Analysis
-
max time kernel
48s -
max time network
134s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
03-05-2024 01:58
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD54be0cce8691459e829ea39e6d1a86225
SHA1afd879e9b79c18f329f3cb1da9182a4dc2a5c581
SHA256dc39f31b7dabfc97df7e6f243e1de3a7529322c22fc92c2d4374a993bc2b0628
SHA51281b0988a1e6b37e500f8050c8683eabbf610f3884bcef5abc16cd6cf8fcc1ce9c0ca0ac0097323d1c553cf1d3b58660a2ea5727c1be19cc0879cda2f28c0b580
-
Filesize
1KB
MD5caa37e2840e803b84e1cff0f5207dcbf
SHA1aba745f8f9eae011e9e3f22a8a431ee2b1c1bb85
SHA256563fa20777c46e4606d10151416d343df1a80613b40feff0cb93a9418b0610b1
SHA51225e23d558f73c4a3c81e39317ec22b7f296f337e4988f30bfa46e46611fcb9253d527f5e6766478eabfdb07c4c5304aee230274e5762c05af3af6d208aa9fd3c
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD503e86a50d927ce0fafe85b73afa29381
SHA18cc18e39e97cc902dc151b870e2e6c32686a9140
SHA256df80431bcf055446989bdbe8d1a4dba65ef982345730c7ee105a6ba0d6722ff8
SHA512e0b6cbc8ccaaf8a6bb306afbb2d5c7023b9348b37fd4cbfa2054e7954f6916cd076063e439b9605f7f8919f7a770b7a3a36bc1b84bb2dc811353b748c9ce30c2
-
Filesize
8KB
MD56224bf7b53377e858d1e68ea7aeddd9a
SHA19f65cb33a5ca8121b41e1c3397eca90c77b90d26
SHA256624be39e8d9061a7020ef28419457eb6ced521f5ed44341593224273e0a6b90e
SHA512494ed709de6c9df8279518fea7694df56b4c9a63030c46b30f84d7e3e7e5f6e98f223c706681ae608efafec1bc6a2d41ab3800e0fdd5f3a6b0727c8ec0fb922a
-
Filesize
8KB
MD51b074f9b435dff67b412c2a3e073e12e
SHA154708803f08f9482c76322ed0ee54598ec83f7e8
SHA2564ae59a508ee3cb2e0da50425f088cb045ad4fd82acbf5a9325ac13b8f2b11065
SHA512d9c72d42b3f525126513f78c1e9eb5635b3837332bd0c24000dcc1bc8bccd0f57b42808ccd411b2aaa2f4b8ee0882f1f016ad3950e79816dc3c763c6fad5e7ca
-
Filesize
8KB
MD507bd93564cf199c1818ad5e7b27f10e1
SHA114d65a2c66d614d28269f04a3c72750ac048d11e
SHA256a1f339365065505a03269984c8cd07c85735ead82e9397d2c9caedcc026483c2
SHA5124bfe0b9d480ab1d51099732b96bb2578b9f5031c2ace458b2230adfb728ce35c61e311e9f528f8b4356d8c216bf14281f45976b98f0bdb41363616330e8819e0
-
Filesize
8KB
MD59f270a5c2fceffd931654cce8aaea3f9
SHA1010c4a859ebd8a7f1071cafd2f7c3cba8b4180c0
SHA25651006b1156bd9c071c6526213cf919fd120f81cc65b7137f5bf9a722ea2d82d7
SHA512f5eee717dfcf2c0fc1cec99e3702631303c6de8173438331c65e64899e1c3f54edade8a4133d8d46035a4e2aaa272f4b480c9e86fb99a511c994c588b667397d
-
Filesize
8KB
MD52cb72f0065b6c6337e11d5f834411291
SHA10c1214b6fc33aaf8029135e64f225b4cc867096d
SHA256b4003fa909c6b38334d5fe5c4394a38548ffd187de7ade73bfa050591a09a2dd
SHA512b2bcf5f317c6319999b246aaa350882a441afe00b023bbbe74c2c30d6ad216bbcb8ab1f499b973e4b9cad8ff22d34a35ff5f4d470b1c00787c1704207b1e29d9
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
8KB
MD5988b7a57bb225091e9e00bb6c4c1b0f6
SHA17291342fa43abe2fdf82bc2603a8c445a96dc6a5
SHA25675932e590de12e8f38bec1974ab9ab4cb2f6219829299a9f13f262e89614ff9b
SHA5126301078687a1f36f181c05e61a5ec2a0df858b4d54c97f0f0407bd76ada27d339b1db096cfdfc7704efa860ce692fce1f058379efec90bc9cc7840a91294b9a9
-
Filesize
512B
MD5f511f5fa4ea6694938b59eeb765d21d5
SHA106e95cfb28962362f53fcd7d2b79d7811d3c5fae
SHA256fce8c963f21ef20169a601f2dba0f74ddb388a1980c3a388a77fc2124ccd2c7c
SHA51220517a3a1ef1a5a69fe5a89a325848297dca3cd0923c00f132a34ab3bfd9b37e721de8aa17cfa027f3727040a1153e363c7c7decf9d25b9d569b9f4774b2a844
-
Filesize
8KB
MD5bf53375f40b350dfb3b233f23fc11fae
SHA1bbf7155020ffc974090b07a7ef0e2e5fb3a317d8
SHA2562a10df5254be25fad5568da5c9a9bd376358f57b747b543cd457220e41c2c6e0
SHA512f0f0536c007c93bbf55ceb3f2803a84eba6e969af586333f6044919e2beabfe04642d017bc843519c95c207070562fc86802768dead7e0381bb52a8f24c7442d
-
Filesize
28KB
MD5753a14e8a56566b05d755d716f2ac95d
SHA19c9749a83eb7d75681e68252099a2b35782012c9
SHA2566b0f0cc6d891de99709533d8c2655801977f1d6a728427860d5b1763e0f5f1bf
SHA5124958b2aa540c0402add91f0e0d777901aa5f1f3fdeb60ae15e26242c970c76dcbb54978eaaf684b1b74adc7048e45f4042cfd6c63a9adbb240d127f2138a421b
-
Filesize
512B
MD563688f992fecaa40605ef33b3af9b119
SHA1b23f51b46af9155a319b1e6f3a27b66ab69bebb4
SHA2563caf079ebcb06443f3ca63f1dd220174c125d3d2a81574eb268424bd451a30b5
SHA512e397fcae7d1290cc17742c647b860070c7a810a63a4bd8e2032d772eecc66d8eeb319d445a1fe80b41f8af533679d9c8fdd8f0886e71778ec32381fd4585e8a8
-
Filesize
8KB
MD5a9b670563c1bb546a0e1a6531d998bc8
SHA13131277dfc4faa4335236cb64045c559bf890d5a
SHA25658b775e1f48f4bdb9da35cd38f1c625c0c62f15b7ce79743011174175a8e0ac1
SHA5124acaad65f035cb2a446296f81eaf75b8b68be3d6e860dcd51814cf983e8454faae5907e17b3dfdab8e7764dc292420e2043a2e60c99a59222de1dbdcfbe1dc5c
-
Filesize
4KB
MD581528828dfb79b76aece5ae7cd1ab7a9
SHA1e6252686988210e38eedd98f603b63092f64d338
SHA256dfd7ac5d1e0ce284b1b06dce803fb4a342377f5d07ba3096d37fa41e22cfdfd9
SHA512e8366c128fe35615d628721b3fb8760737e1b3581be81959448fec5de0c99fb9346630b2656f5feffcfe19f6bd08bbf1ff207beac5e22e16ff9346a4cc254111
-
Filesize
8KB
MD537bf1ae7caa7cb8de98b1062962f05a7
SHA1ffef1763176634b28c7794803e013f197e3726d0
SHA256ebaa7296da5b7825b0af5994d4c93f6d2ffece34bd20c676c21b5822e72c39b4
SHA5128849e163d2017ab9703db1bbad5731733606c5276f7338f9c857997df5c34d391b004fbf75cf294e865d393739c1ab3c1d6048ee00a05aa7d0d333ccb0fd0103
-
Filesize
8KB
MD58f6ef2280aca96f8021b921b0d834280
SHA12bb71ae84574f34ec7cd33b185c46c431086bb19
SHA256c5db789bb267e556caae4f5c6b5600f96b9db23661006784fe7c07ba162ebb16
SHA512cf6c90c6108a32997cee0d0043bded2e56ceedc5de89ffb89e04c24402195efed35da60c95f8a33d93237c37a8304efca99d63360f0f723f7af7e91b81fa293f
-
Filesize
12KB
MD56b2ca6a286a89b6726fc4d2c0dfe9251
SHA1c9ea60ace47466a2b81748ee0de50fe07d6b50b5
SHA256a39afc8e3aa7ac26f6b98ff25a9601643303066c5eaf5a5a6f0707e0c0493e8a
SHA512facede132a5282b517edc6b678c537a1ec4a82d6c25d17816150909312a9a086bebb64e5a85948c65610f266ff3207a00c529eca58bc1cd890442f13fd60b336
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD54bdb592c9b1a89ddd6ab44779f6fb5d1
SHA12e05d7ba48551ea1aedc59911642c5684cc4fdd1
SHA256fe04efd08f055e58f6e460ed0d8f8e2e902984369cf012e9ff5d989f49e3dd1b
SHA5126083c53f4dd0d23719d929171b953679590c692246d5379f9052736b981cfbde6a260cbf0fe4356726b18dda54fd96edc9e3980565866e57c29fa3eda3a42676
-
Filesize
16KB
MD5acb96cec7affbf2e19c23c6042f7f284
SHA1eeb496d2a0e89f83c147323e3c1f38dcadf35844
SHA2563d7f394d2de61d3b5ce66b294bc07aeb1336417d886be2bc3148a4844ddd48fb
SHA5128dee95b8122928f1cd33f72d7b3cc1d832ce7aedb674d8ae862d1a79a4b3dc26825acc1335b23a6c7a08f30e877981b805283470e83bf3d86790d7a5d42ae8e0
-
Filesize
16KB
MD5a4514aff12e4e3eda0ccd41a1e1e2235
SHA1caf538b1c05541cbb23b7529f12e1a62b96c1b71
SHA25677d50b82ae531e709b4aba6c4677b8d0332db40e315f216da228a589c741865f
SHA512e82262f2f2c4a4f9f116c55f8ddf865aca35ec443959e8aac0424151749917778401ebbeeff1dfd475512d7f7641a187117b091a3a3731bcf28d6178589c648d
-
Filesize
16KB
MD5de68dd300aed89ea6aef349387ce7571
SHA1b02606be529a9e6c780ce33a72d7ab300257daad
SHA256426db65fbb4a212b805ea87a7b896b3606ff012b9cf489e27a7957b248f31e4d
SHA5120a13dc063e93d732280a477edf871dda321c273be640f1ff20e86c42a4a6260fbca79955b30cdb31f6f36ed5130113c2ceeceec60d2ef875f5c61204fbd29a87
-
Filesize
16KB
MD5a0325ff5668f4474177bf7958d70a597
SHA1f9471cda55083be6cbe3f62cfb230b2b317cc4de
SHA25671baa9bc34c3832c1b0a51c8aa3bf03424c6696ae37147861da52fcceaa0f688
SHA512c8365efeead343b31fbb858caae4f8b1b6c9fcfd04dadc3bf4e39a600eda4fc4540a727a023cd06bfc28374a21e0655cdb14a680e202383710823032c8fcbc26
-
Filesize
512B
MD5052edaba340f5f4e3c389688fff5fea3
SHA1a67f00cc6b838d338695cd663791814cd26c0fa2
SHA256e0981ffb8fd73b90c2998097813b22a33d2c1a8cd3539ea16469f4ccd65fce1b
SHA512d4aa433190f75174574373938cf3172adc5bd2d6ae9b29ea6ec88dec11ae1163f00ad281e19134e6e4529d8acca2b78181f3425133eac2952ab175cdf15a04eb
-
Filesize
8KB
MD520881599a62eeec4ba3e50053e8982e8
SHA1baad85f40ed167559e9b2171f339df638907b1e9
SHA256b1de0b8cc8bbf4640b39858ba1a57734e677821032ad1057d13b52805fff2be9
SHA51231b78e531068184554683d5a4d4179d2189ffea9a845633c14a8a7190b0c54039e452adc993037bf8f10c2478c655fc347864f3882285ec399f3c940b40737eb
-
Filesize
4KB
MD56e8e92d7d57ddba955870eaa403ec50c
SHA1e036d1196b9256c3d6a64b33b9328bddfafab0a8
SHA2569d6a0f75d48b35e44d16a2f8340d685f2a07c2726975aa6a5386a30d04611180
SHA512b3f02787616ab11fd63d018afc5e9581b648489e85cda3c81bab78122a61bbacf1a78d3a531b2dbb07de0ed7be13f628eb3fc0374ab2506d7b35d0e872136bad
-
Filesize
8KB
MD564acfa55c138dbfacc273d361f9ba88f
SHA19603777ce2dea9a86db15dd38b6038a6900542e1
SHA256297124d408a9b16b41f2158a615e22627e55e82004ab418644868cb7200f0e61
SHA5127c2f7389764d0ba240b9d93604479fe998458a3b6f9b0201aa2660dc70901076c723a9852a8b217242a6f65fe217e105a6ee8db8983bcaeb6449777434d61099
-
Filesize
8KB
MD53d7729d0e20446ba0319aa9650544d97
SHA170e5a108ca8660b16812e215b57c381de14c21d9
SHA256c46b6e4596f610ed9adb696324f23f8fcb82b5f043d055575d1e9941ff368d22
SHA51230d5cbc3aab50e6ccf0dca99e570b5174ecdb408fca973bbe503531e75ab7aaab7e0696c386744664610951c2b9127608210583ac150e7f54e9d3cdbf0b67e2a
-
Filesize
8KB
MD503360a8e8036d0328583f94e95e927c8
SHA17fa677166cb8db63d09f7419e581fcb1babc9b06
SHA2562ee5208635b5af597366f23a01b806bbc1c87abed20490c992c728028db59534
SHA51248dcbc8442a447ae000e030ab2388996d5a8c08cfb560edf6dbc30119cc840e784503eb2b4a0f0e2032ebdaafd159fcee9587231466d99c7e705d7002f3c08ec
-
Filesize
710B
MD5870f9702911a46b2a40eb19e437ae1e3
SHA10ad2504588d19b1e4ba350486ebefd3ac0f22a7c
SHA25671e9c5e458339366a9a4d1e27ca77aeee248cc67ea2900b3cf7b30a4b98c5b84
SHA512492dcff91542d8e93c1decc712fe6c4c185a523d991da5bad3d633e2bd986275a51dfa7ebc897396f5a11f70e92cef6a65906ff7225afce8d6efe54938ca7dba
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-663444E503C00001113F85EA5B0531D4.temp
Filesize438B
MD539953c0d592cfc0e53eb6294b143d425
SHA1da33ae5a132c63a500026a07f664e0e3a665c4f5
SHA2565c4c8a290ad3e2d7dcc7c316c11c4de21b949fc2066af98f95c6b995faec4f60
SHA51279047a952b8e7aa0e6f3083c3ad50fa6b780466807eab0d476b85a72d10eeeec6b3a0b615de3e56a3c5e5212fbc0d4021afb6e0f35b28e4554dda73999c24b3e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-663444E503C00001113F85EA5B0531D4.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/663444E503C00001113F85EA5B0531D4/report
Filesize733B
MD5f4fdecc14391dbbc8fc722d46a26cc27
SHA15d8b28a546522a95db76563010791d17655a7c84
SHA25652fa7d846f54c9cb0ded122848c37eb8acae52b034c4b2d76617d4cb89b8a3bf
SHA512e5cbdec5ccb447187957a8fe83ad2598d9ef3c85d1fa0588e4b299fdb503c1a2076589c069c3b4672176816a8bd73cf1a0cda93833ffc8536fe792093d4869cb
-
Filesize
90B
MD5ca5fc55b2a91e5a4371f1e74b2e3c03b
SHA18fdca112ce11a73fd0406ae949fb25ac64d5266b
SHA2562e50c7b162ba05711269d002ea4c0c4315620d4c3bc40cad4cc00ad674d11405
SHA51213fbec0533e4343cf890fc568414dbf395a0537c7e403b6b00495beeb8e97777b6de42958e8f95675e6a80c33b254d1ad8665b95da64f6903b2bef613d796414
-
Filesize
565B
MD5b0dee666644eca1c2e0b273d7332040e
SHA1634a53da73ccbe413a4262f4c2961274f315e9fe
SHA25682cea36e3ea3535d32b8af05a054d68a64e4e838295419612d2d55e94afcf259
SHA512476ba497b807841adb90cbe13abc47c8b0b5d5d89afcb54e812a1d93c1e66fd917968f2fa79cb0edf71a2a651746c54668bac9387539d6f847b62e1b5589af6c
-
Filesize
36B
MD58a91f2298422f6706981ce3b92a54109
SHA1b0e5fc7b98afe68f5ed47e8ac3bfbb792b44f8e7
SHA256960f38f658f8508369ab88e659ff2182f820e6ec0b77b50f67423502921cdc39
SHA512ceb89aee134cb997c126a50da380d9cdd3075cc06241b5eb1cdd36d74b3f4f9c750543bc8a5cb8c7c741ff44830b458ef13682d7eccb3d4551d70d872cc6b5ec
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD54fb8a9ceea323ee215e6cc1acde21e65
SHA122ba4a123521194c57cbb43e8a0e875d439bd949
SHA2565783f7d28e4675a5ce45d418213b7be93fb558f82aeb77cef4c3d4cabb044677
SHA512e1d8954fad4ec17f2579087752e4f7101ac8c0a512a6d0365da825af52094ffebba764565f5041c7b98880f0c63fc33884ccd5b7f6e93357e7e8e1ca960d67a4
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD51c9ad69167608f4649496c72dcf7f653
SHA11bc0ebc84e1a355e3998941d208198b4d1ef94a4
SHA256204a34218b8a64842194a45dce61941ca1b1688d1a4d722905ec3caa9bc32db7
SHA51249685a28648adbde697bc7f2238bcc4c4eac1a0ba520f6f2ec8bda407813d22c34ee52b57a483a5de54c47e823ebf25966e13fe72dcbfbd3f940edb48eebe6ee
-
Filesize
108KB
MD5e493567dc50eaaa852cd6fa263d192bf
SHA10a3619c8a4430568779c489d886cb1f359a72514
SHA256fb792bc53e8c3669211c3e6bdaa85374d78e30e237873e8cc1dee8ea62c727aa
SHA512d9f772531033d2085b01f7de7294567882f50405a6315301db1f46da98e1000c8ea8e61ec7ae533429aa727cad8724b84d1487c7298089f40c33fd5d53afa52a