Analysis
-
max time kernel
48s -
max time network
134s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
28-04-2024 02:09
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
Processes:
app.EasyLoggerdescription ioc process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
Processes:
app.EasyLoggerdescription ioc process URI accessed for read content://sms/ app.EasyLogger -
Acquires the wake lock 1 IoCs
Processes:
app.EasyLoggerdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
app.EasyLoggerdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5e7a2b9a10f2e97e6ba89f90e49963585
SHA113128f2772ab174cc886adbe1d5500e4258b08d0
SHA2567dcec741df200852e3796fc5c948b818e8eecd9016fd0924f11a5c5a4eb0911c
SHA5127e9b2f99f58e36541cb5cb2db159e837dd7b40ad49654f1a59eeb96b3c490d9796c01786dfdd3c39e9d3d52e8701d8cab0ff4b9133b6fe7f095eda0e17b01eec
-
Filesize
1KB
MD504279dcb9da4952a5e511c83be1c5c42
SHA1162bbfba30505f2f11268ddc014fbe72c28b5ef9
SHA25674fef2c99fded2b736a279dcaa70c28a77907f54972f2293a132bcb47a7801a0
SHA512942c56a72ed5eaffaf5dd28644ced99dd28ed0aff7132050c5161e8b145a286390fe558781b766959032d7f46921713be257a0711453a1cf1882ba7e429c2db8
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD528ffa356d544179e20d1765e85b853e6
SHA1d87587e44b43fe7429d0e0f427d864a486bb7106
SHA25672d334d0fa29952d4ad626d93d98fac613d19c795e7362245d0e2758b800664c
SHA512e7a5cc1d1a04a169fd5b7de67d4794300cfcf85f550f1eaf647e7b09169b07a3a115db962523800297121c59f712d6e21fa9b235d547c17edb2736dcb3125f30
-
Filesize
8KB
MD57983e714cdeb9d3ed57317f067f8d5c5
SHA1ef7179aadfc7e6371b7f161d394cb597e049eff1
SHA2566053b3bdd7a5a0caf51a83d275440bc75dac3690721dc3411fe79ea5b8da432a
SHA512a9bb7c3c5e084dbbf3b673594bc39f6371f3df3d00101cc4030728496a2ff0aefdfc6d02ace2a0d6cfbeaed4a4fc844784f666702d7445ebb2363cc696987e81
-
Filesize
8KB
MD5b199a0489cc8d428eac58b8b42da9a14
SHA17c419bd817e6166131e2a1739d43571795807bbf
SHA256c59c647c913443473c7514efcc6d6f57c2a1b8c27a54fbb968988234f6d01967
SHA512134cccb41167d093dde80c734cdf42617d173a3304d9f7fa34c7f1f40167dae46fbd376ac97d3026aa3be3ade8d8e0fbf4ae34098cb51f40fbabf8d2f994b367
-
Filesize
8KB
MD5b633978ec2b24846cd9eea1a3a574849
SHA1f04d1365f42b77d09dbf75bae07c9b3d515928b8
SHA2566094b7388c3a11907ad7a1471afff394cb5e7617994d875fd0b2072a173fec82
SHA512954da1c8fea21015a18265f5b34be6e9164563ea9e49f8f9e21e4386adca3449094d61a99e1cd63eae7f83f76318eaadbf9b135c0a5ce9dff1532e5582a523b2
-
Filesize
8KB
MD5ce94e30376c111b475549ff3259ff98f
SHA1f6089f663345273cd10dc1908f9939423262f176
SHA256028577f48658962a09cfbd049049ca6f680569aee98cbaa452d1ad6beabd8218
SHA5127c894e9c8bdcd01324bf6cd3070686f944afc8b4558b55112c6f583d22ecd4a17733698f5f7f7e43e6298d33eea46c839eafdf294dc0d79c44010777f0fb2b2a
-
Filesize
8KB
MD59908a9ca416a8192398e26ead2146a78
SHA162bd3f72861bc22db1226db47e62b3d3d4ef187a
SHA256073c50b8f51ecc423f9cb72f2c915cf6fb9136400eb67d4e6c7e61f2e740f3f5
SHA512175b327a957c8d25133c11a3dfe80ac9ea04a78ac4adf44263c173a5ac23d9c265cf45acfb752085e97688c6404eee7547e4f033c0ac32e446196d1512597b66
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
512B
MD5adb104230e8ae6e507327b2e12ac5e23
SHA142507a4ace9c173dfbcc4ca7c099199926f875cd
SHA2568894f4c36fa16f704588624962a136084eda86c65e24209350018bb6f3f49c66
SHA512c70d9c676c7b825bc961696cfe69bdfdb27f65e6c7c9b2ac9ada46947a5868b42fbd3245c86727e78baed766e6568d9c9b8cb5efd5808afed8436980790e78b1
-
Filesize
8KB
MD5c84cf4a8356b1c50cbae0740069de08c
SHA1e82f0d816677a37ab7f92a004eebeae77af9cd35
SHA2568a5977c62377af3bac919ade3907cbd7764b5c69c09dd2a3558ef0e4f20ccbe6
SHA51237d5f197b41575e672752540bde3212017fa8b225918c6791bb5b6c77aa15b36bf35369bbd90673b627eb5db642d7338ff6564b851b04af2e2e45c00d836d2cc
-
Filesize
8KB
MD53d518e4a5b57fb7f64aa8fcb8f82c00d
SHA13e9f28b44195cca053e2537c79bb793503c8c175
SHA2561b2bed7f2d3eb0cfbd63f2d269b43d5474172e2146f5370caea6329f3cec7bff
SHA5122be764fd55376619f8398c44e5a4b0356944a7c5db64cef2579839d8d0e6a0ee751239b6b649a49539ca5c96f70291d508d3cd8dfc052106e52f3799c9dc8d1e
-
Filesize
28KB
MD52944804001352cebf5feccdf01123f17
SHA16814b27ca9e56288836e009a9269e2c755806bfe
SHA256df9d34c7e0a77f791e794f1f6886024a71a3ecf9b46d370f6c9bce7a58b876e5
SHA51211da56c9c6f0b5b0b8423c439af3239c609561c545a98b7474e366cad88395a3a793f4c2076e347c0b8d01a081910e45f48265f712ba0765f767dc1c5206df88
-
Filesize
512B
MD5677924ccc5ef6bc45dfe37b22ba4cf2b
SHA17dc836c97b17cd9c992c9da94cc46692ffaf3044
SHA256e542476d09fc26bceaf22937a4137caabe0a0c7811c5a9f9b64903c060d639d0
SHA512dca17b2efc708187e47a6c1f0637e71f2c518e2fda28b7e14b549b782e8c5c8091eebbbe36d16b5de89816f5bb3289e46c0a870dc3391febfd4f33c4a656a918
-
Filesize
8KB
MD55cbe592ea121c24062cb6fe93ea2a31a
SHA11455638233e9d8382ec8aa4c2167417c6f159944
SHA256aee0c8337c20177ba43c817a8aa1bd16e71009d65e17328e69f7cb1b977f88ac
SHA512c955ac787fc0f171ca5988c535d165d0547ca25b14f99c8b4b6752f2ab636fedd70680105bb79f8833c6fd1e185452eb55d579a6402a1cd28aac757929861ad9
-
Filesize
4KB
MD5dfd396da94c7e715819cf6536aafd8aa
SHA10514f75193d1cbb8c3a1dc8beeff21ab9a73c37a
SHA2566a619bd0b9f3f5597729b633a155e2181046c1800ce3cf77a7e58d79031b7367
SHA51261c623cbc70905aabc0c1889d10cd7879af5dacc3dc0ab8b33e4260a3df27360cc97e73273236994c0920951922b6028711598aa647cdd926a2e48bcf428ba3b
-
Filesize
8KB
MD5432b061b8fae027554f11f7277c3fd33
SHA1d9d3a73e0e2b96fc8b3c0b782ce086fd85d8ba5c
SHA2568b1c64a4adb6eb8ad809aab6285e50a8834b8ad1d86721cd3217ed6c7cfa0e17
SHA512271a66362530cd5b953e4dc014fbb73d35eb7af04d80d3d7e640117c45db84e937310572e2b9d13e74f307674bad4ca5b553ea2e2b9817a0a5942a16400ef2fd
-
Filesize
8KB
MD57b23f366becb0dd6e39788e2a75af84f
SHA199f843934942ba4f240ed1bd2300df22360b21aa
SHA2564ba03cff35ff42372f2e3110e149cf032069d364f5617a064adca8facbf2df38
SHA512912d17e645c61eaf2a4567b85800503a535860b657e7324f27b043e3746886328068c874596a98b9431c255b03f2a4c66265105213e07b0fdc1b08259e0927b2
-
Filesize
12KB
MD574467a12ac7d007cb50036514a405232
SHA1fb1686da731ef7b9324daa3cad6172e206b2e29b
SHA256227ce477f50420d5dc4923b78e196c24301bbd2ca66224aab80534d351a35bce
SHA5126e467bcdedcc36fa2ef7f70189553bd7d08e2472d9e7989c536f4680c829dd7617ed51bfdbbee70825b25a885f5586bb5373a6c663bf32c8465887cc8d66cd42
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD5efbf4c5c4bd786da53e2f703cadd6288
SHA155fc22351f6e956958d43e0e0cbf96b420800463
SHA256b4140bd9557fc54f8d5576913f305ed0bd07d88eacbc3a1b0a72efa9e1e341c5
SHA512b1b21fae883d706f6202a16d84b932afed230fbc62c250be8250d507b9e1461530dd7a5d5e639827b80ff4bbc3844ca7da4133de8fc1b6ac53f127b664e7580c
-
Filesize
16KB
MD565c366914d1f04250a1c05893945d0f7
SHA15a43dbf87600538c24f909b7bc96462c517cef38
SHA256c642030474fa8a35cfa1af29f783e9fc87a38b41dec8be478edb5f8aff512e78
SHA5127eba8b14de1cd730e48a17320b0157c7bd5f240921869aa9fc65f05018a302135b54421e062a417af0183aeda1aee42db171d25d4e12bd1e3e33513e8256ca14
-
Filesize
16KB
MD5ad998b562f282b2bb766e5a8b8641dbd
SHA155e7261deda1425ae7cfb017d7e300a5f18c7873
SHA2561c2543d9cedf570635aeffc77c7dd793d54d86735642b5012f7f841c07a39e98
SHA51229fdcee09b50b117586434f98b0aa35a0176b5c5c8f3a01d35bcd69dc9f0b8df008f3382feef4547f55342e00cc906a9b40ebfba3dc50a97122df07181366640
-
Filesize
16KB
MD5fc2963ac33749ef587399f805eeca78f
SHA1429aa6f7a5b04a7b85a50ebefd6e264993664a28
SHA256e2dfb2e01f72b23e8025fa1e3a146a73f524f1504dec9fe1d5142b0bc51cfd82
SHA512227cf33bc83616f4c9762498737de7042182c1492cf36024cf9a4ff6605668179e199ca6a22ac29ba5472cf2d944622e2764ae8f9a0fd6e91525b3eb7d33402b
-
Filesize
16KB
MD5a0325ff5668f4474177bf7958d70a597
SHA1f9471cda55083be6cbe3f62cfb230b2b317cc4de
SHA25671baa9bc34c3832c1b0a51c8aa3bf03424c6696ae37147861da52fcceaa0f688
SHA512c8365efeead343b31fbb858caae4f8b1b6c9fcfd04dadc3bf4e39a600eda4fc4540a727a023cd06bfc28374a21e0655cdb14a680e202383710823032c8fcbc26
-
Filesize
512B
MD5d940813e4c2b748d1e07876c8b613c2d
SHA180840adfd581d5c9c76e19ad4a52463a994c6a98
SHA2562e9a11ad466be9de1d459817d198e7c1c0b3fd9e7f7e2e75d7aaee36f81496a3
SHA512379ffee354bf9b6915e49d4deb6da50e10ef4b20c8b97676ed8cdb1bb714432f97396c4ce44cab37511efb4a2e9cba214652f530d2e59a415e187f00b0480f8f
-
Filesize
8KB
MD553675951c1775c339f183fcf500e2876
SHA1ee72b69f0324bc1b38abbd38165c9d5bc0ae2748
SHA256e2428971faeb861adfcf68c6a2b1c917138a8bdf9f61917885a06713837338e2
SHA5121530544e4ce86b4dca8a902f1733099169c6a9ec6bb30b7d2a96f0b68f723accdde3584f0fc282e5b0d89e4aaf0daf763c5ba28981388a8edeb769c7d696370b
-
Filesize
4KB
MD50cecd3826f6b568af61e3ffaa716b295
SHA108c05f0eb8ca9942b5aedc0a27188a2008738ff1
SHA256a5dcf7ffeceba6fd2111d858f1f08bfb3182abbcac073fe2fcca6c0310e0fc0d
SHA5121670f0c08cf902e1ebe190c80702536337882c1bb7fe02935bbfcfae494237423e73dcdac923a55ee01adcccee1760ae8fc3d398e855ae5a04870ed21bb571d8
-
Filesize
8KB
MD5f54b871033b6600b573d434f5bb064e5
SHA148503bfef355bee868d1b1d50fa5739cf378e4a1
SHA25667440c6b410e5609925e56a9ec927900de0a966e5f32abbd050933b44d7ee58d
SHA512f94fb4ba6e5e322e7b769a9ffed9b128f64457fd05c8753258d1e4687fb91d93fa38ce7e5133bc53b574afce08775f225087031dcd438be9ea928663fdbe826d
-
Filesize
8KB
MD5e01e07dc8aebff96b3350f391085d2a4
SHA1d13afd7d2750cb7b49af5ce719e0e9cd0b51a1cd
SHA256c7570dca650d9caf69b145054f521434cc2ed8fabf6600566a0475e232bf6fad
SHA512e0b1c7fd1b593c2a06eb95f5984979f29a84cad6610eabe4c28f86ca81bf26d26be062568c9740b279e143ca0e22d015095ecb2913d821c57ef538504e1a38b7
-
Filesize
8KB
MD5e9704fbbec4626878a44c1b64d5e5085
SHA11b540d178d398919b6166d4612df830deae266ae
SHA256c792d9a8f3ce0d91ac657618e01a1bd7af83367ab8967a88354f00438f5af38f
SHA512fa263681bd8e8170a2b32ee18b3ee5468c58188962739b54747e24f4d55fef7cb3f74ded8130c611f668f4211c0ae5dd34fca109bec05c69319bbf07cd7dd307
-
Filesize
710B
MD5744c7d45ddbf62b8582e0354d99be67f
SHA192d5adea66271ea0339c9e3f7ced5cb3f827229b
SHA25668d2676af39c3cabb930ddc9de94010d213025f7ef317b2c55d379329ba30374
SHA512f23bcf620c73568ed4a212aa22709d5016dfa1c760cc70b399163b275a79711a47e69a343b3b4d4403fd28eb208dc49b88e6db5d0299ee72a42e9b0d68431dbe
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-662DAFF3001200011168CB9C68876643.temp
Filesize438B
MD5ecdd4549094d974903afe7a94a9cb276
SHA10fa99411c7104d6631b801d02aa89a4889205fe7
SHA256510ad0750d02d4936c868af8f9b589672d01da941b4057faa2855d76e12039bc
SHA512d567ad247ccf8736f14ee72e21f7f9f65c0f3737c7e41beb403251ed542c1f96e2f1125ad8767f5c58b8ae8f8f709074a6309e9b8041737112c63c929e1245ed
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-662DAFF3001200011168CB9C68876643.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/662DAFF3001200011168CB9C68876643/report
Filesize733B
MD50e4a82bda4508fecdd6ad0ce7af3dcfa
SHA100c467b76636bea86de469c8ca136d93fb58eb51
SHA256ac5b57461c049d2dd7a82ddf1eebe683886b3002e57453cbdf733732e0323669
SHA5129c24165635aedc93d696ba0563bf9345e0c0abccf6127eb5a08a8bd36fc8d92705389df94853513a6f95a7f0c947318f6a94738fd9f3719f26cf82a938107038
-
Filesize
90B
MD52dc0a962b353bf9ed83968c57bf171de
SHA1167bc0dca3652542a2d3568d46f0f37b28adfb36
SHA256322cbf8cf650a47bf358456b32bc1e7ce4e0a2c0deeed6d59b79672cef16860b
SHA51219036bbad9406df0c6d60bb89726715eeaa9046aff4195661ba7e76bfee3f8b0f98a5ffd389dcd8b95cd5ca4a129c590d0c81976154128bbf87293547a7dc6ca
-
Filesize
561B
MD5b0148ab190da15ec94a52b076c6824af
SHA164e53fc442e85b761e80e068f7bc8e1a5e8597c4
SHA2566ea71de5fd2d4b97763270c9359b2b5fbdd5dec0f2a44cf4bed7417f0e029b9c
SHA512f68dad6ed15a94efc4eea5bad876d55f730e7aed0d86c3768744b7b968752a34419b3dcf3c80d1122f2e7755e0befda4307df9b2b985ce516b9e60b4ad67ec90
-
Filesize
36B
MD5003ba14bf06c2782ffef6f0c95564fe5
SHA19923f43e6594be20edfe5c6810e548b05167a70c
SHA256af9c882cbaa01553d16551a59508638d7e6345fc6c28b2832030c06452d585a4
SHA51269822ecc40fb077454ad027b6383d5a431192e0275fb12409078dd39e98b6c2da97ed397fd0a71b7d6ef3fdb77def315731d64a3096d0b423818a9ea7f535586
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD581f1822ee9ee606705009b659dc1bf23
SHA1480b5a2e98de2018f17de1ca6372ac278fdc62f2
SHA256e8f239aee029152875f554792c95b554ab29cb9754274355903eba98c1d5c1a5
SHA5126afa631fc6cd872e8f6925db20f27253776f4e47edf1af049b32f10b6545078b4507165ccd0bff2b9a4e90688a80c7649bdd3c27274ec94d6c7507aa06ff2452
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5a7646aa3ecdfe79c6e76e9e4db0933b4
SHA161e5e597703e27d760db1b68cbc4bea1a8676933
SHA256f8cebca8d5d01895eb94ece01d2cd43ea6203726cb787ac5805a168de120603a
SHA512358c6b115dd382e51ceab27f08d877971c8b2e0749d95e0c9d59bf29edb9d4c0d73b97f64c626f361053396bdee30baa25805b094718c57f1b1533568cd5291b
-
Filesize
108KB
MD5229efe04dabc55937f8891e777fbd72a
SHA1ee4fd5af454b6c5ee230c041bde7b00f3b1f6a96
SHA256d78d6786598e9b7a6cb615a0afbfa1369fa14e6da43c7218cec2060f13f0284a
SHA5127e21ef000e3c67ee54a59977e055aa1cfbc6955bca2c7e73b2ad884c2cb7ff34f8682715aab9e8935e22557d403202573536bd836dc162037dcb0fb7da6ada2a