Analysis
-
max time kernel
47s -
max time network
153s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
01-05-2024 02:17
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5e88169694a7e968f8d8b7cbbe2ed1db3
SHA1066a9e35363cc24f0fd42caa82c24fe10487fa77
SHA2567c326b3fc334d9ca413c41283151075a04b53e62f90d087b82a918fe09cc4e2f
SHA5123a6f2b23f3cf9edbfb545aab7ed68b7492da02eef2dc0eccdd3af0004f6bce409cc358cf6a28546db3704a74f06303ee33bd4e7db10944d750d9db14989c0de5
-
Filesize
1KB
MD5984df4f13c4352486c51e7b2ae868e23
SHA190ae043c0a1da45d2b392e6e14a8aafa40063360
SHA25684948cd1d4745cce0897001cda161ba1c882d5df409ae6775f87fde1e2baf0b4
SHA512ba45873d8795b38ddaae99fe987fcd33020103c4a77c595d7ff4248e093b9c269cfe2c2c5403a85f232664ead25f3404dff7fc96b9f48d61ee8587ca5453c88f
-
Filesize
76KB
MD5244592a5662464f9e6e8aa5d52402428
SHA1885e44dd3ccf643475ddb16d7d2eec0c809fd1d5
SHA25654b29062aac9ef91d03294047b7780498a2cdf0ddd75028dcebd9b6b7a88214c
SHA512ce35edd0ec05450bb08d6b47583393eea034333b99e13ad2bb6848724f09ed71334a858e5cd5ccb6909d516ae70545c3e7c98ff15673005e25c9ad60b2a11b17
-
Filesize
512B
MD59faf7d3aba69660fc361032cbc5290b6
SHA139559a7f2da2586cd1690a298ead37dbb905c9a0
SHA2567c5f6515c4056abf1aba9f000edf4e1a212e631925155c9f04f31cc3e3974bb8
SHA51228a62c12a4d8ff225546cba1812c4dbf7a97f2b36e4efc7b48ff9839f028c903c4037b7a0ef17be46f5828474265d505aaab2ece10e8dc1283b0cee7b4ce2c10
-
Filesize
8KB
MD51e04396ca44716c664a258629213a9d4
SHA1d0394f7ae642afd703060a97d67e81876accd6a9
SHA256f510d1aa8842c69ee0b3151695f621b796b39a4aaf8a5599032bc7782ec54675
SHA512c76ee8c0ea58ce662d77478b418e845af51a8a9d73f67c00c3582a315619df6b4dd829d62ae3fbfa4fcd290c15dd5c8f17bae717d555322da3c16a11443bf606
-
Filesize
8KB
MD5ba11dc21dd2a1edff3c47a9539043e47
SHA1ffd1e3cd93f5f8d0ba34ec6a0b0e4dcb02be8ea6
SHA256198b9d3c3392d5d73754b7b0356f8fb27f166ab6b690d561eac91b6d15bb5c3f
SHA512a50ac48ccee8094de1aa8a2b5a1e637b7041625570cb165630426eb2e6b840a9cc3dcc8c5cecdd478ff09b3a4b3102a61c6936ae5e1b6d3b0351e63d53faa3aa
-
Filesize
8KB
MD5d5ec88d9818ad4cfd5acf8e039dc6d68
SHA181d9a3cdf37ec7d5116e7e822bcf603104d181a2
SHA256722ba0ba3a9e4455d3b24dd4d587efe6aac5ebdd025c3d7b7c2d3fde787f924a
SHA512bcfe5c1583fee155d0d7cd3bfb50b3307bee8a52f6a0eb4b9d8bde5530b33be83db7e8cde790c43198964c765ef0e3e93d41a967f338f27de72f78c7579aa3b9
-
Filesize
8KB
MD5497b4d07f978ef370608123fdad94523
SHA10c6d2e231b27a81fd8efa7eea49894b943f7c50d
SHA25687e888fa3565332adcb62715dcda81331b20fa4d0214a88741e7283caeaed17d
SHA51251d8ad5c3c40216e0a42e338a9de6d891284cba715a546f35b1ceee54e89f142f27ce7e9473d63101547afe75dc4f49d4b3c6a1d46a6ce4e886eecf592e22323
-
Filesize
8KB
MD500d9bec4889fe0d2d42d78db7ddf4930
SHA1c5fe25f1a4f23ec2faf19193d0fc7c629a1fa374
SHA2563f6b06aae545733830c58b5e4181fbbc792738faa2549df911dd4f8decabf3a3
SHA512b39240c9db4bbeaae5e0103bf5408a2434acc609c5634abba4f680dd134527e587351ec896f9ccdc44d967fdbfd4aae634eefc7f676359ce5ef259dfd06cbd0d
-
Filesize
40KB
MD515d5b92dcbda7ef7f9ca327a903e46e4
SHA1ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA256e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
SHA5122352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
-
Filesize
8KB
MD55af8422f86daab75823bf326b31e7af7
SHA16f9fdb84c6d1fd2bc79a1ad600081d7bb4d031a1
SHA256eda4a1835f34d76119f920357da6e79a5832e1b5be296f6aa093799f6a75fe62
SHA512247873ce48ce57737e484cf74cc80672ad86fa55457ef2405fc418e831249109b89e3f45a6efe7cd2c98312f4d0cbdce3517ad93638de2911cc51df73ddc1488
-
Filesize
512B
MD5adc0bb0b580b61d561caf5fdf2960388
SHA12b3b87b8f06a775381420f7e6af8dc17ac762cdb
SHA25653af711effc48c7338c6ff08f043286dfbb95964340fe0c819fd1d3e27fd44d2
SHA512ed44b0162bd4587c860adb89f93b4012ae8800aa2d9813848611cd33131e1cf0e4b5b07d8d8ed92e0e7d2cb7f4cfb582cca2706292838a6517011d60b8ebaf20
-
Filesize
8KB
MD5bc57b5f11961013ba85cad114d27971d
SHA16f26876b2a039b740a8e27a50c03c065f929f75a
SHA25669c96e93d165cdf920c51df1c9d347a4d490210e98958949fd6b96adbeaaef12
SHA512ab9fa5a6bca7148525f7ab6b3212fad63ca840151d07170bc2e71b66572d81e516a8df040ba4802856ecab35e1521ad075422504377e4214d8ac177289bb079d
-
Filesize
28KB
MD588941d5bee231f6739496309398534c3
SHA184edd4aea6bee34f06831ba4d591186615249091
SHA2565f84e63618e4fe5efbd9e1b30dd3a22ad338d7338153787d6b4c44a918bb0964
SHA512a248bfa8d12d0387b685fb2ff8d26251018773f27d0a17716aef2f6b0ec10ad9e1842c2ee1d917bbe9b78fe6d6d02ffd304535b66e71d845073f66bc7639030a
-
Filesize
512B
MD579900d61571fafa050e53059272a9b8e
SHA15c71b782451098e0fbc0f53d3cfa47b6afeb951e
SHA2560645df9d106d448f307bbcc0efdb2cc7edf3e88172d59c80e659bb1c0daaea46
SHA512cd80a2edf75a7ef9b903a37719cb451d837f0705d0bb1eabb8e59a2ebe32449fd6876c982b3ca1d893642d4ae07d7f5a8422543bc23da85c7b74c6058842d192
-
Filesize
8KB
MD5c91257aa3968f9c1acd4a0804956cee0
SHA166002371d0f92cbe88422b5620544e08a4602121
SHA2561c97fd4f9b736be2f12b2f64671762bddcce3aa79f41c62478d655ede6dc7258
SHA512cb63d97cda4889e39da1e2bcbf90cff25c8b357cc4f20c1589d85e4a43e3b8f5a7f54b3b007f1b235613c777c0099171dc996b41c0e96969b5b2198bb4afed08
-
Filesize
4KB
MD5615152f963c08527248b012bf61b5cca
SHA151e13fea9ec1d3143b4ba529187c7ff87c63e99d
SHA2565030b6b55a8d8abd79d884f8be48522417881606991aff1d4a9c161e5e3de996
SHA51272cada106a99310774f415b6f0f1eb61fa705e4a34d8f510667ce62b981d54867adb5bc24d3ddb66b4f95b6a6a047c591623c7f5cf793ad39f2e07c1bf1c2f32
-
Filesize
8KB
MD5c278fa21c3688862380102515d604dec
SHA186018fc7c51034f719be560b6e6e521908e42784
SHA256e1fbd389f52f67f286e9d521168a7023210460f00e45942be7defc450ad23417
SHA512a0049b72f0ae4a67c7bf565d4819c586685e25ede6a451e4004e173974cc299111b717d9d425c9b28c2b27533822747cce1bd78fa2e5393579d805e577a6471f
-
Filesize
8KB
MD5cbb6b5c572c940903997fea77c34364d
SHA1b222f0228c42e3b19445a91ae1c656388b94fe95
SHA256a1ab390fcb65cc4b56111a9f6f1945d35c05848dc8589b45eac362472277223a
SHA512c5057ba02e93750c5216b0c556ec46233b760fbf28b0b137a7a07f515275da6aaaa1d8490e756ef2c5f6b7643ef990e47c3ce1460a5579ed24000d13e9ce050c
-
Filesize
12KB
MD5d82be10caca96142830f0b318f196ea3
SHA155472bfbb07c096010e29d5ff09a899945439153
SHA256d95ba554b9e89569ba0309166c418d1176e673c9bedf9af00067887e3c312d1b
SHA512a05100e10d89a4c663355d3026a8b81d0b6b9eeed59af688cc152178824f3713a1b2e196d46cc7df6ddb1735f8b3d95da793a8672a33f1d723680f88ac81cce8
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD5931ff34d96af925f0e53af73db95ac31
SHA1667ec1a05938761b13dfbb1a71fcef6bba69dd35
SHA256be4e8e9cb3dac4d413c4b2457e60cdf3a8b504c0b7e5e06438ac037862c38dcf
SHA512f7466b9d72138218fc76b00389b6ac90c39c8e86353bb4f727bffe5febafe1dab9a9d85998ffe37534387082e59135012695474b464545782ebbcae9e5d53fcf
-
Filesize
16KB
MD555de6c395e822d9e93f3c70cbcfe698f
SHA1fc17b36908e810459a22a069cccf7fd7be9cf542
SHA256378ef19088b0e2226a562c1e5c85cbcfe4fb0b95c048e5943d8b24329ba51b74
SHA512d26ee4a3ffbdf617203c0d5626ea006de494a25ad69d80bff7aa2017b1a0dad53c7109d2ca28f6db7d47f32a799b1981037add7962e2eacb556417e3529cd3cf
-
Filesize
16KB
MD5d4f6e4799589c1edfaafec9ad7f0da91
SHA199dd2443abc5fd4bc7b2e8b778e798ca78df3d88
SHA25602f019068c0aca05cd3f6bd0c8edd7780304599fdd018edf99c6507284cca565
SHA512b8eec6c3f45072d84774b20fc55acf53901fbcbb627efb8590872a4bbb7efcfa29b62d813166f1c04e84f8885965f65235a24aeac86f6ca0fabbfbfa0987928e
-
Filesize
16KB
MD523237fbdf0ee52b07e21aa24e46ff60a
SHA110a0b4f55e69ec599401edf7534113cfcda350c1
SHA256eb246e4602fe0c7093fae87e3d2ef7bd11f4dcdd79efa6561dc6f0000035088e
SHA5122860bc898de8562e7193b7fec6f3e30cf01d1a6b1a1e968f73782320ccd68c83054d8876b1b68565c98389acd7fcd251c7c1863801c88d1e6e55d5c9c808f963
-
Filesize
16KB
MD5eda96559b53540b070e486f526a4cacc
SHA1ace2f4645a2297d178ff849a13c95b9432445307
SHA256b535b1cc36838c013324c98e411f043cba25a911479a14bf498ccd52a51b3968
SHA512438403f921348431cd8fd0cecf380868e2dade89978c25a038b86447017a3c04f78f3f1ff9ff610cb1adb12919854ca66656918526333896ef39e6a2502133ae
-
Filesize
512B
MD54ec98b99111b874e068cf83404b9e939
SHA1936d92b6667dfa38999d6e2e284bd1bd59d9f655
SHA2560859fb48e7b5b2bbac8b81b3b5706e431c341da55634500eb5c2823e021abdd7
SHA512e090607711561caa54f14ba1d5d116675acbe4ead0e1f8a8402a2c6d8e761dfb4da9e89bd901163631c23b9bb8258adbcbda409d5a8b0ad40bb09c30e24fc962
-
Filesize
8KB
MD5e1913fe5cad57730398b78655790a027
SHA1807c26814e0684cd520489efcf7ec12538ceb13b
SHA256b20481eb37c7c3e8adb59dda4b3239a4cd9dc236b7b89ac946ae8cc5dcfa699b
SHA5124b06f56d23b91871c73cb66287cd61c950ebb12e344a10a7a09efaba4ac083796bd57ed89a3cbd9ce21e144c26c6b5f95ca2d468b2c13a03466c1a1451ab5cde
-
Filesize
4KB
MD57c6c62376130c130e92c81e98fe7edb2
SHA11c052957087ce8bf97b89a47002cb67423e5145b
SHA256a707d2eeda8a18fd28752d279c8c091e44251af242fd4dadefe94c1a4e723e2c
SHA512bacf04fb1d79c4535aa024196496bd299ac3e7e20136e224b5789cefd4664b227f9af0ca50ea05c90f4b6288b1ef1cf8f52d3dbeb64c082963384be80249bb43
-
Filesize
8KB
MD52ed80eb567a3014c82020f9ea4e1dd88
SHA120df29da988b39f36d67d2cd824d99fc9fae271b
SHA2566948226ce8a151b215aa0b56fad96e7c84d3093f11686a2ce76df55c2d582f39
SHA5121dd578ab84183e08d0712e38955b2381e69763b6ca9ddeca82178a7ed390799cdee9df867afc0fae0f949f5a67aeeb073afd1ca225db91ea929689fcf524f1cf
-
Filesize
8KB
MD5cf628e8c97ad7ff446f8df7048864c5a
SHA1b0e0520ac116736b6ab94a4d8bb06b5287244c01
SHA2562eaa776b04c8c764c2724ba892a8b612ce551ceed191ad82b594cff77c92ee23
SHA51217c9d31ebe2c3810c7be9694b6164ca34281092f82698f5c5d98d91f07ea5186116ea855f34c16aa286176339a558aca0dc7e5b599951555ac5d198e477c5fc8
-
Filesize
8KB
MD51d4bcd9c1414750ac2e9025863822776
SHA16f1a69478b7ee1f51ddff153a4c8ef29a8305411
SHA2564bb3323338a7dd30b45867e63b1b8924231b8f3e0767f231389acad6fb222467
SHA5120bf02031c917c896840b78ff61f45c9b59873a2cadb6088a165d08246a8c4ada46f0e3c220b20faa74741487c77e2caa81507cc4eb92c89b98c9cab6278365ec
-
Filesize
710B
MD5b5175e5d2ae7d4f09d308d6600cd07a5
SHA1fdf83cd9591ce4ee9d4ad4929b90e515c9c3df03
SHA256df6a36b61e157250d7de19bf80393dac1e329bfc525165f552c8715773ad0fc8
SHA512cb9dd294b02c2b2813e3c832a16cd3b86d46862a95823d51c566fcd7cfe440a5218de928b40d41ef09c1cdebce0d5f76c1cfccd69cd7d17884a750727cb2d73d
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6631A6340371000113A9197E4F7D1376.temp
Filesize436B
MD55e019c8df17c6b3a4dbbe1326c95376d
SHA17d7c275a681a72476692a3e6055b8edcf14e12bc
SHA2567c98b9dc1969e25a29d178d98fe6360a9dc4c42bed2266208ce0d3a3078b52a9
SHA51235f73263a023629938e3ca7d081736ac5ef51788714c7decbf1da96670e022fd3acff5c54dab8e1a67ca4449d847de31001d23980dcfdd815d30353d05d3474b
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6631A6340371000113A9197E4F7D1376.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/6631A6340371000113A9197E4F7D1376/report
Filesize733B
MD59c2f913e86c88d915c2852e738e10757
SHA11135f7b6e4bea2fcf7bae1d41407ea0c126948e8
SHA256dd0738deaf3c2516dead77ba550058cf20dfa02303f4dc94988b46fd9f5ec43a
SHA5128a04e9b98ce71f3acd364339a0757eb7d0f3f2911e84afe9d66f4f8a8be437eb439cee7bf5ce2b012100510108548074408c4a14242c84ec7dbf749e664f6972
-
Filesize
90B
MD54d41f7b861676186c312a30be69b5057
SHA1d67120f436803ed6a03aa8e7ed9fabed99b54e25
SHA25689549c5089abafdda8c6a95a68c1191de9325a64233285337828aa5ca24b0a1d
SHA512ac104787addbfb376c26944d079430aca3a1744dab6c4ee6acc29df610da9593fc8602c1bf945d364933c7bb6d899d659ef4441a615914eddb5d3fb2a9a19c9e
-
Filesize
563B
MD50aa1964b9a304b3be82fed3530d4abe0
SHA16b6f502bbfc450ad5541b89230f7e928fe1acd0e
SHA25683d32f59338f49c37fe15a6e0a5492ce85f68774741d9ede9e1b5a264a514112
SHA5125bb62674c06aa074298cdbb5e490f461e655a1160030bdee5e996f87c49414077ba8fa367f3f8dc6895eae8659fd00a28f20b2fb3de2c1f104b13e891e61299c
-
Filesize
36B
MD5229361615596c66ed9df2520ebeb8f1f
SHA178907e490cee0381aacaa0dd29ae21172a8b57c3
SHA256355a202eb2597cf75310fe99d25f00fb02e8b7607adcabeb85d415db0b484ed7
SHA5123e4831c5f0db76812b3ca1cde829cb2ad7496b8b6edb3363cff8b18a4050c02f7f139ce02455594c820923fe356aa60c6cb1ac1a15dcf88e0595990c693bf6ca
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD53b673bb99bc0754029e8776270960be4
SHA1c548f609f0660a6432ecfd903468f1bc1b715b24
SHA256c135f691342749f2fd5c23171ebed25b5262cd2b7aa011d86f2d2e0d3d50be7e
SHA5124af1d74497ff4e1f21370c5aebcdbee5b839fb412747c7ce369525926e50767a6a161cdd1e9c978cb07a59cb522bcbf9f4b675e4e0ace57881853854cb589781
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5dfcd78dcc4f53162c744de6ab933a396
SHA10441d5741c6b2b72686c15cf6958fdc636593297
SHA2569b04edda206f8ede38cefcaa172fff7f81d1b7452b42ab51b6c39b0b2fae8ea3
SHA5122ad352e91bb213eafabec4205d3fc9130d110b545f019f7d53e0fc2d7d5a05e4a6f6f1b7418fd22f9d161899c295481cbea592601720923de67d0f771a0197a2
-
Filesize
108KB
MD5559cda123878e51335325dd6921cb7a2
SHA1e4559fa0207bd35253668360567b37eb051dbf5e
SHA256f1633a068fe829f357d9eb513f086399fed79a7635c7f50eab9120600214cf5d
SHA512f7ea6deaca1655490d076ec7f56d3968d66f6796429b9cc9fadc14122b86ee41beb93b0278e4490491d8086e762a4a34c1d279fde49eb5c30885c9370121e1ef