Analysis
-
max time kernel
47s -
max time network
147s -
platform
android_x64 -
resource
android-x64-20240506-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system -
submitted
07-05-2024 02:14
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240506-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD51582d6393be64ba7a4294c1beae03a6e
SHA105fff511e304e547e498baffe0ec2ae50c9102b3
SHA25601461978f2c50498c20a137f8fec1933481e1a43e0b981fed585fab21ad37071
SHA51215c4eece6f1ebfac3787360e25fbe61e05e484f15392652f417c70998a6b4fb4f1c2c98c2d56ae1beac148878eb3ea77ac86d7526d29b3152d993f44d120cb4d
-
Filesize
1KB
MD51774e07599b6265fab0d631d6675d359
SHA1461e2039533cbbc4cf6a4d12b5c676941a60b3c4
SHA25625a64cbcf27ef54b23f18ae17512b485285413c56e8a61e3e1dc56a6451c94f6
SHA51259b6beee6f979dc0436d8b3b06bf696403b416d4ceb431c7c944ce29661dfeae2e4ba055114bde1d99e270d8ac6f58d9f28142d950093fb4e46942487c7bf398
-
Filesize
76KB
MD5244592a5662464f9e6e8aa5d52402428
SHA1885e44dd3ccf643475ddb16d7d2eec0c809fd1d5
SHA25654b29062aac9ef91d03294047b7780498a2cdf0ddd75028dcebd9b6b7a88214c
SHA512ce35edd0ec05450bb08d6b47583393eea034333b99e13ad2bb6848724f09ed71334a858e5cd5ccb6909d516ae70545c3e7c98ff15673005e25c9ad60b2a11b17
-
Filesize
512B
MD5341205f6099dd5f7dffc19629b4c7691
SHA1d67b3bba5cd47dd05a0223c38df454acaa27581d
SHA256d99e6660b194b86fbca08bcd924c38e848f678ecc131de53a4e796e2d8dcf93a
SHA51234db9f93830565c1fa9ae50da778f9086fb32ab3fb14d25f844bdff0438de9266edcaff6be6cd2bc190766a7325d4c5643c23e62f5f565c4a15d5d21d6986bc2
-
Filesize
8KB
MD53f52c38c30c54b1f4a7f0746b05aeb9c
SHA1aa7440d347859b1deb8632dd41b4531e5aec4580
SHA2564270ed2c0556ba27e26b164772e1ef5d97c9c4a86731bafd349fd1335a45ac67
SHA51293f4e026f2fc7c235e5c0638107312e7ee899ac3242bf381a2d84daa6c447ad4a6eade822d086ed5f79633e8180526f02a4ac4c36b9f6d2fd178f85b375cdd35
-
Filesize
8KB
MD58a85578dcf3aa6fec951ca3fe64f5c5c
SHA1e8a9a49b85cf54542f6581a05a36c422d694b2bb
SHA256dbd87d52b4e4ef597932d10218dda45dee60cb9049d5bd6fd4f6b7e557b53949
SHA5127cd614c639c2b19eff0b2c67917b7c86dc10d7f37a1e26cb5804b5e320c52eaa1deda148141a197dc5c97ec8bd22c36cf6c1ff95f47d85c23ee20616e5bf0ea7
-
Filesize
8KB
MD5a94224ccdd42db6680c64cf5886077a7
SHA14921c5dd72f817dd8e8141aff7984e61b3cbd81d
SHA2563d987990736b5c60dbb0a4df8d8254f449de8de6aafcf92e0e8782600a896d46
SHA5128fa536b279b8be9e42d1e2dae4eafa97f328074907deeaeb9d56ed534ecb553d32969fadf9e0a38a922509f8e4c516ee91e049f0e92876bcc9c444ca6f508c6e
-
Filesize
8KB
MD5b68230aeaf88e4013e559cedb80ac78f
SHA1fd3c2d73022c21a60a16612d0b05a0a42cdea1b5
SHA256cab8ab004262221b14050d4260dd7de4a8850345672f17ebd0bd8a1a73153a59
SHA5126566df539d5abce421cfe3a0a7ec8a364c80613f5e4fb4b7a773a06fba4a501a6290f50ec47dc6641720c12c2140f8ed27badfd53e62fc625c4f3b61cc0fd2b3
-
Filesize
8KB
MD5abee9594a999fa596ce4ed697fec52ec
SHA10562aab13174e6e6af4327e8e09229bb294a3f2a
SHA256c5fa4062e3ef010f43b6e76e27dd554781775e2ef25a42daeddba3fe6230a02b
SHA512c962bb50fcbf2e31acde453f844b8a0878b585156fa2127abd559bbb4cb7d9ea315e35038eca99d0c64d1273084b38f28e84dd9460e1dd9ff3a5df2f5aea0e81
-
Filesize
40KB
MD515d5b92dcbda7ef7f9ca327a903e46e4
SHA1ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA256e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
SHA5122352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
-
Filesize
512B
MD5a413c4e43a7e4514f492b13ffa01cd5e
SHA1dce4e0470913ceb9125cc5441ad06315ed531e07
SHA256803a221e8afde595023bf079e8bb1f9611013d00594cd5aed5f3476521289079
SHA512953d22a1f2fbc7ba556f2643c3fe12f19d27629e33da69960a2d81ca0660b4f8428f07dd900858ab2178e804e3db5ae588579d3c35058fe8caac99311c1c1325
-
Filesize
8KB
MD588cbffd828ccd0c430211c0ba5bffeb3
SHA12edbd5d3a7f1bbc431aa50a129b47f6ef614bf02
SHA256854771530f9bfd50b6cbc3077915963bc9cff595d68468b950234054c93e76c2
SHA512de97770d8abb482096647669cc0da87181c8618c4dcb10708339ae594ddb8d6093265c41707a9cd2a775574812c0026755762166b7e1162981d285f4f9b2c3bf
-
Filesize
8KB
MD5b7f07ce924af35c65046826a9d212dd3
SHA14ecd0b9ab23aa144d8beeb83b2b7a1d3124575c6
SHA256d3c7d7b7105e825085412c644a330c1b9b9b2f088d169df84196f678f105b50e
SHA512fc359dc18ce553f3341887269b16decca95aed16ff44520ae5dbeab0ff2c476575d302339f20a607df292c8086396a09575af57f3e589a8d2c3dd6c5f60cf7f9
-
Filesize
28KB
MD5cb79abd5afa47506966ac21c8e74a539
SHA1b388e0548f075198e74fcf93a6ae8bca851172fb
SHA256a174bed97079fb8a8f150b6805390c14fb0f5c03114442b5e261d2eaef7e0722
SHA512713b30120b77d50fb425c94ac51bb9cd2512f9a69f767461d1e389c7d5604e47c8af4b50d4fe06dad030cfb0f45bdb12d6ab1ab427f72d49d6fdb1f1cb6b5533
-
Filesize
512B
MD5fe16539a0886d4358afd024c1d70a942
SHA1639b61b8176f28aa524597fa3fc25a1afa37ffc9
SHA2569c845c907b3e1b5133213899991d2d9c9009f6d9e427d5fb807dedb5a2a1b4ae
SHA5124edd8ef4ed067f512f210124dd14bbd1537f781cd2670494390aed88c0df93c095d493bbda32d8ae65757afe5cf61b6aebf01beaa95e531d6b60786e8cd28ea1
-
Filesize
8KB
MD51940e6e3d1a8c954d250d8d79fa2ce20
SHA1c37053eaea277838a3c4239afda8df4e44c29125
SHA256265b90051a2c58769e56648efa08b542e4d71f96b0ae3bd3ec7f5203bf27a869
SHA512ccb324f6fe82ade0776d51796992be0dd4f16e00fb3d1e4156f9b2aad794df6566a95eda2c780bd30243a5c13cbc7c675881e5c330dcc308a80c83293809c6e6
-
Filesize
4KB
MD5e44b1adec0f7fcde8b82d481b6a9447b
SHA1fdd2c84353e51a116b723130b4cad694b47e8e68
SHA25605f4804204b5cb4c77767855889f06af294c24611bfaf30cbe7ba128163935c9
SHA512c1d096e17c7808491d137f169e555441e8716dffd84063bc646b4377518d535f5ba155fe28c2a86200db84e216eda823b68c52370e1908e7798e6b303f86d151
-
Filesize
8KB
MD57a0db54404383a8edd3beca21eb302d3
SHA1422e07e58d26d1cdc4a111b3d9f1fecdd838d919
SHA256d8d7bf2575b7e135731bfde6a2e12a26477a82f2f2053dc7804ff79c3813b69c
SHA512e8a0337c61c633a123b6372e0d4a344c605129c3850e233be40ceb895b80149782a1434779f6f38d776be87f4b260b9742aaa30393484179728b10657c36467e
-
Filesize
8KB
MD58dc0a8899070ad9d533ae1d7e309e7d8
SHA1ef1d6c7e5b4e5f47b7f3b6a793281f462c86cda3
SHA256b30aa062fbe143ce38e6a990af77f4013eaff8a009b9f2519beb593649211f88
SHA512410c8027880729e4bd71dc093c5d99012646f56c337d0ee2f7ca9554e596c8fcd67aacbb9c8f9ae48a3cbadcf7bb46a636d6ec9f220b773d8d1bad63de6bb899
-
Filesize
12KB
MD5cbb88e74d994ecc6f2dcc6432ef9cc9d
SHA10689f05b89b47a95b61128e614da19193f96a710
SHA256b2e1ac80c97c68f9c604e259e3238c519347ba8f3bfdae5037acc846dedb60e3
SHA512c897026b197d7a9db868680f8d261de8396fc81e7cd35610ec7227282c5f99f9fddd0501cc681994c177d5d43705d3f729306bfceb62f816daa268710b5792d4
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD56625c0446929fd563e0b368f5221868d
SHA12083a5b812219380d3527a8727f2617365882e22
SHA256dc7a84a3ec029dbeece71b02596a63e73fb7e4cabea79c924bc72ca6de8928dd
SHA512f5954d37d459d59fb9712f00cf00433b5a789912dc58c8e4f0f9b498e8697c902195171bd87229674897b566154052b801bd3df4ce3c661643bd1182e6814c81
-
Filesize
16KB
MD5301a50913567ea909d669f7bd5d8e16d
SHA1f44d9c23610651abac9ece1ae4cfaa891d24fef7
SHA256e133f25b49a1785a1171574105da4ff0de7558627c37179fa9618e5aa1087781
SHA5125abe0004e75022fa0a75a1e5e0d6550a28f66681825c5f46ec06b3a060912b2c8458c35627d48ec7175089d5378c8a8fde90110c00d5acac94166982e3ec2c95
-
Filesize
16KB
MD5a36eccb4b1e06dae1e9878c106c52e5e
SHA19e9edf01d7e6a5631816ec19d2d3a167d3bd1ef8
SHA256778b9d17a57af3237efa3a2ae1da4ed2bec966d81dcaccaf8e1507cd429517b7
SHA5121af773cd3dcca16675b920ed8724b8b185949af770dca8d19444b32a61802748197d7e9fa7763b56570113b142140a34cbf303462320089fd624a0fd64be575a
-
Filesize
16KB
MD50e067773d19611d3fea3a677933d5f2a
SHA14b3a2637c8b207123161c865628ec602c9c33b3e
SHA256a9c5d1e31f2973034e10711dec0c192624c95b029a375be49b998709ce77a81c
SHA5121e53065d0446eb479950a94aa80d1c7c929225f355c30873a71e687fc64d7a7e004a8d09dba1122b9c031106fd2aa9715738e30e543f1b8054e5b654e2972ff2
-
Filesize
16KB
MD5eda96559b53540b070e486f526a4cacc
SHA1ace2f4645a2297d178ff849a13c95b9432445307
SHA256b535b1cc36838c013324c98e411f043cba25a911479a14bf498ccd52a51b3968
SHA512438403f921348431cd8fd0cecf380868e2dade89978c25a038b86447017a3c04f78f3f1ff9ff610cb1adb12919854ca66656918526333896ef39e6a2502133ae
-
Filesize
512B
MD55c457784420bfb0f974dfdbb40a40ccc
SHA1b3777fe0a1d40f73decc2b112f719514925abd08
SHA25635dc8b8b9d275117fd6d822b3c7391d5d6c229e55a901d54dd63a0ee31aa142d
SHA51236f9ec026e2ba3a1576594a31c88b2b283692965f0f76fafc2552259f131c1db033cb7e31a2d7f93948db6a54d1ced0f9fb1f36b689b5a3981f60ae23b6640a9
-
Filesize
8KB
MD5ae127a793a773529ac070b9e2721d06f
SHA1a351a12b4de9369154e4ea7e2896da4df142e337
SHA2565f0b3b82660250807ea7aa40c4248ba865a5f9dc736f617035f1142dc31afd7c
SHA5129d9c3870ed02dbf5e2378062743250147f167349b66a32c7234bacbf6d7932d0ab09893befe13796358849099d1fe16906ea3e840ed1774780ef7222fffecc7b
-
Filesize
4KB
MD5b8079afe33dc5afc8fe7d8ab75181c6e
SHA1a70bc871f0e202c24b03f953ea889aac2120044d
SHA256eac5d5c9f2c5e2496826a806555f293acaaae289a19519367bb1747fb29f90bb
SHA512c5c922b6be5d4f37428c26073a027b2c499b7783be692422828209c514fa7ea3f07a460db8b5cc863377e8af17edbb59164337ead3baf4c57f888459d12c01c4
-
Filesize
8KB
MD5855cb6986c88a1ff790d5ce21bde6fcc
SHA1d576770ba1dfc78e3bde6ec32c7e883ddc7843b1
SHA2562abb9e03d10fb34995a9647cc43c8c21e1032e7b314abaa614625d674df4c172
SHA512e1577df3ce52c40d730329fb201e6affca840e73598af95dce976c38395f5297e218d891cdb92cd452c4c377ec224c1a1ff7be9d9a7cd3066d6bb11a5c6655c2
-
Filesize
8KB
MD5d209260485810e2c572cb2236073f941
SHA1e60684bf5899657b91c9f51ca7e2c9b71e960ecc
SHA256ed7ce160fd28d20230151668e6e5b4ec402192d34fd6d64193d3654701f3715e
SHA5126e4eee30dff77d23cebd8114ec710e5e8e362aa274c11d4fe3916373375cf230feaf882888ff57f954ddfaf39d9a863b147bf8b8c004047da2cc483ab976faf4
-
Filesize
8KB
MD5ce71c1c6d6a5191cfd940f51b6cfef27
SHA10c75ac733e518065f8a5144a9e0cf561eed8c0be
SHA2563994ca0195aeeaeac85d014c1e7e5ed47951105998e0f79bbee6470efdc72718
SHA512a48e8b30fb16dcc69abdf063a1518e1b0b1bf44feac7a59c1a91d36be96b9c1389ff572fb885eb1aa7e21c0f3c69e36fbfc9fbbc0ed9569d9bbacd9b8fb8068e
-
Filesize
710B
MD5ea441617354621da67066622f4574f4f
SHA1af28554f3a591c7f6f574ebae1225cd46c49349f
SHA2567b643c007b19070aeec34d8fa18caf1e8acbae6fe0220b72290ad379b7b17dc0
SHA512f4814d6ae08204ae33f0eecbe49e677c860162d28a10db07b9e321a9bce0efe8a84dd1b384141564ef2e223fa64135142c416d26f80e9df885ec53c3acc76e17
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-66398E8902ED0001140017C4CBD44CD2.temp
Filesize438B
MD540558d040613bd7507c3a81da18ef102
SHA1cf32f6b23abf47da0c8cbb1166e207845a699fe8
SHA25663b0c273eda44b9245a6689c1024cb874fd823a44df21473be4a3f105250fa65
SHA512bcebed7881661261b4d8f6d39dd427370638af597bb2bb2ca8177b00aff0530789289781444009806e66023f0617fc4d9e9aa3935fdacb4936d3e483ffc6c94b
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-66398E8902ED0001140017C4CBD44CD2.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/66398E8902ED0001140017C4CBD44CD2/report
Filesize733B
MD50eddaa640c1f05af2a2ad0010accbb45
SHA11cfb0cb4a3faef5ab76375bea76d5c19c71805d8
SHA256b36137cf607c17123ba805cf51d145ca5dbb11b56873acef9f87af161b0065ad
SHA51211ffabd5ee7296e7e8cc847d1211fbcf41f30cf89619318284688d2879dd75a4f06a5278771eadf6b06eef460571f2c99915dc734fddf5911319961cad018f6d
-
Filesize
562B
MD50d174531e866663bcd822f38ce9ba342
SHA122208616532eeb5602c6128045bc5c51d9f7ade3
SHA256123c781f1bb4d08d0ae47179044980f46bc838d50f0c38063b0230c0dd11f8c4
SHA512d8d1ddf721ed97db519f36cc34ce9ed1178b9754a1c99fb518f4ab3b9fe9df79a9548876ca1e9f9d057792cf1f822015240f1b49a4d09cf8e74219ee26632707
-
Filesize
90B
MD592ced63fe6a9e65cd8401cc515ff7152
SHA15b9044a76165783b4d2764fffe90e44b4f6664b8
SHA2568532f3f462b1aa5604da98edd2c8bf3011180e03787d5f9168da810a6b0f247c
SHA5126d37b69014a959fdadda55905d3e58b5c5b76210a4e2e7ddaf39d3a78369eb2d13e4fbcd9e1e1af612453532a5aa086b392cd3ee1a4a163f8c68b7f16e3372ca
-
Filesize
36B
MD5b3c6c463b80fd6033300592ce1ce9e8a
SHA18a93eb4493ecdf934dfe3723b21005d83179dd69
SHA256438c4f7770d8276c3bb1a12291928ddb08afbd22ad3294a94fd0cb4721028d99
SHA512f6ca8ad738451d3948c58ed74cbf4ca613965cab240f401ab218166c100e8899f883b859107aa71a6f45b6c6971015137c4f1a0fd07c9f8474b843d805e72d69
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5a05529bcf1e151f1e4da8f5457189601
SHA1075b86b9da90aaf8511ed2d5d741df47de2fd33d
SHA256d022d1728a5af9c8c3eef766bfc2d2e98a2b8a325b6864e6d91297f4872678d6
SHA512d260e67704aaf8588708bcefab799302b4bdaf988f5a1ebada1e0754256d789279f87beb1113d9a60097f6195c7c5fe4fd1490ce3681c358ed21183d8becbebe
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
108KB
MD5cd76b9a87725482a0648cbcb50ff81a9
SHA191678eaf30792247f2e54069162c2c9621ac5c71
SHA256c9e1ee2c4f0244ce027a4664c1c21fbacf44c5acf4d11745d71610e0b8284261
SHA512f37fe647989556fd651c6a3dc5258c91583f4582712a5fb220fe991b0ddf5b81f3573642dbb0633b5c701de3023455976187ef58c89531d8f05cb1b00998f750
-
Filesize
16KB
MD582b908c6ec8d311508a00f290d2f1162
SHA1fd9150f714061099f0852626a28ac57d49c2fac1
SHA256520642d4a16013ff4328b4926ac98331fd495ea279d62c9db3118a8d0e4dcb67
SHA5127cfa92a9d6cce67e703c741a88421b3ad6c819beff6ced67ab502cda51aefbbc9ca576933eb18ad64cca304fa2cedbc27a9fdaba61b49a3a17d948a576ae399b