Analysis
-
max time kernel
48s -
max time network
142s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
03-05-2024 01:58
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5cdd860deec0fb10e828d3af7d89248cc
SHA1af8f60f68d06cb4f8fa1c495d5394091c3e6e1e7
SHA2561f4eefdcd28ef8e0ecac54dbfdf317ac249935302a31e3b861cdba775c5585de
SHA512c7b036b61201aa3467f198d60502566480895c1fe66b5a7ab6d5cbab89f5c0eb97b3fba9c4ce46343b341af1dc7f52867214263ab1cc54a2c94553bc43053452
-
Filesize
1KB
MD576f770b7a12346496b67193bcd5f5830
SHA130f468084c7664fb716016c29985003fe97fdca1
SHA256f61d29e084d08a80a12ea440bcd0aaa2cc0ad1ddaf95b5051c4ec018c8c1b243
SHA512b9f017c1fce89688ea77cf324b9a3a4c4ee9370479f7965b3c429f77e1effe7150bd41c044c68fce3eb0d973c27c82435ab88d1d80aad2678222f17fa0349a13
-
Filesize
76KB
MD5244592a5662464f9e6e8aa5d52402428
SHA1885e44dd3ccf643475ddb16d7d2eec0c809fd1d5
SHA25654b29062aac9ef91d03294047b7780498a2cdf0ddd75028dcebd9b6b7a88214c
SHA512ce35edd0ec05450bb08d6b47583393eea034333b99e13ad2bb6848724f09ed71334a858e5cd5ccb6909d516ae70545c3e7c98ff15673005e25c9ad60b2a11b17
-
Filesize
512B
MD5fd3c55bfa76a05eab0610d7c1fd46989
SHA1b849179cebe15ae1756aae4f3b2d79dc7c76311d
SHA256ed37d1c4c9362e3a5fa37aa2b33d7611d768ce144f8e80db7549f9d63a4d8ff1
SHA51262240c2adfc5848eb9bec8c36c3b7b591e83c5b8c81561b42e012fb0c0ed6405ae9df6bbb5c92beb9b92c0cf0dfe8e3d9a330abffc3a056471e3636d8bf97690
-
Filesize
8KB
MD5cbff3508b661c82dcf5bc44493705e18
SHA1584dcad3e0fb2eb38ec949b6f64b47c8475da8b2
SHA256e7b5fc8602ca69aec00bbeab26ef3d9b1b24d2413355949300f6f914773d76a6
SHA5121afe7b73c070b7b239c51f2b67ae34acb1a295cfe346f91e73dad6f893c46dea4d7d2eebe7a6f07f5b4d4f0d558c26d6ef82f485aad36503830e1535e7fa9c57
-
Filesize
8KB
MD575b5f5f81a887620626bf530416d24fa
SHA1ed369522dcb7fdc2c05fee2480ecffc2dc90bc52
SHA25676d4b71c5c34ba013d61dbdf886d7235902eba8dd905780d215964559ac5d576
SHA512485a29f7d2af660a859a85a7cfae1bc8f66131b50a7685da92512dbb4ec9134a610a1dbdfc3470a45f7ffaf9c27bd74568c876ebad305b003eb6d4f77d67e6c2
-
Filesize
8KB
MD5adb20bd72257ce969d79416d807c8b4d
SHA1470cd8dd94d57fa64b3e0653551404bac9ed9527
SHA2560fb0e2c626a77411ea84c522cb4351081a5b4e84fec844f81340df91fa35777b
SHA512bfe60bd65f58f2d9bab46a5991a935589991c6880746ae786a5a9b0bd52da0970173027798171aaed34ed2d2bb0f6a6fbc84da4dea36b631d0096bc2a801a601
-
Filesize
8KB
MD53489c6e7210873654095fc63ad7de5e2
SHA17b0e98226af2d4a3996e21b78f826d00cb54dd9b
SHA25659dc1414c85013ce81fa85b25384ec6224d5365b9ba1ddd010b37f80155c77d1
SHA512b9cec575257b6edf29ac78c773f4c12a38ccb55acd3d4bd6c21bddc737b3f454d9d6d590a65934abc16741c39b334b5ea304657e6cff6593b86733e3a69ee211
-
Filesize
8KB
MD576d143aa4addd8cc4899b05e7b795107
SHA1eea07b7f0646c9282ac916a459633c0dba1d8fc1
SHA2566a4f6594919be9579a88c723ea61258a5c46910f010bf81853e0e2252cdb5858
SHA512f0cf1c67d1c181731703e97fbda729866d16fa68f48bdac3aea3cfb3451a6f2258b0fe2089d74f1664afcf6f2668b60ec55175d1f870cd290e552ac770bad286
-
Filesize
40KB
MD515d5b92dcbda7ef7f9ca327a903e46e4
SHA1ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA256e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
SHA5122352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
-
Filesize
8KB
MD5f96f8f4c1e348b827a659e20dd3daeb0
SHA1e9543ff903403214e18a2f2e2fcbbf33287fb2a9
SHA256b58aac2b281f78f1017af84b985b112d08d2f226611e9b8676ac787fc090bbdd
SHA512819f8d41e55370f950d4fbba53eb704b494f3982928bd34d8321979d8b3ca160ffa260debe71e98054fe53353c9f89e31a3b7ebc2bd3745d7cc689d5fff62511
-
Filesize
512B
MD5c354b7643cbb7e74a5d4bfcc9170757b
SHA17ddad45a68c522536c67ed65934926816e056027
SHA256920fecf4b0804f4d46202a8bd674c5344c58292d618f2375f90618a283f8def6
SHA512de3aa537fd5daa65018a4b153244af733d2209cdd3b740059d95f8687e3eae7c27e00935b03454eb5a42731675d08e5e22eb5d4c1382763642541bbd2350141d
-
Filesize
8KB
MD5b54f5a763e782d6abb0d9ad8f309a1af
SHA118b7651b25c3477035bdc359ab7ab3d8da8e5924
SHA25600d5638c94fd078c043f25283cc1dc2dfa557902ba17b97fff02f0beb73a5ac9
SHA5127b3c40dc73dd4bfe23ede764328fb9f8e4ade5814fb30ae062d23149271630da65b9b7855525f69d2cb011a08ab438ab2210d4b9b71c949dc913d345ec962962
-
Filesize
28KB
MD5ed3baf38ed7ac69b887133fcb912bb51
SHA1b90d273a0dd4eae7995d258111489ebfc05e60b0
SHA2565a765c18c6d746f01d6ac02045239a030c1405c6e17ab1738e06b46cb10054db
SHA512f67fd620f3667cd8574c0252fe008d8e7dc0130efd53704c0e49ffed010b29db4f050a348424cbc8e1ff9644dd5d0d878593feaaf005590b4d967d907d23096d
-
Filesize
512B
MD53deb8d100a27fa0214acf833f6c3d76e
SHA10ac82d322e1006de604afa2cc0ea93dc63b20f92
SHA2566e6df416ad8867826df8ea15eba4e21abb32b46462805c33fc71cbcc9110bb33
SHA5128bfba0a2e2844b3c201586d8c1bae476ff23503c5399562a746ff3028fe89b266cc29ce18a739f2d9abf15ac48555aee21613f06c26e3633cfff1f0c5bbf0157
-
Filesize
8KB
MD5dcbf55f750ab996c6f87393bc6712849
SHA1e428d827460f6cb98619aba525992cdd7c0217f6
SHA2562a54ac2293a15aee1781f067075e04bac2fe913282d72568d7afd7b954c5cb36
SHA5126306f8c6f5f4f48cd02e6ce1105186a51429025ff5ac8c5f04c21dddb0c7a601e9bf736bcca3eb1874d30c468a0e28c8fd6a523bb6d70ae808a6018031a83efb
-
Filesize
4KB
MD573c3e4a1b573fdfd06008cafbaddfc5d
SHA138d6b352d482b99e0cda3b21fec73067d96d6d9b
SHA256316d011602b3b1f1a0dbe2288281f9479de29364d66ec65211ac629130a4c75b
SHA51277d828b68bfadaf26045ba6d29288fd164dbf4fb26300342937a5ee6e84e1de2be902d060a5051e430074790995634e91c77f72b3ec553b9f6b97189e518eae0
-
Filesize
8KB
MD55c3e98caeba3c86ca4fca777a63dc3cb
SHA19d4aad69b4784b6912c2e2a4a77ed70fdc009cab
SHA25675526c86f3df79c21929c66706f1e0a433eb669d17d1f1a35dcb745df3665976
SHA5122de7f447cd981931ba2d81effd76779629b3acbc20a788ca5be8a5bd21621a7234e36c3184d05023b8c57fc1888d3ef8639ee65a8c1bbedd32ba3cf2c71c6ed2
-
Filesize
8KB
MD53944802d011a51e138231f6fa0077400
SHA19cf0ccbc8079bdc358eb1ff01664a4d43541efde
SHA25602d562b1e6c32c33535adca6074aa7a65042d631a252001900d30980258362fb
SHA5125cc871aa339ae1c2ba52510bd8fc202c3ab9fffd0c1c9ac03137220b2e2ec8526f021c130bb401ed6957153bf439c212763c80412b9c3cf020c978e84de9c3d7
-
Filesize
12KB
MD5dfe0065a2b1d143ea0e4ce18f047c47e
SHA1fde92730f2f5859cc72786d46fee09fc4d7ed2fe
SHA256735c6334b6f01a7b8191f7125c8efa26c3e631e875171a77f4918fa6115592e2
SHA51233d85e007e1358700bc151b94504cb3a18baee7dd1daa3e5296009f9245ece34b1f83e1fe89e967e87a55a178dfccfeb30e3c9dd9e8e5fa4064dbbd6c5af7e5e
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD54d21c494f9a3528b00ae572d44358422
SHA1002236d813b907d63a92d3191d4cb5d5592f6228
SHA256cba16b5f3b4cc7d27669f088af5a29a7c23e3485e6169097a0b803e6fa878ead
SHA512195f443751162bcd7063743bd878037dcd1f443debac01ccc6a8215626bcdc5528cc8676667f184db00e586f840744c4daefbd16c5899b4ad04b4537ded8b250
-
Filesize
16KB
MD5cf99231d83d6cb741859252ee59ec101
SHA194cff6eee3e0df59b2258b62c983e2f1359dc8c2
SHA2569037e510129093f27bd4e12e8c198a301829ea95ef1bb33e6f67a5b476ffb4aa
SHA5124f2e659be7d64cc36ec31159fd29aa6ab87ffea71479ceb55c75491cd8b874e503dc5dde926f09aeaa8537751d4aa1b8d9be6523632af8ce882cc6a4c07f0805
-
Filesize
16KB
MD54829e09eac86d61e78a8a13019ed4e4f
SHA1e02d016b86d903911b59c2cff698cc6ab7b62a29
SHA256052d6bfd5b362c9909c6fa3ed3da671ba237395c914f9f0ff3f7eeaa9955739b
SHA512218a5e9ccb247debdffbba78d80dcfc828841ae5bab6fda5d4b9c8f79b795a1c7ee1d9bf4d6e518fd8a72b0d44329808cff8d4c440736236ad07d9c5a6dedeb9
-
Filesize
16KB
MD5dcf9055519bf15588f643a82536c6766
SHA184666623883f4a8bfa5573ac62bda295bc663c3d
SHA256e8bd1d99d0b222e5c7de3e3068bdd936ac31d828bd9ba83ff19d45ed52de9af8
SHA512629b93572471a2b4c3e467300d01a3f3f269e0693400a64ed9b489190a342d4a50dd5370df6087d832fb1c8327d4e59776639a041d99d408d760db45487b69b5
-
Filesize
16KB
MD54f020ac6f68a0fec86e93e46dc4d754e
SHA19bd495e227b0f5f5bf5f7020cf8b28e016d44c57
SHA2560e15bbcfe36d388cd065c151592231130d40ce72b7c55a66fa15abd95a9f2d12
SHA512f4517dd8acab07578e2291b6752ff04c69e963d77441910492c904c1f95654e8528b6a84e5e268b30a7ab616d5d565d08f44a1fc547709c799815ad36f7e4611
-
Filesize
512B
MD5d8527351ee49120ba41d3f32bfa2691f
SHA1c4d0ac4f6514987bc9a9dda70f8dbf170bcca89d
SHA2566cfd53a660daedbd872599ddf02bcf41afa3ce317576e3a2a3727fe772356191
SHA512bce284ebefbf9786a2c8146a3c155b3564513044682a6290865ef90392bad6eeaee466a490c3a20227a3469931dd97cd7f76cb7c37b30431ad283d62d8aa2335
-
Filesize
8KB
MD5d3dde2fd2bcbc335e8f0ba4f1a59d138
SHA1f9964270278e8e0844ba5defe486a3b7ba857ec7
SHA256039c6b6ed964a2061045edebf2faa978006d815f70303aa645c9371c2222243d
SHA512c98c0fb6e57b1a0f2a8f038862136f64c257037f253332bae32a14ba6cde00cc3b864333f66fce8339b441ac4627fee59b8edab2123a6114647140275a1fd807
-
Filesize
4KB
MD59a0786929c357ce18fb1325b941aa15c
SHA13ba0d099655ba718db3a72cb254ff3293ef5227c
SHA25624624881d3a505523b0bbb24b020618c4752b6a9d303f41001d7ee36765c8044
SHA5126f325fd9b02be559b94eae706efd627cca980fc9e7784f353a1d68a52d9eab2747dfdef06aa0aaa92c502a8e55a6f23a1c089062cf073947a91b4009694e8274
-
Filesize
8KB
MD5f2f8f60cb3d54851570e2fb184469e02
SHA1b5504cc9f6fe2da13302764e98e2e40a56266131
SHA2564cce420796c39f8a33fd9d1045e5b49ecaa2a0e3bf46f9145eddd745b3d0a135
SHA5129a094eda61243a3aaeda9f2cf8d66870ade38d116f5a19724ad79e77a607f940845c0126c4cc9d94010154556f81b0364a0f5e1b7e1b74a7a987a50e60b52750
-
Filesize
8KB
MD58451c69febfc71e6eff35ba16dd66296
SHA1c3234237ddd4096af100142f11fdaa3e8cb294cf
SHA256d510408bbfee18df60d5d65c19a20487b4b040942b293c79d33579054a9efb87
SHA512e14958176609ff547d0f55cae2384a917ed82a7be60da85d6be83980741d4f673545082ed4fafc12129bcfd01ce81afcbabf80848261534612a9d92d0717fad9
-
Filesize
8KB
MD595c4ca5e1f5e162d94809649342905f1
SHA17327ed0ad7a33a73877bc6d5b1ec8e4555c5223c
SHA25623bf35063de3efc32ebe645099f99e0527f1e87fc27146b3f47d64c35d2584c2
SHA512c24dae9fc7f0f92f10f81247615e9fc980542bbea0b5babf4c9e43643a030bf2bada6cf21f50ddcb37c74cebc08fa12866fcc5753f6c13971c5e52b5095d913b
-
Filesize
710B
MD5b7590c46e82974e25bd89cb399201d80
SHA1eecbe0e55cb20748978fb1e4165e06f02f1406d3
SHA256e3ed2b987440e6c580378b7b34d5e8a0c6d9fb35b6fb7a4c263bb53dfa0701a0
SHA512d642c959024e8a2e862d998fe5bcdb29d2ada24426221bec9b1ebdf6a7d85c69ea7729393674b18f301cb92f1281c2e92e8593f2c36e37c37c84fd8781e26b06
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-663444E40248000113D9775F8388CEA0.temp
Filesize442B
MD51379fc2250f547f8e8627cd3981984a4
SHA1966da1078e11872334dd09260bcb182fec7f506c
SHA2561b0fae64d151c5e3588ec96a28ecccdf022b61c932ce5c4e4c452c182fdcab4b
SHA5127b269778a7ce48b03aba3dfebc1251215a97e84e53920dbe1b8f70654fab79e06900b713a5bb86f21a20e20bea67020c62b065b88151fe0a0d4360037f1f96ce
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-663444E40248000113D9775F8388CEA0.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/663444E40248000113D9775F8388CEA0/report
Filesize733B
MD5d02bb328396f19f4395e743fcbff3ec2
SHA15f5300c51411c6df4a2debd2b17bd8aafa8a75d7
SHA2566e1e5842069c8b5ed035c67dbfc8431a1428cc879f560df3581cf2b72c0dc06e
SHA512d5e80d515ccb360c771f6921100edf5474a320b6a99af0d7cddaf34da39614d413caa6a4ec6a1da55324dddb88d368faa76b4c7fad771710225ed33c2ed554cb
-
Filesize
564B
MD55c708e3974dfa6ca25cc5f353be4cc7c
SHA14937332a93444da5b488d02a304422a5957eb0a4
SHA2562e2e297a53f502cb34212edd4fa06830e7985ec03db0818a05638582ebfd47d0
SHA5124b9a4af781c5aa3f569e81ba0a7df3ebcdadb66cfa36e107074250966beb934b687a020eea1dddf47e2670b4f7d9ad20a3843b4ce68779ce7771f18a17376885
-
Filesize
90B
MD5f6aab08aecef4812766255c961a65b63
SHA1704f1448cc46ec0eebaeaf5c4aa5879d3a338b04
SHA2561abd411b8b5e744874d4173e3fdb6a878032c32e114116b92c2d7f0bbfa18d7f
SHA51255318e2a23817c5a3e6efe38eb79d77f782ee8a15dafca1e763f34d4315a4087c27cfa6f2f9d39b0457e68bb842fef797c1687258efacc889743144505aa292d
-
Filesize
36B
MD552abba07519fc5c6d225f368ea0ece72
SHA12e451c27055371a9fd9c44959952526eed8d3c5e
SHA256983bb108e00346d2b7f6883553aae22eaceac3e6b75f994385347e0219296391
SHA5123c3a98976c428116898ac12beba3a56d862af5bbcd4c8f62c13a269265d666f0d672904c0c5f803a4f22e84d7388f1e143983e274d364fb2e9cfd5dc14ef8189
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5641512be9528ad30abca2bce85f85f9d
SHA148816cfbd27191fe696265fa1042e7cc5098adf7
SHA25603a1ffe4366194ba5b7eda8f6d4f6dbd4c48550e89e5566553bce442feb65517
SHA512cc64ba09145287ed1acea76ae9dd2f79ef9a753f189ac2dabcf27653e63a3fa00faffdb93a3b39eaf19eceee458a6ffc5bd7b5d2985e2fef4c5aa30d0b955d9a
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD550116fba569820dcab9324bd04c6e82b
SHA1d7b5f27075e193b8226c11c4557a0216959cc29e
SHA256d511f1631a4d2d02845af0e6dff42d580f0774d62c647863bdf71db89f441bfa
SHA5124336c34d0b6bfe66f37eca3b5ea24093f4b9d7c2a489ce967152d5951a49960f9f3595c72664ad8a960e063f165b1ca2532d0f804f014e3eac74102b56e80f47
-
Filesize
108KB
MD56a3a2d7f57287c4244860ccf938d2ff5
SHA1928af9ed4dd86d3b135746e13064c41497a8fd4c
SHA256570f77e1e42fabaadf316582e054b07127036482d720699133248b7adeb248aa
SHA512339a151fa4f86eb2eaa835ccff86ed0a55974f892591bdf996187f16e412298463007370d9eec16dd398ae6b86d571f8801679442c05116fc5f1a1a6c3c90329