Analysis
-
max time kernel
49s -
max time network
136s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
02-05-2024 02:10
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5f542fbac993c3e716032d116e31297b2
SHA150db4ea5da33a749b1168f2839bf2d0a9d79d1e0
SHA2561a9c431c531b7c696280b5a0b9022c71123eb444da24ce07f7dfa63fba37a3a7
SHA512bab19c6718837ac13aba6008c2e48106be6a4a8a9134daaff9e622b2add40f1c26fe6d47af310bd4ac4105a4256a731e375923053334cca962de99a3f980b193
-
Filesize
1KB
MD50efae3b1b76dbf9614e5d9de94cb0593
SHA121018a3f8861f60b65c97d7729877c49f4353303
SHA2566ed51056e4b4de54a32534ff9ae0f9f90098f68cff3677f63e68d69e904cacf0
SHA512a07feb212df8118e75b4e290ca4ef4f431130932595baed04ebeaa7d7b3f5ce2e460c56200125747c37bf9c578cd5f9e1c3916cd2f53fc942a3c52bf47eca589
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD5cb779bdfd57f73742c45f7301b7ed2a3
SHA144292750f5aaa2c8b46385f225b426c9e31782da
SHA2562e1d1a09822c6df35b67aa3e088573a54a5a5dd537c283192618466225695ef2
SHA512a8ad8b545b5e5408f51a29f15bc4f05a42a2dd22e1eb689699ece9efc8f4b990ff3296c37999e1d3ead6d211b62b09c0da88c351c2458428cf61b567ba95fb6b
-
Filesize
8KB
MD56a68d4cdd6d83889c4f1f5cf4c063f5c
SHA10ea14ed5f08a7fa13a2e0a07d590026d4dfc9e5a
SHA256bfd688ffd6c7482a536f0df26b194c0dad045db08750fc635f65a2bce4f7ed52
SHA51204e7c759d03fc3c4ffebbb4e0ac73bdeff78bd1703bba2b5729c910c7632cb1912977624f5d1d8810907ce80598d582e41b42c5d935fb324e6b65b40358a1072
-
Filesize
8KB
MD5b9f9a717ef4861b8e1d94ce486c87262
SHA134d96a63e5ca7d19636c7fb316e412dc007100f1
SHA25630a2332477ee586911d2deabf7081f833eb3a9b006bff12e47235257dda3d48b
SHA5120e754bcddc6faa3c954b3082628a3ded5f070b2753a21f6eaf8cd5ea6dc2ca4a5359b26293939d1b808824f2970253a252f67802285a48567519ebe490f97c46
-
Filesize
8KB
MD548a20a9da91723d2a9de4fc015c9c758
SHA1848074121e7279eceb9fa7cbb49e4eb11662eca0
SHA256303f3b340332251d008495d7faaa5215bc34c879aca1863e1fdbf6da01078937
SHA5120bc6233cb6a63a8333916067793374568176d77b1640a428c2a572868c64e42fa0cd504c76c5cc9c4666a24b539bf233e528f3403f1b888771a2af2554a12028
-
Filesize
8KB
MD53156e573fe5479867d56ecc393a18354
SHA10200410df2cdbf25799afd74207ef1b58e628bc2
SHA2564d20db67baa46bcff59d5de48ad9d19a71ed051a8ef38e47c6f475566039e0ca
SHA5125d2df713b9b8b2e53f0a0d6fd0cd7173aea6e62415d887140d2ae201b75b148f43348d73d4782be0439338f7f41911c6b4617f600bd92437c06fd4177ff26d57
-
Filesize
8KB
MD5eb7d487ec5d50ff9268da6d7b05aa22b
SHA1c995c1aed339a5c7941300f2447fe7bbd8255160
SHA25678bb5673aea495ec3b07d02638982f22e0bc694f8ce9d08b40aa03deb9addb35
SHA5125718377730e6f1510341a263392af0d01b677725928dfd8d2155119275d553b33eeeac80177d77033a36359474ed693c10063f09c9d593ff3fc703027b74ba2c
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
8KB
MD54eab9b75a480502204a5ecfa58030c47
SHA13b60dd93e7204e3f990b919cc700afe1e618d6e5
SHA256152d9291d15e7a7e4d333ad1d3cee617e38691734de8e4817a97e1f24ed9ee7b
SHA51290955e9121c58d4587e6e8601fa86a9b511a9c246a5fdb0493c23b0ad77256f6df8153f620bd5286d2004e07b3666bf8154132c64845ce81b8ecae04cf46a50e
-
Filesize
512B
MD528b4b2979b077afe82933d325bc507e2
SHA1b6e722b2f7b79b0d09fbef3049e27421804a5d97
SHA25667883f1c9e89f90ebdce59984f00585be3f7b8d0a8238f2a5a0c218b93b45709
SHA512a10e012edaa1bd1e545fbf4917f1bd541b76cf67189e2e8892404f3b5c93c942e3d3bf60cf090d98fe87739d634b2906d8e7b70a5fc8c3e978c9813eb7e0cb83
-
Filesize
8KB
MD5a0d5f8ca1528b9a31ad481053fb0ffc5
SHA15e6233a2092e1e1755aa5dbd0e24b721deef6880
SHA2568599ce719f1f6af2abb38ade485468cf796adf625f4958ff5af15dca80c2baed
SHA512a6ba9e1e54c29dc73753b7bc621f3ebeed981f575db744284226a7ce149adbaa28f64c74764ac58d4cc3ea5db19bc1c5b50bc03238745bf3e933af2b8c7b126b
-
Filesize
28KB
MD5d35998c5add773170c928d2bd0b9eae3
SHA1dd774c9b47e7c4de181b41faab9c783f261f9ed1
SHA2569469bf7abc92fb547d4e38fd917a26fe018cd0ecb959cf0df3327ce9185fbcb1
SHA5127b52705381ac4fbbc57a23ad9051ad286a6590f0a99b1b015b519058ca889b664498507969e7f630668bdedc4f8e9a59f5154ed263bc00e15e3747d8a6c59efb
-
Filesize
512B
MD55363d3dea22609b74493eec7707c1375
SHA10e8d9b8c5c1ac6880637b52ea2e628d393919cb5
SHA2562def5418608e3fd91b370543ab6a86b363a0bc6c6dd6dba644583a1b504c2ef0
SHA5129f2ecc2b2900eec04ca5831802055bd717075fe45c96a631bbb68309e6bb9ad4e16390a96914cad4df014b8272e20a7c7848f8e4522e263140496585d675f8bc
-
Filesize
8KB
MD58ea18effee10b70b9bdf6606ca3d0f7b
SHA17976f0a2a6d224e87caaf0babb933052f35ae3bb
SHA256668ea08913c131f7975bcc754b155423b3c21b11b57fb10b21362efa81eae81b
SHA51229a4019bd7b651f8966f2cf99dfc80dacb0ff43cf959e1e41490a5774a749ec35787c1cd21d99f6cffc4086b0f24d7b7947c36fc00019cdbb1d5b048e7ea5234
-
Filesize
4KB
MD5ff0ae2f70462b50261ea4fba0d6777e1
SHA1aa04c35c857d3da34bea0d46f3c65275a9284dee
SHA2561b9a6ea78e030eedbdbbb0e410794360db48d3284af5f659e5958e0a6b13ed54
SHA512f765bd4427ac4e351eab1491d2d06a0dd746d58ace266fc1dcdda67fa50cf45cca9cfd7758adab64dcb30fb7a4e2bf5adc5833ef7baeca7ed93df9a5cab7ea90
-
Filesize
8KB
MD54b36c2436a04bd42860e991a2d33c410
SHA13d031152bb7aa60620a693284545764dafa47e47
SHA2566485bce320f2e31f2656ecaf3d3a915330c2070bb31aefc90c5e0b59e5e16565
SHA512952dc903e0d314f51392ceec3cd5eac11f0263c7961a058209bf19d5e24a029c6988defd2d95628361bbb875280996b537ad2c06c9600ecca7c3e3d1548e83b8
-
Filesize
8KB
MD52dabf8257d4558c44dc03e4e0db38e0b
SHA17df2764f09ceede796c5037fa2bf149d434a6458
SHA25669d367d315266207eecfb9ae02ac1d8c20c586537a8909dcfb53b8ac80818bff
SHA51236034cdb5720265418af57b1ef798c0e6666c22d6861f7a5a7f68847dc82348e2ca00670753612cca548843bde7dca7bc78734f814aacab6a690c7d58cc13b33
-
Filesize
12KB
MD5de9ca580403432e6f410499b41d95358
SHA1218b8300e92c7474789d83d769863029f8ae5342
SHA2567331ef0351c298bd592d3f3238df65471389a9e7aaa162cbe67ed5a4a77192ed
SHA5120b5568847dc8da6d7360c1832773f07926797e2b1ca77aa8e58e68ae411e8a4b0b8c5450bc7579ad296c1628a80315ca5f355690b15ac26b4d99a27662265ef6
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD5a0f7889f292520ca1fcb76ace93dc194
SHA1b74513a360a58b1a627c404719dae58c3b63d77c
SHA25613deae968173d760e3a93549ee589df64bb7c1e4fd7ae4ed0ef825ffa3facd6c
SHA51230c9d54c5b21b1be27e5ad653b2edeaae0f1e12e4be2d8356c5d1714494895cf2cb7a869096831138175b09ce82a13542b2c52d5506dbb0e52a8dce0defdf050
-
Filesize
16KB
MD57d78d0b157029eedac31d916e9795eee
SHA1138d4a66b40f78bb679d1a4f3870c78da6aa3ace
SHA2563b35a534113c769a27a4c6ca48d4bfa446d697e989a1b4b2f12359832e5dc1e5
SHA512ae119cf50b213990828f1d98c08bb7b07a06932ac26e2ba8766e2e63bf621663fd4378063b482afcba29ec67227c048f59c6e6898ffffe9b916c288dae24686c
-
Filesize
16KB
MD56ed414e89e957e064f8358e630171315
SHA102af33c1fe94034ebaed4a7c6872146eec7e7ee2
SHA2562cdd31f9d380645c7559afb6184f5db1130a4c9fd1f90b121a5dc1569bf0c939
SHA5129dc5cdf33770ab33108af10072d5f62b5cc519c1c1523d562e93134c5d056e2901f12f25f2369ece652b76e9072b941daca6fcd45cafbb7acd2a7eb119a9f6b1
-
Filesize
16KB
MD562176976bf226500f65b97344bd72cbc
SHA1b53ce6ff09cf1c41e674b47736b572e34345fc78
SHA256331adb91c3f55a01b1b975557e9e26bc6a750b242160f001300d20c94190a089
SHA512b62bbd8a5b1de6fded6b8d2150dbf6c4cacdaade649a4182301244855b9ea8ecd604cc468fe0ce571cefc534d65ca41f80a423b89ae05d19f8596e86b1b52bab
-
Filesize
16KB
MD5a0325ff5668f4474177bf7958d70a597
SHA1f9471cda55083be6cbe3f62cfb230b2b317cc4de
SHA25671baa9bc34c3832c1b0a51c8aa3bf03424c6696ae37147861da52fcceaa0f688
SHA512c8365efeead343b31fbb858caae4f8b1b6c9fcfd04dadc3bf4e39a600eda4fc4540a727a023cd06bfc28374a21e0655cdb14a680e202383710823032c8fcbc26
-
Filesize
512B
MD531397d3c4a74f068298993bc83877cf6
SHA1cdef1ecbe363d07b500dd71c358f3e720db2419c
SHA256738369e2062032b2d84a3c707d84fe2ae4650c616d6098cb85c42481003148e7
SHA5121103bccd9006d5683680ec539c31b5550b23324f388c96a5193d8942a23a651e45be3f40301560e36bb40551df974b3dadf1eab6e9e5df63d64725996a6afe89
-
Filesize
8KB
MD57ad101378d8b910eee37eaee426cbe05
SHA1ff6e1c03bcc23afb99e5f75d7f0ca3673fbdc5ca
SHA25617dd5e46d0509d34c75f42a643c00a14f78c95e0b53cb0f975c64243a9fbc825
SHA5122a7a47f032dcc95531c281dbc48d734eaf5de60978d6af243b71bebdc875dbfc3bdfc6f2bb7f37504829d46425f541a0ad480b4de2178543b5590c841b8a1b2d
-
Filesize
4KB
MD55c730efb935ba35bde75d5589e96a271
SHA115ba88ec57fdbc16fad91bc43841fbaeddd7a80c
SHA25621bc8ddd24dba6c0f5ecbc72fdd55072699887931d6dd75ce2a814c0b94b4e28
SHA5124adc67c57bcf050364b14e36ec30f6859f57276a4fe7ad6144894fdd7ed0e0ccf28eaeb666f0ca98e49af7850a0de8b2d46fb080a2c4b0cab962d45e37da928c
-
Filesize
8KB
MD5fd280903f752c863ea9c24dddf7f2e2e
SHA11394f34ce5c6fa6415645603fd453c4fbd0d8624
SHA256ddd846233b409d3cf22a5dc9cf77b2c4cb72bf48913e0521c0c05afccf3099f6
SHA5127d6a29c8912db587f43e5670a163ad786b7cfb0f31ef2f3a1117fc805406150cae97aa7f231a0ff0a947c66bab238da8668db2b830da964b67711363d885630b
-
Filesize
8KB
MD5fcdf4347ff299d289d6100614023937a
SHA115318f854b93d0a48e41ffce026ee40acd76b665
SHA256fbb83228410e6d081688a630a4c41ec29e675123dab7e674018ce21d433b3124
SHA5128581bc1a79cef397ed49731e490b1ae08302aee92ef2f24f8dc42b4765c626de850d4c214de8657902e8e889cd128e4fe90613d3192943b51542b5cc0c0d64dc
-
Filesize
8KB
MD588c12a6ce8d277857c34e364b66c42a0
SHA1902e8f80f737488ed074d0e22b769a79001e0376
SHA2561e08863921dd1f89f5b1a18530f3ae1625d3b008b248ee1cc88f744db562fbe4
SHA5123123b07b99ef8b425ec2d703eecf6384c9e8a0394ec05ebf817a72abcfaf74fca43fc479aacd6bfe6f8adcc4793450393e48a78f8f1abeca2021a49e2b8d0224
-
Filesize
710B
MD5d776368c8ab3a6e0ade08ea89fd06e99
SHA11fd401da4badb92c48e9aa44f10e68e3153debda
SHA256b9f9e86e4cc291c77bc0ba460793ac45f4f601c860a551e860c3c3c7e4147c3d
SHA5126c6aa542077296e7f6b6ff21dfdd8d7116470a6c478dfec91d245a807009000919181eafded77e78fb880fc1c33091f889adaaca4827e86d3c50fb7dba1be42d
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6632F61B016F000111DFA7EE65D071F6.temp
Filesize442B
MD54eb60ad9a154684799bf00a7b047fa1c
SHA1587c32bd1e6c4227a3645baac91e4d6557cc15be
SHA2563d0f916dad1835b56d433536b951a848fed4c6470404775bcf2d57b24d3516f9
SHA5125dc8a273ecc975eac732590404ced25d0d3029acfc8554bf0292c0b22ec33e0095c03751f44a788643860a407fb9dccbcfed4c8d5164e9507547c549953d024f
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6632F61B016F000111DFA7EE65D071F6.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/6632F61B016F000111DFA7EE65D071F6/report
Filesize733B
MD59e921d0f03521cd8a96d0f5ea37a6f44
SHA1bd95d68015baf73a12ccf8e84352bb071808c5fb
SHA2561d3a1babc49d808020c74b17076922a73da0b6981454171eb67a4b4a2089f388
SHA51250401916886e66a6f7449c70c47072cd93f7dbe90d2d7c42a1f9a2f1e930b2763c2255f0a5cf6d23b6b725c8302d7ed35da13652ab93480a893e14b366019c48
-
Filesize
90B
MD5546329db6a82afd4069cf8b9a7820de3
SHA142ffa919f616ee6ebcd557d52355a28c78672cd9
SHA25639f05fc2d392f2e42432cdbbec2fb9fd6859ee0f317a2b285c4906fa403867aa
SHA512da275feb49d07a412834fbb1fc7549d7017d99295f1611d0c43acdbb4f81adf975d2e47740aff53582cad318320905e1e1075003e2f6d544c2519543aeb02dec
-
Filesize
563B
MD59fa8a6665815c61620d4b589f9b6b60e
SHA19e906f0f8eb8871fb7cfcb8844830d05907c743c
SHA25650cda1ecec02e742f0a2238b89894c41a871c795f79c6354494ab3fc432ac06b
SHA512f697364ced3838562bf7ca24d06b836de83c66ec62d1300c626d6fb25b6659eb3c2e5ba7e5413fd3f11e9f1c36a1cc0e39692f65e411aa9fbba839d6b3d9306f
-
Filesize
36B
MD56cc59432060be6c927a561c430334c26
SHA1f09d49ada59b67bf24da37cb33b89423e1128e44
SHA256e95c5a8b7203233d7c9809144dac4ed73d13001dfa6417a1162381406c22f4f3
SHA512d679d09b2a414b240e78648ca230736ef1b18e047bba0765ff0b4c3cdaa1563c281725ee6319f6c5d1f5af0b60e34764c4dfeed514f29b88d5efd0ea72463089
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5bb52b9081f421abf3e5d9ad444d32e8c
SHA15d96459e92ba02b7ed1bebc7cfb827f43507354b
SHA2560555fb7512547a0138b565acec9c30591d4055ba825a3237e9ff78a2aea1d596
SHA512c30f0974d0cea7011b4590f8bc5fbef89e04c0094d48f050568d6df46b2ac0cb565040593e5bee0cf5444230e34cde903ea702d48b4ea0d2ac181af67d2b6cb4
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD524f53689a058de4e3ca7bcbd08448d41
SHA156a4a689b9c35778ce0f0669c2a2f7af3ceb15fd
SHA25659b4f5450ad87028fec5cb2b433b25f50d01cce38d5d49ed531d6446cac42560
SHA512f81f916aa9dfa0ed46fe652fc79016ef9b6ef31b7a68ab8e404767c6233140f0c0953a05cfe06443c1a1ed189c3dd8b85d830cd46eb45ce67f96ad4d88e5203f
-
Filesize
108KB
MD54b1e2817360e36deee76fbfa94697e96
SHA164d18acc642c5aa01855cdc9e4164239475365a7
SHA2569d004b89593016f7683410e3fc80238bf1818f3b5abc859b44a84af9186f1638
SHA5128cb886dd9e67ab13e146641fd7df43007f694376ea322e213e87451b0e6a293c474a815b4c254003aa6c6abde84b50bffe6bdee74e1ce45ce6abd282383a0757