594ff809627e73165611ca433f24a85f265b96228f86dbefa3d850e0d3745b93739abd4858135c0fa5cefc03d2f6ac39171cce46f270c8e9b0
-
Filesize
8KB
MD58aabd9768a2b0028b221bb2fb6dfdcc8
SHA1da52cb8176be6c9eb8141e17a3935b6199f5c71e
SHA256c9b14382aafde10649e319f0c56bea0eb58faca014145917afcdeb9cceb7f21a
SHA512df1296908d180e033b6af068c2cd44921d8d34f899ace3ef735204cbda996741dc4ac8b2a7cf3d8bdbe39eda88d0f8412789c42760bb6fa24ca97c87651abc52
-
Filesize
8KB
MD5b50922f5260c6700cbef00355ac8da69
SHA1f2a5224890cbf9b93b3f4f3935a9dd1eca582282
SHA256f8359ee71c544aa38cca4d9bbfc71c395b4eedc63edc638c8334aed4239697f8
SHA5128322f63feb01914c5d798dbb4c109b63d701f7a87c0fc50763e4d950d488c26eaa81282448f2ef55b3f0308d40c8bd41f4b8da06b1ed59c33a7bcd72db28e9dd
-
Filesize
8KB
MD5acccc81c5db0a989b5a276e552f81dce
SHA1c71eb49555983f9c4b393fb42e8164897ddffb4f
SHA256cd27e6b6d9a719e37b31d1775e9bb2af4cb397602bd804338cf0a2af11cd90d5
SHA512ad06ea879cc6167f2910aca140c537722c478465a4c1f8e58fe2c8e8fc8bced897a94a6308bec5cea99eec205991c8793d1c12a20b3ce133d9c9a26c06a220f0
-
Filesize
8KB
MD58df4342555055ff82465b0ff73b1fb3b
SHA1304027df658553503ebe58d57ad8594221125033
SHA2563d9fe545f57f50e3df32ca4481d575bac23b01c7fb61536e2e5bf49c484b144d
SHA512fb34937ef8d07bdb9362e14bb8a2154b0815d31a0e0f2f6e16c250018bd2390c7672e69251a6c788f2a905a226c48b47188645cced5c3dccaaf300414f410bed
-
Filesize
40KB
MD515d5b92dcbda7ef7f9ca327a903e46e4
SHA1ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA256e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
SHA5122352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
-
Filesize
8KB
MD5099952eb92c2ffc74371611efbf17e40
SHA19a45ba0f25771b20cd6230c9d5c0e73d6387951c
SHA2568f5c12c175e83e16e8013916762296da826ace1a914575dcb98aa990738045c0
SHA51224bed5c529b047bd168ea987ed274557bc4820ed4b9d7f033566d568b59563d7f4466870398c36db36943515f9175e777399961ed1fb33d953227c7425c34b4f
-
Filesize
512B
MD553b74a8d82af28faaaa1b9dc69b12820
SHA128bb21c85b68cc7b6236a5d6da5b0580a5849a57
SHA256507f7fe48d8cc19536757a5c82278f68991dd578220310e2d71affdb73a36d2a
SHA5128c8220cd1a81b816ac870aa3c1477fcd439f1ecf6572f012170ba25c60b99be59246899a9c4fb008a1607439e90e8713a11a070730d863d374ae50ee72e003e9
-
Filesize
8KB
MD568482382aace2f921253ce69a8e88b6b
SHA1cfbcadede209817668e1369404c0ce33ef5f76ba
SHA256ffd7dc11762e724a5a7620a36ed20faed802d930c1c5b299cf3be09ea918dc5a
SHA5129581ee712ff9bcffb8530f137bb7d1b5ca36026872123ee868913b38e01118a7609573562c6d937e2fb9194c19e315f2d1a32f26aafc19b968c3dc93ca5fd533
-
Filesize
28KB
MD57ec9a9b8ed54beb4d9c8b6e66624e728
SHA1d3c3cd65d7c12ae26df5085c94663c5b59f666e5
SHA25638d5bd4985c284d18e622cb4f18a03db100e64c070dadfe0c846e7761f935e01
SHA5127c32f0f3385c4c91856102be105a3a8b43e94a11f8657014eced8ad3fee704bba8052bb9b00e951a9801b4a1a4213e21ecebef605a1393c1acc9be43e4d8a9ae
-
Filesize
512B
MD5c8e0b6f9832ba3154fb3b6b780db762b
SHA108c03c5e20a8c084e734d19bf535679f4e593377
SHA256597475849c7c9ec2cb5cf2875c0610a3520fa135f773390042b336a578557d8b
SHA5123ea1c7a54c773e716f7685df78d67d4fe88d83899d08f95aaaa32e913a7652c1e1869ff67608fe0a33b613165e9ef227b3a46706563ad6a398ee87be3994f613
-
Filesize
8KB
MD5458bbd43a2fa4c3ce2d22ea6b5e1eca7
SHA1de635ddf46a869ff313d9e496d2fcf222661e3b2
SHA256c44c22d7f5408558dd9d9bf26a7951714e62ecdb60e7b51116123255afca3c8c
SHA512530f319b839c63c37c36a0583cf8de34abe8df4ff1a5be5441e79e6773ac4f74f394acf66498b278ced248ed387818893ddb8e69f1d63615eed54f88c0d0c42b
-
Filesize
4KB
MD541c33c93e7a361fac727591c5ba6d77c
SHA1283c2dcab38fdea1afc71418bfcd4d4d94042f18
SHA25646172c04746923c5c452c2b38e51d29b8d08eef6a8ab22ffc82cdceb38678b47
SHA512e7f0494e900656629b646bacf0f09597326bb08acd3100aa191c9cda68a2f356dae2cce3519115e214263afa1d230fb3c4459d175ef5893e75342c8c5677386f
-
Filesize
8KB
MD512e0ae95dc16999d9b4a85224ce335d4
SHA1bff04eb353bf18c126e32c4b8fb10356b9968d07
SHA25685bcb318b0d1405f917ff6b185d804bb12b30c13a5f9247bae6c37f993dd44b0
SHA512c76596a6e00a9dc1fc0afc92baf65e74089ac5a03f160167d0f0a3016d086e2658da1be4fdbf5edead622d668414d85b65cf8a6bc3f9cf120b0a713479e3404e
-
Filesize
8KB
MD5f5c8022cb9c754aadb5970b0da8ce364
SHA1dab602e6ae7961bf8bb59426eb628e4d0a1c3421
SHA256e1f5cdb958c442af8775b2999daef74f061255b8ea9cb7dc3182e0ac240cf0d1
SHA5128e8f94151a1d4fcde84252cc65ed54a75f4ef10736ee2bb4a5bd5c91406ac917bf65ded536f9d258d46732a6cb0549a6486f241108278fad1725b648a649fd2c
-
Filesize
12KB
MD5396e2ad571041333ac811a2ed1c9c042
SHA12e62f42f0034f6c0d3f6c98ac6f57e38342fe568
SHA256307af478e12fe62141cfdbd07dc822aa333af958e78dbd7a7b4ecb9847387bd7
SHA5124c2e2ed342029b6edc10d7a55ae20e88357812f515e94d4e21e626f9ef5201cd96aea79f4d48185cb27594c00b2902a5f2c028791b72bc90e57de15c8d7edd96
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD59aee3bc9ad7e17ebd70cd83640b07591
SHA17eefd6eef1576fc0ecd0f28fc9ad6ad220eb3247
SHA256b66f7d84f719236a43c7d930880cba7c946f414cd7a5f00e0214090ab1d238e4
SHA512a99ca0b90ba4261a1fac5226f3130ac5cd6fecd722555757808b53e4f510ba3a5184f36d04196cf2df96def0192bfc1124f93c4d1c84a3fcd69280e55784cb53
-
Filesize
16KB
MD5aac8156ca9afdbcd4f7031a4a1f8e4f9
SHA1dbc743318835dabd95811cf674c40a3cae632659
SHA256692369d26287862bce952b59d8bda2ff49d692e515b190bcabe89245e012e599
SHA51257e538ab0307e05a71aa2ecc9eaef0e36d1e757487365db744f9e767ad8d2ed392d35c683704b6d4bb6834c066e0c0b60cb855f6cadd814fd4ffa1f67a437f25
-
Filesize
16KB
MD5a9b29c8ac8f827eb0224f333fa081d78
SHA1fc2db16cd81dde08c52d72797c8ff119abfdd2e3
SHA2566194c5cf16401c215b8e63d10b9dd75d230aa8737e0d7b5404b06b7f87239055
SHA512a033b016767d6c78a071c6febf407bdd7361ce84d9253413853d1fd8ba997f4f8c78f3991ee3e5f05793d3ec1b38dc4b740c9c821a46cf1d842cae073b3a6023
-
Filesize
16KB
MD5acc478f0649da1b9bfc5cf0d1b571777
SHA13ef847cec71a10538a1d7c760b3214e6e7774f58
SHA256c83ca26d2e451f881ab5e3a9dc19bb1351e4477b487e8ce06108304925a0b636
SHA51214827fa6970047a18dc5318028c20173da9ba3b3f44280dc52fcf6b47867c5456ad2158cfba74fd91669fd5735626e64954a63785622ca33ec83833d6ed6d47c
-
Filesize
16KB
MD5eda96559b53540b070e486f526a4cacc
SHA1ace2f4645a2297d178ff849a13c95b9432445307
SHA256b535b1cc36838c013324c98e411f043cba25a911479a14bf498ccd52a51b3968
SHA512438403f921348431cd8fd0cecf380868e2dade89978c25a038b86447017a3c04f78f3f1ff9ff610cb1adb12919854ca66656918526333896ef39e6a2502133ae
-
Filesize
512B
MD560d280a70299ee3081bc3d387a10a628
SHA19ae4de7a238b61825a6ca39f77411b4041e3a375
SHA2565d1165dc53317500fee9d97b266bcd84a22ec5d28dc917a970d78bba1db5f159
SHA51212bef6d0f315f90b93287bb7ad8b660562eee782ff0600c124beba7c55d02ca166e4400ba1cfcc743601784dd301b01f445480d78fbf512a23968624f6a21ae9
-
Filesize
8KB
MD596611e48067dc12e0eb228f1d402d467
SHA1a1333378051b5bccb08079a3454a0f75338289fa
SHA2569ada4f47e32822c680ef8381511d2048f782effc78f23247cff67841347ff21e
SHA512dfc09654d9dd94b8ff4e75830fa8ff6e0439b82025d10e21c34816d56295593f1eb586aa93fa7edbb9d3576f073ed7c7d5f1b510b4aa551476f199811e7fdc1d
-
Filesize
4KB
MD55d7e60ab49bf644928cee738252f84e1
SHA104c63e461d5929457a0e221be1dea5ff921a669b
SHA256dec9351f18d48cde9f378a35b57ccc7fa411978ef72eb0d28eaa6b65366d9fa0
SHA512060f4971168964406505c0f1886a1eed0896abb61c15e0fe33a4b68bf7afe0bd4b9019f30e466f54b590865abafe0f124007f898936b99f3a96b2d132d93e32c
-
Filesize
8KB
MD542fb8144433faf529f10e4d063636cb1
SHA18daff71997331c3cb6192a25bf40947d88cf6838
SHA2566fbbcfa2d3ab80c74ed3b771d4c764ccece42175c952b9ddf9e412de3499ad73
SHA51279349801393264e4f7bda24df3cb28abda39996d9978a6c8651728a6bbd0a5320f5c0b88e22e7f3b24178dac9cf3062891b63113a5fd68d9939dc5a02595a88d
-
Filesize
8KB
MD5c0105d070bfe9f60f02301d529960248
SHA14086a981d95b76a153ccab7cafafd4fbf3e37567
SHA25663fbe27fe7c7f9d3e87cf55269676d14b388d3da92ffa62842a0f79ea1537403
SHA512abd3cd3c83e911058525f69fe610b9004528d6596c922387f413adf6d444b2df4c437864d3d8ea5d1d3ab22adc980a1659664678d2a34ebe8c7e22fe82191602
-
Filesize
8KB
MD517d8a704aa828db1949239e14c3f4ede
SHA1f69e67cb25b5d3efb0264b5a397c80ba8f1eee3b
SHA256011c8b1d382ec69a9f8df9ed3b0062f520f9ab6503b846b455ee2341e837359c
SHA512ced0b93f5c231735588b0b154dd70074ba2d19235188ebf931ab4e7487836887d214015b1fb81ed114c2a5c4ad0beeaf29df89b8531ac276ae77df6077245eb3
-
Filesize
710B
MD591b9ccd4091dcbccd2c03c4ae31b3ed2
SHA1028f7b7b124788058559b2faec5486c5c96e0714
SHA25620528263872c64a995501246860ad0d22226d3de064873d8c18a1db9334f5f18
SHA5122865114c65d347fca2db19eb1a1fe50925d134652f6bcec3ede5c0ef0a7e61d70457455434268ef447b041d4ccdd64133fa361da5af476699163f05302bd1b16
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6629C4FB0224000113B173188464D6C0.temp
Filesize433B
MD5ba0f4911e184d6532785e50ee0b10e7f
SHA117d3446140429e02692f9b8542de78e3fffb4207
SHA256d7d6d74f2c262495cb195d7fa4b7e52e2747961270c2b43ae1371e27641c08f3
SHA512eb2b40e22a91d88d0539739b2acf3a8f5effc2a641871fa9cf4a445ee8c8cdc4e9f887479316766e0e3b9527cb14a24c980d37eac77c73c79305f9fd30bd3717
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6629C4FB0224000113B173188464D6C0.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/6629C4FB0224000113B173188464D6C0/report
Filesize733B
MD5f862d221f771d7342b5c981880e68822
SHA1c30a68841fb03a17ad0353e224a4e76eb11ab284
SHA256b73ca340ac72878c3c61382f4e048bf3ea2411b0dd2cbeb819e0c400869e330a
SHA512bc1d20c00a33574ba9f7f8a708b8b0efd089b05621133c38fac1c282e3eb167d57ce3048a3dd0c0af6070df2280d8b25991f3a4ab71a90e89a13034858d60185
-
Filesize
562B
MD5c5dad8c295cc8fbd5b5f0c76a4e68666
SHA173d62b12d556784b10b51a6c992cb7ef6e39fe91
SHA2566f7395c2149aed7f9ad94223b2520c2f4b9ec0db0356764b060a8381bf293618
SHA51280e1e3e9c916da41e9fc268569efc6572677577e4727b80ddf2355fb0c19cbdf195e4603bebcd22071a2a7c3f276ff41e340d8e315d51baf418a6e71b58a52e3
-
Filesize
90B
MD56aaeec5a0eb7b754f2a710fd0c26c4c7
SHA1592dde0bb10574cb4b8fe90fe67a1927b6713eaa
SHA256cec45ab4464cbcc1090418db1e48be38520c919f001ce63cb6c9633e0291abd8
SHA512a87a99833f01eef743627cb15d20665007f2610ad9e171cb1c9f79074f854da43e5e97ad2d2b10929102c715a6ac881f29680110e68bd41056f2b719967f2958
-
Filesize
36B
MD5acea4d2dbb8794080608354ee733b8b5
SHA108088b4ba520db649ffa0fc71a7d5474bc641cf7
SHA2569a4285f1e0b75e5bc799cc63d24671e28eee59a938b277fec29868ccd82bfa5e
SHA5125e3081782b765f92d97acf8d06a244858dcac9959892bd7add440aa55ccb4c43dc9a6787525dbcdd9b6a1d9d36ea7bbd760b207718e238c309b9ff6e24747085
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD50d013ccb0196e76c0336a5a3ad2dac57
SHA127cea594624bd1f02c9740d64ba5d1448d4259ab
SHA2565f57a533e68ba06de8bea5846e77c113ca066fb8ea5f27143a210632250cbda2
SHA512f47a67b8ebcd338f53db4b45e5eb269b13a0afd9b40c1a6a06c4ecbf402a7f87e502ffb28d6ab15372053452feafb162b22797c354364904ff34a58eb914870a
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD54cfa1b741d42a9276fa05b0d89693f9c
SHA1c4a68835d826f3a0ac099618d96367d1268bca6d
SHA256516504abc8e1f0bdccb9540a90cc4231fc6506f218073cd0fc1ad71f0e96c031
SHA5124a60f7ef7afb0f94ae1cc30d260ef9f14c095e9ccc075076a9bc97cdb85755ac54d04ea0568e261733e4c3eef8362308f96b4c8efd3000405007ace3795a4ec9
-
Filesize
108KB
MD5e2fd33eb3b50bc0677db41579dae183d
SHA1b9a7b209b68a74bf8b8a2361f132b4b2ba985bc5
SHA256ed048532cbcdd65869397f2d3f7ef9c9eacbc89106df494b9150284686c24a5f
SHA512db613f0bd94c00f91719cf9ca58bd351a8652d268eb724c3364d7b997ac1fc724b33776d6cb137e1f20146980b43715ce3d07ba1226c2d9e429230e26be11e91