Analysis
-
max time kernel
47s -
max time network
134s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
01-05-2024 02:17
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD59120a591b3f3e42d3e15483ccb455dc0
SHA1563f830a5e01f46dc488ad1763e0a2142ea2157b
SHA25665cd938ef36611cc2bd24504cb3191cad90b273e8d14c90865d78606d2efed53
SHA512860fd313a3e17dd4ec20ad6d9ba7f703562c3d6658e515ab39464494c8a2696cdcf53204308271595b8744bc027eff0251b29e1f7e84538be876a90507f34a6e
-
Filesize
1KB
MD5f0d4313f9b3d50019d1370337f460d6a
SHA10a64da3ec44956a268026a79c7ed90d37028dcd6
SHA25647159774f8f3c01c1e94f132a132480ed1055a36bc5b5fbf5fe1d31fc7f7e158
SHA512410cc28ea3995deb3fa926247b9fd0da20b49be9b2aa21b22bca1cf8daa3e78f4156fe174a20e682e2340df3c9dee2cb3990a78b9e8ca0fafab158647e2b66b4
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD5fb8bd4e7409c06a1bd5c6d85f3b4f588
SHA1e7696d37d31198976197b551907ea7fecd7a2e25
SHA2566348a717a0a45a0cc23587b9471368b784306666af88a3363ff1df16baf10067
SHA512012189ae281d51d187ccde7abcb899eb6eef27a7e69d1ce5aeb475ca6cf490d6f763c1ea3c5ed3c6ef091cd43886c967517ced7f25fd428287d38ac6588b0c30
-
Filesize
8KB
MD57c3dcc9fe1321e0f22a4b7dc1f66f1cf
SHA1f405ee01012d81d6048f60c65aac7a4e71bfec20
SHA256c1a1924268d5157194161f8aafbee6d65e4888e97f0a3ae0c5e0c2d2f0c15b9d
SHA512d806e0150195a284c50c5c3e2581250f1170d5624c1dc88543351c6c0c034a068bdce2418aa8c16dc7418ec0f895c9999e9b805664218a3b683ce2c8211625ec
-
Filesize
8KB
MD5cce34e47e5b1ec6177532bf891b3238b
SHA1c48657fad4869d70e17831f15af58eed6d44da3c
SHA2561fae4e889d5d3346911ec693d24d46648590d1fc003fc5275b3d1727436671b1
SHA512e6d9bd22b4d9f77b80bfd9adfcf4e2b7483c86d8b7016664c8d27d8f99f64c91750f44b6655c0903b982edb460d3f84a8a89b9c2481b4495df0a2e8ec2fa25d0
-
Filesize
8KB
MD50e1f6cc345415d2094e0a8dd813fa9ed
SHA1a3e02b1c19180519aec9f8fa650f3d6ca74bff38
SHA2563bac463c6cdd4e9de8bdf62419736bc6a5901dc9557db6d4208fdad8b11dc765
SHA51283bd1b0e9417164b31d7fcda26391e15983c127c55e3edbb270feb56ee655c072b023fffbf433dd6e7da77c609f0be601ae59fb70e70c64e0ed80277f0172d99
-
Filesize
8KB
MD5b4905cde42834f7be139a8c32224919b
SHA19050affedd41bb49ede084a5828046a978825bb6
SHA2562f5e3b7365e6cbe97f4e2a08a579adeeb4bffaf1fce85e2213aab25558b03eba
SHA512f521dab28e0805d30760236c097b28a54d66b9f9f07f6f640fa210f4bd55ca83a0d9097b47046932ba923804eb86ac388e1531918e05cb65895a4392f40b3a49
-
Filesize
8KB
MD549d747b3b96c1f65e412913f65ff281b
SHA1da97fb647ff42baa4018197e166fcc0c87733a03
SHA256e9037124106d1471f3f1a84a9260f9279fdc23b1d69dd17e50744aac46382565
SHA5129da1134e1044bfb7597eeed878c7aaca0cb96c02093d8327cc9f723af6cb6bdaa426cc40a6d92af0ed79913beb700116833fb97607882fca540a89edbef50d66
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
512B
MD548b1bcb162b25b8aad8ab97e5dd38843
SHA1390d664f48bdb3684dfa5a6aa501a7e92d462bba
SHA2569591a17562498f023ecde22903bf45664ef9cdb8a9917b03a3fe684b20bc8860
SHA512ce4ed5c2f8ed3f48b69320b5faeb9b3bbd647d295c8804d88677f622e6217eb6392b8281489822b7b20b9ed3ceda8fbfa9db6f0ad713c78d20b17ce70be64ab6
-
Filesize
8KB
MD57af2dd605754c52d7185284353ae5caa
SHA18299ac407b55d401b54f332e379c73ed9f587966
SHA256fa9815d5bae9e895894ea434c1a7903ebffd157e9ef0230f29a4f94923b658bf
SHA512774a357a06564debe21fc4b2d82214e931d1d918062e5619a8aaee3a7688ddcee6dbcfe5fa2c5f8c0e6ee2efeb9d728f5d2be896f42b654653fdccef07445003
-
Filesize
8KB
MD5d340548b566e62adef80395501cf157a
SHA11495efc27e2eea909760ffe48cf70651b88bad34
SHA2565a35ee3eb13696acb9fc0da5babb3f56ff7eddbe92b0fb48126bbd7d1f6b9aaf
SHA512317693aa0ce80033b63177a0619069964da3635ea1ce25a4ef1aa50205652c0b5cd9196b6cfa90bdc032f85eb1470bb43d7d7471f4141f5e083ccbd6e38463ef
-
Filesize
28KB
MD5b67c3ed89aaf98dd86d45e1adfc85202
SHA1bbebefc5bb6030ac413561b327f1a38d21500742
SHA2561e745157961e7974fdd3d53469f2860aa6c9821b825cdc00dd564c337d3b45f5
SHA512fb99b15ba59c5fbf467ee7e64dc7280da1af294dab53c38c4d5997b6931f5ba838d7238e419dbd25fe24f3830dabaa729272cec3252fb4b65c464a07dd07de20
-
Filesize
512B
MD58e4a357c440aa196e73553bbc73efe46
SHA1b76f3f7c001bb70036bc8d1b11b91c55f2616928
SHA256487c8e3726caa469532cf5d2612b3e55ce6d9f58e92bdc4237697b78696cd181
SHA5122181726fca4763f8f7715ff690a237f7036a403c083e9e37535db4bc86e7903a5bb372747528a8937a26c79cc118d5a7970b9397e57f0c91f6e3f59c62e1addc
-
Filesize
8KB
MD5172e82d6764e7ee94a587bd1a912c4c5
SHA191f2d4a5ff47c96209b5808c35df51730889fe0e
SHA256bece6cf41d6ab6502146527dfb7ebc43ffbbe7ca87e9abdfafe8d4a7b657cca9
SHA512e30801ce73f6f08ead49b486c24b99ab43d586e1f6d760156285136ba6771c55b702447f8eb7e140fc9eb0a2e314111b05a448395c03cc8c296bd45523470b81
-
Filesize
4KB
MD50d110d7e01cbfc1da12663ce1e639c9c
SHA1d2c902b06b2d428b94f29d756306e7c8bdb57177
SHA256b3ebdd76359be6b4e1541a19474a5b356bbe4f23255c5ed6eb4bd0842999ce45
SHA512f37b6b5feac0b582cd6357895f7b54a063316897c378f55e59b40ca6d42bec87af80f0291623a733b9356ad4edd0c130fbb00e158a3cd660c745f71098d36712
-
Filesize
8KB
MD5c1db7cdf5f9b29b4ea76e93807df2259
SHA1ce28e996b68ffdf61674756e2091b0ce9c77f8ab
SHA256f9a8b1e5475149767f45a612cdc329689d05d59d3762d0e6f8260eec50f3f577
SHA512988ed9fd003a2c473030d846fdbd4cc5113d37535a2f8819ff0fc55da28d865e665e2cb990f002d76134d3f090ccdd01c6dce007f2f21b297cf7251f1b4b211e
-
Filesize
8KB
MD51395a0ef7d4710907de4bbdfc6897e6b
SHA1907201e89417bb4c3375898326fd06f3bcc503bc
SHA2560cb1c10724eb4fc47b576ef2479f480c536e904c4d3b4a041b7f7b029d6f4460
SHA512321e81aa124a742bc762ceeb7f2536bf954a697b105b9cc6646f0f234492015870ea820aa6e2b1f3a7b1c39c09b85073b2dca244534b61750f6eeac5160ec731
-
Filesize
12KB
MD531e8749d04ed273932888839fceee6c2
SHA19b55ac22c0d1bf88911b78f0e3421bec46d708a1
SHA2566e8b0764adb3c77885bffbfd7aa3307d7cca6e926c3a1e5ccc547556273dc7c6
SHA512884a175cf053ca8f85120b1ee75c19ac525073c69312fe185b677bb49415920622bfc5c37339b3e39b1286d6515013e48ad7db499e3196649ef2b1350f9e8f25
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD589fb654294e076864c69ce81f9183e87
SHA1b7a3e9f54de1b7a83222878d6e7dfa6993af4af4
SHA256573cd385784956774c8323b583229edecce0d9b1072596251b2560a1d0713819
SHA512054e2e0585dd0adb9674d6d5bffc1d668b1ef1b27e58dc10e3327c3647e3f734aae4fe6e5cb9408f3c09999e0d4184805119274d9d2c555d8c6f3fc8f3b81f4a
-
Filesize
16KB
MD53a48f5982e6f16dfed42dcfe63cb1c6d
SHA1d45e86dc2600ea4a1d7c4a9d62bae85b9ff1861f
SHA256681d1734fdbcb7937ed16ecfaf963107050143d127d1418e3dfe2940f0d67112
SHA512c61b68565fad563608f732fb552f7b3d480ccf3874a865ecf2d4f3c148989dfd43741b3e5405aaa146e33d6f66a8fa0ccf68244d4cfc4144b50f2708319c6721
-
Filesize
16KB
MD5f1cb2e80fcaacefdc5ca23a0972ef529
SHA1c48e7e51715123aedcfc6559d5483234c5829611
SHA256b280cffbcb90a0c5351545516c997858788b60d68850ea740324b1c5a55a170a
SHA5125f7baee008697f4c15498dc616aadbad498452090e209b2cdf464ce044331eca5c48994f5029f561e91ba82cd1f8b682bcb81accbcb8cf1278afae2ac534b3a6
-
Filesize
16KB
MD5c9cd4c21d0dec1d91e5420206ba3fb01
SHA18758219f40c1534c53e91b5d93078ca2c2f51170
SHA256e5e9c7d7b4a684bc90079833ad0efabb3bee315803b5284adc8fe5dfe7981b79
SHA5126810348bcfa366c3ad3eae08c5ef125c49986acbb4d1eaa688483bcdb72f6e9800e2ce3cf75967c51795017a8fdc5176303ba3020807da03a3a9f507851edda9
-
Filesize
16KB
MD5c6de019a93b8a298c139021e0283ba5a
SHA150dc2c6c159ffd1142b0227eb079e94e90964692
SHA256bffd2c611a545c2a706cfde42b9a0ec3e42a0d439b29dde7b97f04585eeec3d0
SHA51214001d11deb208c3c9a2a2261fcc6890df0979a120fa7fd71983e03f04d763efaeb4cccc517f58e4640393e1a01f93955f9436a5b78eb05812cd81dc67c13b1e
-
Filesize
512B
MD5c5e273c02e37300248010d9c833a821f
SHA1f9bb931b6f40f975c8ba541f62655a7ea91d1875
SHA2569150ba8f5760f17c15e17f8e3088f08737147fb54e9823655ec15686a7c72653
SHA512f42c3c5d3544c2d9543ffe58ec4889eee893134900b49cba21625cd9b43a631b4b78557bc608d2dab559067edbb23e44a62cd4f6708979b24c28164e64620385
-
Filesize
8KB
MD5a2fac4690a72c52e4d892c5bfe7d703d
SHA1a61431aca8738f4414a4bba0806606af835e73dc
SHA256850283ae84948c8f5aad003fce5515c430991824bbd7e2014e24d1496a3784a6
SHA5124ffa24452a4eedcacedc0afe2b08cf49164f579ba166e55cb61448ce28806dd070c31641cc2f6b27d7753512034372764153e10844f1e9eb268a272b1ee1beca
-
Filesize
4KB
MD5c7e0090e065802dd075a3c41d60840e9
SHA1b6ed17aa3421adc4edcb50f785de56fcd330162c
SHA2564d30c70287ee1d94e27298290fe8caf07aa3920dfed670c9295732e8a2771e09
SHA51290de66e598d44b91488fed62dc5733341a07f4c276671a31b9f180dca55133c952bec4bce502ec2cf4af45a69cb627b289c20818642500899f1f26b069984eaf
-
Filesize
8KB
MD5eae0f6c7d9348da8da04f84dc79b43f4
SHA155bb74482d1dedecf12b3a9adf9a142770c2968c
SHA25656038cfbb4fcb3e031173b1502bf18e74e9ba41725dac71507779edbdba29bf8
SHA5129c10ecccf9abe0c6032a6dc9809e35d8845c156c11437b92ea1aaba303b9a748166fae767ada912ff3be4c121ab6f2a512fa743084e8e8bdce0bade83d98db03
-
Filesize
8KB
MD5a8ee20eaf75ad69423878ea4bcbba7de
SHA1e46a6f5b6666348c3d8ed31080c9c7ddb43d8105
SHA25602ad028c8c194037f5640d741c37f1b8e59ff5171602d36863e28507778e2120
SHA5120b4651a5f193981d7f60ece010891c14461163e003e106b2f3d936249296a49b2ddfc5f18ff57ed8e231c149b1e3edc8c94db0374637bb53e58c14f91c5fbe9f
-
Filesize
8KB
MD57ffd62904591bc56d3867f6d401438c9
SHA11df08a5e0762ba1ea304b6a70c687761dd6882d3
SHA2563ed6df74e021f88fba42d92be04e11ac684cc87377d0fed96f8e25dd33ce0983
SHA51257fc17b1cf5ff13f50fde9d692938c607a2c534b9a975025c41046f80be4f5df19bb8abd31acd4f49bb2a2b30d1a690b82b52d71b450a9d25842cfe43fb2a573
-
Filesize
710B
MD5eb8bf17e0d1fe57e65dcb4bc15c62219
SHA1589c475b2c90b3239905c389119b6b5e99ac2d35
SHA25651dc0f09b8cac37fbfd946a163d9bb0476e46143ba82f9f85587b01c200f3bd8
SHA512425e6532cd07923cbdc9f760d840032110ef73671d5526d4485799ce5cd48eacd1b3d6a7bc770e782e1bf32a57165869304457ae2951df0f4b2e67b4048ed24a
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6631A6350303000111985568580BC97A.temp
Filesize436B
MD52ee23467ce66156f367cdd35718d969c
SHA193eef84fde8df5a03d94fe42f4fe2494804ecf87
SHA256dd4b3d73e98ce4ebc1d0403cd4d908b8058989b187e127893a42d11a8701a5d0
SHA512893abddc39a454a6acc98d2c3f71b1ac6280c937ebeb94459d9b3a221b25197ab9c71e18dc32cb7189191ae4c22e5ac89e12afa2ddc3dd8b590c423891198161
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6631A6350303000111985568580BC97A.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/6631A6350303000111985568580BC97A/report
Filesize733B
MD58a20ebd7f577e2caee4de2785164882e
SHA10ce8c0659bdb7532a9198790b1523bd8c77de06e
SHA25610f2e28e005cf6ca95b589a75ac25262e215d47c43c867826fa490dbdcaafa3d
SHA512beef85e1dcb156ea14576a86189154d919e6b67a01f6a41df94476ae4c7af522e1390dbaf85cea811d618b9a1a6fc6cf9ed1599281730521118b928fcf48e3e3
-
Filesize
90B
MD5bd777447633b950377af55cb9636d2e4
SHA14bb9b3793c184189971f1e06af931435b66d4771
SHA256a3aa3601fa3524cf02e2bd88e98f92fdea3997f26d4646428d7edce77dc3d3a4
SHA512b0291739eb34a89a10801d42582c47d699668e71d0c4a0d3611f518131889fbbf40fa2214ed199a362c2dd73bcbf1924c67be549eaee29983c298a282f42b3c1
-
Filesize
562B
MD580a7b5e307175099ba7d5053d9850010
SHA1897bac4069679e901ee5930e646a57888277f3b9
SHA256b2598685a05a41be31818b3a4209030469dff58829afb0966c958cbc627d85a3
SHA5125672874677126070dc69514e56373e75b31a1f1b74780f421b5a238bf5f26e2e2e0b22c858c8f30c0f8cf458140c84253d1fd2a92467812202d305d57ec0f5ba
-
Filesize
36B
MD5a9ba104bdaa3850536da1c3c7dc05d7c
SHA1535cea686a2d0101d66efcad21415ab7731c5d1d
SHA2560bf97a9ca24fec8775bebcdb54bb67aad236ab52490d375096abc25c8fc1d62c
SHA512217b3b85de109bf18232932d5b9f0d3fb83e017af93d3297728af0facf1016dd2197c6d6971baa968c1e84de8be914dc50961d5e4a08f2348cb3c247845084a2
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD540c506606ea16a1a5f9af036e8216224
SHA142691d09b2522bb85567382b9474d201b7e93793
SHA2567438b93af5de0f5745bdb03a5e89d69c04acf138d7fdcac94f1076a805b6970f
SHA512e1770875b574a2c5d3bc734442fef58b0c7f8a4156781cc010a5a771352cd1359b852af32869fdd2ac2aed0d04577797a826b9cf450b6faa4e3729fece44cab8
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5e85cba5fefe34413bb3de722217c5103
SHA10acdea35aba7bfbc88664e674d0a4512135316e7
SHA25648e85566065422704d30db9d5ae163b3c20513ef2085f257356e634803684b6b
SHA512ccc4560c9420a3ef179faf0c5336666e19d5333762bbc9682e58f342b0246a16c11a6e60bcf37a7df6b09bcfff816f8309545c3efe71dd9b0b87096da052674d
-
Filesize
108KB
MD53dacae937fdf763b4fb4eafcbf946eba
SHA19e147de805dab22b65610d2addc77b1188e8309f
SHA256fc7fff3f0fa105f23706852837d5710ac1cd34a1f5c136274e70e9fe185ec120
SHA5125da77482919cc10b425f0408c7b2318d4a6a8b38edccd60bf32105e2f5b13c5b0e2d344832160298865f0a9c453c9ec0bc2120613af6d01dd1c8ae28a4b298d0