Analysis
-
max time kernel
48s -
max time network
134s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
29-04-2024 01:59
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD573e02a4180e89f5260e7a12e9592745f
SHA1a25d3d956f878e4b8ce7b7ddd283fa43539b97dc
SHA2568627c3aede67510816684ffbbbab7c7955453c71dae9d8d071e49b9963856971
SHA512a1b09725e1c89e31c12c1bb7d1c7a1afce59d25bf4e814455b6aae3efe849f6ee482f1e6de1cde8f6f6a8fd0e11f48cc7d4184fd2dd0e1a33b29b79525dbcfc7
-
Filesize
1KB
MD54a10fd86594340a04de27683cf2e7762
SHA1bf845654cc159d08dae71da8e043ee435ab0fd9f
SHA256decced9c39341d93d308deb34ede75b6057e233cdd35aaf326453c80e59ef2d8
SHA512776989a13e69ecf9df58dbf242da818f9b1f6eb1854ebd4ec892a131aed403e1cb392cd65c5a610fbad658b29238588f400ca495c7bd2eb43d4694f81e22b29e
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD5be65c31a4770c16353ed564c863d8558
SHA1657d5b5c5b68cc22f6806669fefe2b3715f20e68
SHA256eb13b2a136443381d2877be80b71ed5de3be2335354e4d25000bbdf567fbfb18
SHA512226ebe9263d9fe088f23f84da8d6bb87b3e9b4777e5904c754ade97115728a5f3e47ce0a79d447d3e9cf811f88d15ef5f60e9293c56a734ef3a256868a6c33b2
-
Filesize
8KB
MD501d7eb7338da45593a7cf63d951c0b46
SHA16c2767edc6ee5c9e893901415ee673680ca676e1
SHA25605df7f83acd2b1c720d8142a763ed0e7ec96b68414672a78e05c96a681ee8b21
SHA512ee256c9a0d703df7fef992b259c6eb826c9e6db23e64be70a3519b802bc37b333a8f2a90a030f2db96ffa0155ee64b4e20f4fd6cb48f2e3a24875907b228b2ca
-
Filesize
8KB
MD5f99a9ef408a0e2be4e0a06bd7203acc8
SHA1eb32ec07a58f6edd3c531b1ac3cabfe7e49fa5dd
SHA256178a7359a365d77e7dbf29b784eb6695360d2f68bd5eef09fec0e81ed318b8ea
SHA5129da46d9cd7a42a7a50397a990172f8af933ab1bd7fc6058c46e495f3310a94d84d6cc931b0a65c7880d951fb57793c0f062c780b1139e784a11354ff415f1fde
-
Filesize
8KB
MD568bf1b65f48d820c78eda3e15d71bcbe
SHA119aad792b5e68357807ad422b2a767aa4942e6d3
SHA2560633b2be1efcc697f8b208f5a12b13009586d79467631d742119f41f43ee21de
SHA51294e506f7a30a152d4da9633b336d3b0a814f28c61e40f7fe093f553dc721dad5dee3ac54ec7ce71f02cb9f708bf78ea525acb120e4d1ad0b9b376acf68ce958e
-
Filesize
8KB
MD52e3adbc1ad2cdc843d43de604b6a31df
SHA1f6a42c1255334d8a6dfd7ed719ea5926cea4be85
SHA256adcea35415e5c3da89fc111f48985193df2dbb02a489d709cad943ddf8de481b
SHA5129b651d4a5b8ab4c37fab4a7547b50122ee3decdc7c465bfdf1c94214748ede53fdd170fbb7e885ef2c41a8e5645c3749dc4bd7fe43a3f1cf541e670fe6014b1a
-
Filesize
8KB
MD535f119c86533f36e4daefe719bf2dc4c
SHA12e69cd5e8ba0eb082e08452a7079b7a6220e26ba
SHA256bef2d720ccdf5cc772a15d4de73f92124c58f1c4d3054f0d23f138ff7ce8a5dd
SHA512b41cdeba3d14755d4d9bfee37dfed354b34db08c0e90d4f1337085819a87e2247f5d8a0a7c8fe108cf704549e4163db00743a5b4dfa73f781fbf9fa2fc1db5ab
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
512B
MD599dc252247ffe959a1c381de81dd92a7
SHA1bc1d122de59db7657d37dbad24671a1135f3c001
SHA2566446b89714ac25f7260a8f83b606c7d20e163c817c54fd7e8151f6b7057df1a8
SHA5121766f37e26292dc4e2d963c51079b2b98af2bc19e22b7133c080057fdb4185745ccd0b480c801ad6b79a53de2c09b8c1dae4ae08fa62e4c8466fc0f6e002e0b1
-
Filesize
8KB
MD53563776ba50044bdf4f23e1ef605eadc
SHA1aa6d2d976a71d94a13a25ea7796c8637d486c1cc
SHA256aca7df02b86f00d300260c43e358bca2904908503a11a2d45d0e36026d3ca11f
SHA512aa076a818b3e2d9ea68a9eab4bf06833786b951649684b8afd4114663c8af6af96d04126e0f366722ac1f6bb31f7f865f2eae67e3682c555d96d83d4b0cdba77
-
Filesize
8KB
MD51b40493007be5355a69c643720c3f39e
SHA12e4be2c1db9b65349fb393dc0fb325ae03f38ae5
SHA2563d993e826ad53e5a1d9ce162a759fc6909013b60130fd392afe1b472ed3871a1
SHA5126ec86791377e372f4093b6157ed0917047b0dd226d7ee7bace26bba49d1c2ac0470b771f87e87bc1648fbacb84bbd9036b3e1552fcf21c78e387251eac4b659c
-
Filesize
28KB
MD56050e5c67e1b4370c182cc8bd9372d31
SHA17b00022e0a5853d3f1fd080e23db9df7524eb920
SHA256aabd2900bb7fb4c2baf194e1c5e2e0dfe64a69a42c8cedf750ced85b9ff07125
SHA5128a96ee714b43c5e6566c5ed3dd8b87f20ce4eec3833f39ad37ffc067836be69029d3e6cb591b6b68852648d055a6aa77e6887a1aa3b7b45fedc4737ebdeccb13
-
Filesize
512B
MD56c255d03ff719bac3e22d30f129c6109
SHA1d5d46d476a9365a4268d8c49cec7731c8b66fe90
SHA256bb0f4a224118eb0b3ed9e50e47cdff512812759ad62cca4e8c3a34f62ff67cce
SHA5123d59e5120206eb072573e1fdac148139e3f8fad26d783cc9ddf6f98d08785106eb81a6b19f346f84f4a730e40ee600322b945bc9bda93f2cf496edc6164fd3fc
-
Filesize
8KB
MD544b4b9b590771436d53a80bcea75dec7
SHA12df0d56b8055184c24009a75852681065298f3a8
SHA25698ebea6b81ec661858fcebd4070298078171516bcb671b5f0f9271f7b54242d1
SHA512e2e8cf4604baf96337c647d12af29a73fb058d81fac423f0c2c691c59d00c3d3dab2ce33fe8c1a037cc3d425d9d6b85cf89fae745c253b93a45eef0a5bb2fcf3
-
Filesize
4KB
MD520caf4bff51134aa9268a7452143ea1f
SHA113c8b1b9a1073c1afbbe4824581010ec665400b7
SHA256a5cc5a23b28afaad1739491d3c753e8f711c18b343378a80184513f361db8737
SHA5126161512ed7692b8a0f194f11dfd2dfcda5a9ec50e225f5541632e9ed864240f1daeabce21b7572dbda79361c05c8d5ef5da89632c77bc5fb11027789ca0c5290
-
Filesize
8KB
MD5f8725c32f6c72747bca2352545b8a3ba
SHA121a779d9a55a7bfeb0a441e3023c65e5b80b4f32
SHA2562681cc6bbdcfe2922a14cc4107dc7ba42923f435763eef3d319142917fe88621
SHA512acc35f124b5d2d7fce021792b5d3ef9b3c245d039ebb966807bee2d76472a4dbd92eb6be2bd42446819921c9fe3473a1312c139122499f638c63461cfef03552
-
Filesize
8KB
MD5eb117ebace01ca46c58a5ab679a82286
SHA12310cb5565a7a7df4df5b9113ba15d1a164f0b8a
SHA256af374ffd44bc43a49ce6dff3a43a01a10b2ba91600f713a6658d3ac555d98bad
SHA51281d31d6fb673723143a6fe4c485dbe791f11882cca33989e02e84b99df20e933a0fef8759412e54a43c04a183f49060ae9bd70ff3b43df3e61474a6517a9c330
-
Filesize
12KB
MD59c9bcf63bf9d2426144ce3eb9ea8174a
SHA1ce148f6204b50171d19524f2629070f08a0ba957
SHA2565b38711bb5c854fae9f062a8d08d61740ba43f249ebc5f7748b7ab69d94b5a79
SHA512926705477162868a0ad875e7dc0ca4daf59cff3310e7866a3a927612cd3a5e362ac2ef968e0cb6649e2d2e4bf108570f864da2b0ef560805bc4e6d9d03f0286c
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD56f644b48298ca6e0b16fbc19fdd53e42
SHA180a84226a46cfa608421ab2d1b8d5980ee850719
SHA256accc24a376b49d72104e290195c6ef50daf75f1487863114babec25058787950
SHA5124ef20931a67ef6d002f98ca9c656a6cc6e21a19f051cef91eb0c097a17926f2730db53930b992c4be3adc3c7865ff2a3b028e74afdb03e8c5f3923f15ffe5f5a
-
Filesize
16KB
MD5a0b494f28e9217f82d18e3977ff8895a
SHA1c7a32f3b93922442789f0410b4b7080fc7ccbb7d
SHA25612257fd526981900018e31d5f2bd86f3f2c034c452700d1fd834f5b2c226952c
SHA51217ab5501dac626c1c6a82f622687bed95ad04c6164ee0ec05e7cc855fbb65e477868498356eff02f0b71c01dc5f97961fc47f1bd82e2565c524a71790cc67d68
-
Filesize
16KB
MD580465f064428500d0dd1903c2abc9ee3
SHA1040572a9f384696dc026de49d975f37a19e5c94c
SHA256586667504890a4517683ad986e12f57b2afc73bfa38c95e98086bcf941c2f7f9
SHA51281bbf67daef67c3f6b85d3b7102187e8a93a6410c50e6b8ed609531144186c19337243d070b0730b952c92b3a249cefd839c404fdb7f832778f77115c0e2bdfd
-
Filesize
16KB
MD5a9355badeb127e57b661e4f58d01a496
SHA1cbc5eb7d17a66b4b2becca0832102fa4be069872
SHA25666c664aeba5268237aeabc6309cfddccbf7a7912876cd5f15c68e59b136d3131
SHA512354ebeab8ab34d7e71a24e602bd216c82b6b370d198850b91a441f8c4aba0a62030a3f9f65aaba00a9bcfacc52b5bc56d47ba10bcf892209281c761d7046528e
-
Filesize
16KB
MD5c6de019a93b8a298c139021e0283ba5a
SHA150dc2c6c159ffd1142b0227eb079e94e90964692
SHA256bffd2c611a545c2a706cfde42b9a0ec3e42a0d439b29dde7b97f04585eeec3d0
SHA51214001d11deb208c3c9a2a2261fcc6890df0979a120fa7fd71983e03f04d763efaeb4cccc517f58e4640393e1a01f93955f9436a5b78eb05812cd81dc67c13b1e
-
Filesize
512B
MD50540a1efab7e16fbed8b78fd87f81569
SHA10c4f5f4364bc835c2d58918d210d3d89dc17d8bb
SHA256172fd0d021c8a8521d35929d551a6fd3eaeeb836c81d054585d8786691041e3e
SHA51281e0ba7f58a7d57c4ef0a4b3d516c22e37d30c905840dee9a10201ab5536657ba8085184041fd3b3835735d253287a604113e6013be7aba36016d7bd6f530e6f
-
Filesize
8KB
MD51e1e4c5d0a743c2a37c878278555da0b
SHA1ec8198b65da6ade24f4c555a5225cac1f20080bb
SHA256c309c65e6798a63c638b10beec797f5a21cd0404f4677ef5328d37d8682cb6b6
SHA512fbe5cc984fde5544729657577536f88b936d5248074638c5e61a41b5fa58992db120400e4505dcd789352b343b96ae787c97312f83b3d8bcf7cf452e5ed39840
-
Filesize
4KB
MD5d5cb8025d59190e31f644a8bd4e78d79
SHA1bd12e869f3ecf9bd73852373fce0b07abb80ed67
SHA256707cf0e8d461a84400b12f47f372d74e02677b1b26da1fc8763a162e9ac5f008
SHA51276a1bdaabe79fa9c243dc6e3d7e0dc9147df90ccd4eb19710850699ef3ef68762fe6399f414d0544a2e824b7457b247c69ac8ed1187b173c6000f24db808d08c
-
Filesize
8KB
MD5e9b1e208d982253a68833f83b4214164
SHA10c3f4c818334e2f1e2089b5d3a0630bba995ec2f
SHA25639500bb900340dab27c46fc82c036c8bc8708eb37f864a570d15fb264cb26053
SHA5125cf771b2be95cabbd60e8beaa6c627acc6cf3c677ab5df7f8bb3d553d5f640fa6d3fcf7c6c50e023e495b51312e0dbb0604871f852c5213544ccf1b9a9625f98
-
Filesize
8KB
MD5a879380aa4d7539c07cb4f97036d1556
SHA19600d5c1acb321b3181c1a946e3297877f7a12eb
SHA2561751dbff3086d3ef6b83f51fab3e0a4d4962c6c4755ae00bb5846b1bae6891c5
SHA51202f212ab448373a37b95b42a8e72bdbd4b91b5a0a4acee75ae8681fdb8e0add0643199fd6e59da68732c54e1bd341a92da0d6df64f30213e48e89b99e5d70c11
-
Filesize
8KB
MD5962c0e6b7a00bbed5b5353b5b01585f1
SHA193620ac9cf54aab821d760ba53953911c3276fcd
SHA25695f6372f986f171281c60264b20b23660ea02bf5c9d904bb346eb4ddae350588
SHA512abb49c41b3684326b8577d3aa331f9969dc04cf90c55423399a9f46d43f5eaec95ec5e7da1d31f504ce3d5e7f10256d4fde4494b9087b95e4d998c74e473d44f
-
Filesize
710B
MD5dda99f0d840b309f18308e284a60b30d
SHA104a4dc041e2ba2f4b41518a03a17f0169698c1b5
SHA256a42925ad9a45da33ee6b4c33d5b55bf8572e5347108cf32df84419f42ebd107a
SHA512ef13687b20a732b3075d209da87145d7ce445c22a4cad1d00f13665db8c112886e12581b34f655868214a99ba8114e3a8006a10697483eba8833897139b7a386
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-662EFEFC006F00011136DD3880246F0D.temp
Filesize442B
MD5d7f081e2165b5cbfe9f22596eb8304f8
SHA180f4f00f251d61f332191cd75455cbaf37d92ae4
SHA25680318453070a7e9176d7b4bc860af415c5217d42569d8cfcb1cf88ef682e6f8a
SHA5120c5cdb24c38004ae597c145011a67d3023ae3c9e961f03f5582b4acfcd038b8b2f5eabd6ce9b698e6cc3ba27be4358b93ff3e9190afb072b40c9430416cbcd3c
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-662EFEFC006F00011136DD3880246F0D.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/662EFEFC006F00011136DD3880246F0D/report
Filesize733B
MD5cef6415da9daa4999448721432a49390
SHA1cd3c5b4d94bf828def6ce288e43cc49249db54a0
SHA2569725c7b6aadd81230f79282c7886481ce41f995c383ba22c96d0a1ae2e4def9e
SHA512017d60fa2b086c686248251df3bf30b33eca22944fda900c8f0e721677496e032b099105d7afc94205407c8ad211271919057adadf1c1a19b7d6caa56cf8f874
-
Filesize
565B
MD5d142e7195275f788cfb73083f4077e0a
SHA1f766acb9103cbc304bf612e8706928e8062c147d
SHA256ad513a839b02864fd642e6497d403b28b884ea291091c23bcd343591cd40f306
SHA5123dd16042bb47021bb4830cddfb87296ce37b206b60fbb8a7e5af695caccc65909694055f985cb14cfa9580ec855e1d398c2ceaede0a92181abc2db19e7293386
-
Filesize
90B
MD5a4cf75a3e32129370f392fe642e2e328
SHA11624bde588fbfba79e843acc1341d67a2db751bf
SHA256a088d0af4ef9d327a9ff28e933f71fcf7e09b20a14c826b0f8b08246394d2ecc
SHA51211ae1d838325c4ff8f0f486044d43934281542974509bbcc1e61fb642b52c4e16d7544b64346e040c123d297564a692191db0ba7dc681485b4a5fda678610abb
-
Filesize
36B
MD55e78ab9912d6ed647a440651aebdd287
SHA14c7beba202ad70b464f2483719325e52dd1ee282
SHA256af79433159fcf2e8663d753f2d97afbf8c3a94d295552fce1bff03adefcaf6ac
SHA5122f6bdba8ec0e783817f6e37a0bbab02596e29535392c95c287c95b969f2a3fdaaa8e65e12c9ede5c909fafc2d9596f41c58bbd3c78bfa3776d9fa823fb35aa8f
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD569b96100fb419314f8c6b7226aa74d0e
SHA1b1b621600e124a058fd38825dc13bff3824321ce
SHA256022ae292fb8cac8ec6a0e06a3fb1c45c2f7a6759b625c9ef2ee22458734226b0
SHA512fba4cdd8c3792813bc53f09c5ebb1dab3c9d0fb9a514239c641cd0632214091a111e66239e523db6c8fea39139b648fbaa15e89a4c9ef602ca15c96eb22a8061
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD586b023543526c439225a01cb56060217
SHA13ca57327baa65f8856b2de80ad575bae35387462
SHA2561696e6cfed4de1d196bbf263a3a794473ba7318555bc53ca54fe2bc4e0d2b1f4
SHA512dd6420c7f519d2fe493bb33cef6311afd4e377e5f2d9e8b2d4d20274a8d5935321be195363c0c7129944288877e77263d23aded7ea2853592fbffa217288dd71
-
Filesize
108KB
MD5d7c73138813bc89e29a5a15d7ad68c13
SHA1e34ae87178c1b2fff49ad1461a203f48909067c9
SHA2568e4a78de15d5bd5d507a43a1e3070f95aeabf9ad6427daf2fb30420125536faf
SHA5126c54e5675181db1bfebfddfa86028d2fefdc240d0fd762a20adac1ef58f6633bb58243eadaafa9832a977120ade99847b0d1c6adb00a2887e9fa6db3563402d0