Analysis
-
max time kernel
48s -
max time network
134s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
30-04-2024 02:09
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD52cc672f92a1bd7b707b884a2975bac86
SHA11a65d819c24ccde075a49969460ac0c12a26b19b
SHA25608d9f55d8628a169f09da1220da7b88c9f50a790fc025a5f0f56a639584a485a
SHA512dbe719d782dca065437a408e38e093860fd925dabe1febb9aaedeba9af2a4bbd8cb829cd1a2c20bb7b0b1010d0eb91cbde6072058624a6dff64b5bc40e400079
-
Filesize
1KB
MD5ea0c0ab768a80780b3a4513c6b9ff35d
SHA10bf7f0af66143f4fbc9c039bc0a83fb2f9ba87a3
SHA256da21c5befa5640bd01c0641ee7cb6b64c1cbbd2e29e8fac2484231ad8764a91b
SHA5123a7e7f51cc4756538fabb955c73e709cd1c195c361cb1b24c2fdec6aa66123668627cbba0f25e5ff27cebdd7e6ae1b72e34c8526d44c89889a9a8e3b63c36d11
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD52407ca0e6841e8e688e67129cb9b3710
SHA160c0eb6b1db96f43efdec2cbdf1a529f49bc654a
SHA256d45e001ac0f358f025e2657b99b7cdc49ef1357aeaf8000cacdcbc2db1d78873
SHA51224cda35342cceb18e8244a0ec7448ccdf98c922bc2e4e91da5605938319783db43edafe209d96aec03c233cdebcda2decd4b4092ccf494dc9bb5f7c0a8442c79
-
Filesize
8KB
MD5a48081e21c9c3a5d1c430451f241e57b
SHA18dc5312775054d06d2b08f29d78a33bfec540e64
SHA2565991b5ae5fa1168e64caa88414c79dbded498ba69fe009e39e1b4b31c0abf15b
SHA512883999bdbecf92b7310c26b9cd2f9a71feb44c7424abec56977524a8b606b73c96032eea9289da542a07911053397051fa92ebb2e4e72b91093341f56b8a6851
-
Filesize
8KB
MD5510e0094bf6e4afd9fea84db7143c3dc
SHA15de34638a6d181b82810b691c5b16d65434107c3
SHA2567bc4fdf5aacb57c74a61d470471aa0b01e242b15a990b28c06bfe2a058d7f336
SHA512f52486d3a048d37e7c8a2c57aa39b9e87d5ddd0ee256709b506ad7a13437e19d1c95e9e14e97fb21f4b7407a2787abe30499decdbddf7291043abf77dc0bbc01
-
Filesize
8KB
MD5f362116c89683e5337dc94726f9e9225
SHA1cf0af46302bef9ffd3f0aa6f712f281bacb30109
SHA256f7f72d041cdfed3348b4ca29ce6e0538672997b9a4fdb665b45a373923fe896d
SHA512c007dcc4cb6ba62846a61d9544495566f073697b08111de0b92839d187d965d7099efaad5c4aa5978c7b8fda5b185aaff27269388897c03487c71c66d01890e4
-
Filesize
8KB
MD533bd95424a02a332700dc16c72b89b8f
SHA1eb3eeb430c1b11d35cff342d15f94d8f3a7cb61d
SHA25697fb861179c8c69e2f61babfd0816e295aea79088c9e2aa8fac307265d4c2e0c
SHA512d6ae5f186c1b7b24dc3f2f620c025bf24bd13f60580565dba5a699fce417e39f63b93c6790013c9ff25a67cebcd6a69571267c8d1f6fa5bf2ebcab37c2f208fc
-
Filesize
8KB
MD500594b2b231fad7acc54a3fdfa7f4e74
SHA1797c1a01dced99c2c02352389dca198510c214bd
SHA2566aa257cff3b2152fcea0a383da8c8587eb187bc4eb10a91541095ad8023bcce7
SHA5128fe71f8c122d7b548c041c80cd4805067b6d7065b965dda7a264a63969f67ae8ff883add4d6267e451289e0628bf0a6e4a9b35c9b00cbeaa7a89a23dfb73d998
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
8KB
MD578fb88e5d6749dab177712027607dbf3
SHA1574eae12c70816af115df43c8854862f01645335
SHA256c24ced2e8b5b819dd1ae088c4ee74ad74a5b805277e7100c91fbfdfc119a9df1
SHA512a8ba5216d8c1b0763a233fcc7c6ed9dcf577d8de11d0df17da4df3a6a45f4f467138c77c11884d121de428fa38a9ccbcaa02b2c9696e3cc01474a5958b484990
-
Filesize
512B
MD5dd369d7667213a4863907524aea2af56
SHA1563b7939de6b4e2f5fe5a65901ea8f509bf11286
SHA256ce6abbcd115172abda1d76673bc000f735751767f02f7ea65df0ba9a2dcd68ae
SHA512569f2803a1145c92ecb95f717a7be49953c34e2cf91f0d21e1ebe7cc04a27d4088fbc38f2a9bfa746785212e0a1aa65205133bfdab69586bb7997d0557c5749a
-
Filesize
8KB
MD544ba906ff892d1f80b9816cfad937b60
SHA1f9501219f38371e707f67976b0b16b22e475a158
SHA25651e554240abd9fc117575af622f26b9898c27a52f64c7ec41719cb250864424f
SHA512b4254b34918b6d25bb12ad4ce899e9d02d5406b71d414714167eb2e96b744f68201f58c44282850c5356a7f2efbbb956ee845367f0f0ee5ced55a25057e794c5
-
Filesize
28KB
MD516dc2ea4232b63962132990e2a83cd42
SHA1c2fcad1112239899e5e98050eb2fe66509830a38
SHA2569b019956a744bc482b4e48f5f5d7f031fc873d6ee68cadfcc1ea4c34c9c20a3e
SHA512628103f593b42f167d2f6a21c2e8b11d118673ed42f4bb585187b46e1ea27297c918469b1501c36a6dea65bcee76c1de49ca92be31e0728d1d9a6d6c91c47cb8
-
Filesize
512B
MD5f9c0dedc3f6e452e025e24aaed8c9744
SHA10d0a58b5ba63e9cbb440c0231fa198bde926eccf
SHA25637345d45b9883c6f1329d41a67913ad62a140ec687e979d231913f086cf8b130
SHA51246e086eabfe1f18dca52d076b4ab1fd08a0018ccd75d3c104cf6bbafae817c17b5fc8e0b781022c63084391c280809752c1dd4f3e026cf9f5b7f233ff0d4ab06
-
Filesize
8KB
MD5204d54d95a3b2e0460848060edebd955
SHA177b179f1cfbd3266dc5affc709cd77ad3b0bb301
SHA256295f046a6b67e3e043d26644c3400816f2d9255e7eb9fbafef182f78fbbdff67
SHA512d3685b7408e281a9b49a8fca5143f43de2320c667e6521a17b930e52ecfab99348f0600d61383ca9098d1ede31c67c7457711608699fec07cf6d858bb0174af3
-
Filesize
4KB
MD500356d15b352faab057cd2d7e08711e4
SHA1630da2ad716d08016bfa0d29a988f624bc50acb4
SHA256c79a3c8418aa58915bceb21ba8a0813bc03c9ad099fd53dcc7bc85c665b54009
SHA51262bec8448db4d60a6726711cc95a9634b8253b757337647f4fb16cedf3014da0a0d5e080da91a738e36eaa005115089699a681b3b160aa23e67420dfe9ae47d9
-
Filesize
8KB
MD573cf7f8c2df118a6cf9384a8625ed6d8
SHA141cc0f677021ac140aa7ab8fdc88d4e234e4e5b6
SHA256480e27128eeffb716dba5663aa4ce43da47b18840021aed3c4284fcd6bd9b089
SHA512d87283fc7701b356c00e76f8b780ac09062689a1cab764bd010ec10bc5655d356aeb87a83c43e0d5b83c999156c4925e3f12d0efd68bf36219f522b6b013d325
-
Filesize
8KB
MD5c4cc31171183efe2bda36d0043475296
SHA1bfac25fa01a6e6c1100727aa5bb10eb749655f94
SHA2565a9848f9e11d366e41bfdaacf4a530ec56aa64481e156a2d54668a8911640da4
SHA512fcb14bc13311e0ed4604fc37f89ae0a915b60ec1ded627f4138b6b05eb049255dc553e8ea5b4bcf3491bcfee2993076f22b1235a9ef3a9492289df1e08ac4fb5
-
Filesize
12KB
MD579cb927885c8950d1ef78dd8c0eab6aa
SHA1baff9d1dcda5ec32947a059c038b6cc7084fa7f1
SHA256ff75dcae6b97b866d77e753d58be451496a967656a8bef697eb5a7494fc7e332
SHA51258b84383d7e30ab6cf15ea2dfa5e87d46d48531b8d73431c16b0730a3d3de38ad882fc9b33ad7f388eba64a0c4fcac93165c04fdc1ef1afa954493dd088ca32f
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD5d25cee8ce2276e090249ef05099c2526
SHA16bcf89dee8bbbedacb455aa85d18b19d5fc1420d
SHA2567fd06c81f676266e30646a6db7042d28b706580ff9fc7c3566343aa1c221b562
SHA5122d078af32cefa2dceed5332aa721ab92f7c890cd33ee8ce8fb594cee6cb3b65a79de6da82ed892b1fa0a33b3b162bf285f760c2529584edb9c3924753bf9582b
-
Filesize
16KB
MD5fcc79d2d2bcb67fe98cf63a0e3994338
SHA1c7bd6e60b6871bfaba9736f7016f63010e06908d
SHA256b2e4682ae4db8034e27381af4277965cec585ca6408748351bdec8f8f2b5d25a
SHA512df0729a27f57911cb32451c7dd9076d3e0ef3a60cd71312423d8dca235cc59130c31479ca822ea8ab3f140cb19d962741df4b2730169be2af3409617331cf041
-
Filesize
16KB
MD57ca7e0d6a034424d5b28b151908fb39b
SHA15a3b2dd3b0883a20739d7e041dea5f94d83b55b6
SHA256d680a91f406164c8008b9b210391fbe1a8f4a35e242541cbb6bd4d6441a58b53
SHA512249f8b980601d5f22cf1d34ac5ee71995655123e9d322632be94cda7117ea4ac74b50c76e4e7a2d1ab85b7c1a3fb307137ae66fb3ed62748be3656c041e91a51
-
Filesize
16KB
MD535cfd50b90f7e2fa6b9b5320547af7f5
SHA1b738e79c35dfa498b854860f811ca0e8f188040c
SHA2565ce4636b3e73683b27ea96e6bb567e5cead1f5593b99772d187fa8b437060591
SHA512b577cfd81f513b1b1eb487486d5be5b57d77b9bbe70bd76e8607e1835fc8c8ff9e0fe1e8928c512959a55add83596de3d10056735954b7c2d052489e55524a61
-
Filesize
16KB
MD5c6de019a93b8a298c139021e0283ba5a
SHA150dc2c6c159ffd1142b0227eb079e94e90964692
SHA256bffd2c611a545c2a706cfde42b9a0ec3e42a0d439b29dde7b97f04585eeec3d0
SHA51214001d11deb208c3c9a2a2261fcc6890df0979a120fa7fd71983e03f04d763efaeb4cccc517f58e4640393e1a01f93955f9436a5b78eb05812cd81dc67c13b1e
-
Filesize
512B
MD5720bf28eab3c75719b4bd3808b4a4cf3
SHA1ef96a3022174e1e7ff8937b8f21eb4275f44f0d4
SHA256d2b53cd495c81bdda416acf1b4fbe39ccbdb11b82633c379e8e1479fab97c1b1
SHA512faf600ee161b4c3394b97f68f7e2c0731318d48b2501643ef705f42a54239c22aabe6c3956c756a7470cc560742a5587d2161b405a4651fcc0b0add5a86e1a5f
-
Filesize
8KB
MD59372664a34bcffc1d6e8e6b37c51939d
SHA1cc3d4e483db5b5851bdd41b6d470567e4a9b5225
SHA256ff779dbafd0d765a5190fe3a3f073e1dc9afb1ab98d28a4b76148be076c0c0ec
SHA512ba685ec93cf890de70602a32e373f273a61b72134d7bd0fa62bd018700d0d1a132e4397fbbd7ade44f2c823ea48e6d70049f890cf2045184e2a8b3cf203f54cc
-
Filesize
4KB
MD5dc83b1bd8e18158b6b973737fddaa44c
SHA17eee1cd5e7e37a78078bc262cdd9d8576652a1e2
SHA256245ec9d924217fad1a09b48a28f0c4c062a5872181db2e528b2722b147ee8424
SHA512d2488ee5872c5ec9633fb6bdd7c0ac5ce6f6425f6c8d5ec7eae0ab20c26edd3846e2fa2580e9fdd262835bdd28093407acc69669d29c88e0751834e1f8a480d2
-
Filesize
8KB
MD53e9417b1e2eaa84bca26ed8b3a89e732
SHA1bc048fb04802801f0eda782f57f62e8034280a33
SHA256bb9df77501505bf2a7568319935d392494eba01741c1ca5405ae9cd68404da84
SHA512df038093838a396499517f33009bf7a405727ac16e78091ef39ce1399b098dd07d49cd0992f0fd2f9a6e98f4e90d49fcd4a11e5f7d8315d026ceccf8516888e2
-
Filesize
8KB
MD51bfbc382402a1fc90fc59275ee52c722
SHA1d6ecee132bf38d86931fece22e4e51e4fbc74a4e
SHA2566917a746bd3acc421a3146d19107a65bcc5151dc0c3e97a5b938c66353db708c
SHA512aa98700c947bf94c8093c8ec980c4393c228d74a92524669d8201bd73951f6e70b8c98e2e38fb1b1370f5c60eaa25ed341e54756a1f50efe69caa56dba04701f
-
Filesize
8KB
MD50c3a02bfbc6a731db9fa9004172474f9
SHA19979dcf0c36ad3a15077f4b51fdaa46885a39d52
SHA256c5a0ad0792a792eb904fbe2b1b974f9548154561595c37a34e9928b69ef6eb81
SHA51248b546acc96dc9123b33844854995de851ed9f14838971c41c23386db5f3901f71906e417ce8125a431448a35d032613cdd50a3ad4696edbd6d3acf7bf11d44e
-
Filesize
710B
MD566d49885f3afbe18ff1ab60bc666faea
SHA133c7ba50ded96b299ea75a394bae2b72e98b2c0e
SHA256dfe32ff6d5692e26ea9141eb597ccc32f10364adcb0e4eecd935e1646722f66e
SHA51270dd32b953ab6aed7e3b3be5837367162181583238e80017694f6f2fccbc46529e2b8fb9c6b27d9f8b115c4961cd4ee8e2da9674bc942f4ec58f4764dcbee95b
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6630530000C00001126C445355142B3E.temp
Filesize436B
MD56de2db2e8893204c15106d71d9e1fb38
SHA17c1482956b371910b213cdabfbfcff90df1d85fb
SHA256c0b29f62d4f179995048bd3233faff7df7aa9c241abf35193b8a947ecfde2c38
SHA512ef9c9aa283a051b26cb14b66eb5824cd14431514c6dc277c04e248bb2dcde07c13e063ca0052a3c1b776581255ff7243e0ca418bb58883f11a9f4a84f6f26a04
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6630530000C00001126C445355142B3E.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/6630530000C00001126C445355142B3E/report
Filesize733B
MD57007e93d1c0408b11483f9f8caa5e798
SHA1f2a7edd925537d3910663f99e209f865da8ae142
SHA256fab8c6d6b8855be7ba8b61a92a1e8568bf68e032a947ddf87ad937b16d70ec93
SHA512be4b137e3f7b690091b9f5c666743f682c97a645f2a9c7b06733645bab1acdfc743952fe7e8f648dcf0a2ab77e5d54601ed00a323c4c2b66fa1974365ba6e3c1
-
Filesize
90B
MD5325d1dbc2a7893a31ab843ba4c1c9350
SHA1df57766406ee71af52df99a804a3ec8406e34acb
SHA2563dbbb70fcc692282216960ebe2d48f0d8720ac75cbd78eea86bef0c8c5b302d3
SHA5128570c1e27fbab9eced777078b4c5d71a8c1ffe9db675b78aed4005e0773ad35288d1faa63af43364ad32dc83e98dcd219f395fa63942c728c57a21d8d7e343a8
-
Filesize
562B
MD5cf1e96fe32835b61439b1c21a99b1030
SHA1c23085aa1d30ccfeacf1b47e66f316d1acba5bab
SHA256ac03409fcce9f3e3f22dc8e483d2246ca568a86a65fad5c69b76335d12069c35
SHA51246a401c70a55c6e11851d01180969dba1b8fd27cbf463fb121301032cfab99c2fb60d271bf69bc2cf77207bbffab30a67972c173c62f60bfcfff5a17581809b1
-
Filesize
36B
MD5dc4aea9a55da13655c2ca7a4bd0680ad
SHA1a1a76eda9224ace84dd58a2ab96803b5b3b691c5
SHA2566e5a37198ed58432dd8b158fa5eaed6a0630a331d66a15c272f3b0183a454fb0
SHA51214d093321a4a071015ace02721569256649cb27889248aa4d3e9f30119e95c4d793d3a79b00cb8a5aaa678dc4bc38ecb6e26a52df7119d55ab92b2947a6ed15f
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5e2724335df09ab0b103f797b1d72b1cf
SHA11db48845e12ce8710b173bd15a06d3d8462630e4
SHA256241f57eae0b65541308fa0ed5268f608607ddf4741178b39fbbb8805426fb79d
SHA5122276a3ee248f48fef578f1cd681027b6e5e3282421913b8399177f9e95bb790a1187f559425f9d78a611ffd6426f69afa8fc04e53c5c4ffe37112f3b765312ae
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5a7d97768639c605c9ff7214ff09541af
SHA1a0aa814ca0dfb72f4e1d8e5d961565fac071164d
SHA256df7de394cdecdeda1e1ddecae6540174b063b33f71410c5380b033342b9171bd
SHA5120ec881a06446812ae532b1a72b855465a898d8fe2c83d8cd8f3f112ffe0caa142cbf42f4c9cd037c43826fd131bde37a7662096d90eeee92db29a239bdc90317
-
Filesize
108KB
MD5ea62a9f5365e50454f27cf15895f317e
SHA19b56403358054819ec1381cfc96d0845ca217443
SHA2561d57769e2f563ff35461b5bfbe7e3b8d622c2612a5e9c6c806dc86f6382ea4ef
SHA512e10e5fbd06847dd8571c5b6e9f52b081b342f5ca638ffdc984b53b26bbdbf1db40ff86b6f40e9d7c9d1a73b643ca50cc2398cb80f384c6085bfbd507c3e9d4b4