Analysis
-
max time kernel
48s -
max time network
133s -
platform
android_x64 -
resource
android-x64-arm64-20240506-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system -
submitted
07-05-2024 02:14
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240506-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5f0dbea5f0f8ebb42bf3ab4ab6e672761
SHA19d0619b4d83c20549afd349209e5ce401441296c
SHA2565f887fd265037eb5c1a75e60bb85c8b6f6dad612685552de92cea7b8bd3b8fab
SHA51208d28ac7e2bd4b4c19ebcd9cc5c5415d8e489da32f3a092ed39ba2012bc20b5c524e60d7a5d3382bcdec583f9bf2e23e4a39273fe9748f8fb641dfb1c2ee7e96
-
Filesize
1KB
MD57bef60656cb6ca3eeb1b974e64098a31
SHA19d553a8632c74495e4bb9d4afbb624dd99be2fc4
SHA2569f9eeb16ffca172a2f1f192ebe5efb94a5222b7498479118b94c7b905bcc2b04
SHA5123e14d1b34c189931067c5083b4727a7bf329c0c4f9fcdf989224c9715fe3e5d900a9edc0eecd9e831a667cfc08504c49784de6790992555ac3f3dd5c5bf29d7c
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD5786753297d10bc790886fccc5905e01e
SHA145571e38ada02f54734c784d64e9e5c5c490dfaf
SHA2569f721ce8eca982a4bc2405e83862022a91e5e39a9574464beef3e32897e53dec
SHA512ada1287c1a2cf4b1536eb0e0bbb2904db44ab0550f947a02965058e44f6eb133779283ca35fa5ed2122b3fe539a2be50aed2e96b0d0157c19a66b4867cd6a514
-
Filesize
8KB
MD587105f768fba4dc7b3d99eeabfe67b5f
SHA1dbfa3e5fdb21c1f836d9ea3609b616f46c5eb6aa
SHA25663ac614c45dc4e33f51578515776aa4348bb40563965b7bd76ecee1f8c99af5a
SHA512345eebf1d0d87a4d143b8659cb4e52975992b6504112c06511dd75b4d649a4e8a8257b51e16f8900591e326292f45e27e181251daca4be8c258653d5a2bf3fb1
-
Filesize
8KB
MD5e1002ffc1c3c1ca7d06fbed1d8b1b0c1
SHA1cbe5cc6b5f56d42f06f8d37cee2682a7b3c58a15
SHA256ee52eda0b45371a247a4f91f8d423cde3711b9f7170d2b51c3b6b221a3841843
SHA512cd589e8e00a81eec6ca87aee91b2fe2f71871965a38ad6e28a3a435c573dc433ef947a466f5d1b5584ad0402a3ba321f197bed2b60a41e634089ed9e284de577
-
Filesize
8KB
MD5c06a8049c47dab0066363e8c82ff98a3
SHA1cb44d08540b0ae863e45450fa0dc64bed95b1481
SHA256c1e185bf780b1568e0c9eeb22f44760079549a283ba42dc72c084b13525beac8
SHA51238714be31c3a423991bbd05ff99c8339d6ee7f1d817b88b94fd69a83b7bb2b5333d762f1270cc2a0d62fee60fac9946de69d3597b2be2aefb0eba2284fbaaeae
-
Filesize
8KB
MD5bd4324331351ac69f7194e4982feb0d3
SHA1dcfe6f4eabf7f936c9c29577a9b6e1b321d0b683
SHA2568bfccb066354b00774f16befb6007bf850347ade12c26028a04c123ff872a891
SHA512859ab4069ceed2b6e990469d1f8930076bbc700cda463f580bd1aa416bef2871794959a36cf9077cdd2b22cfd7090b61245bce62fb354294f6a3e6fe267a7229
-
Filesize
8KB
MD55eed573dd723916c6fbdd30365220880
SHA1d61389e15ca935397dd57b2f33dbed958c3102aa
SHA256bbf1033e253435acd7e2332c5f2671ee87d952b43dbba02607b87b90c137e517
SHA512d3d41b353272c6e6c99dc6551229740fcfdb1828bf83386ad37be6f2f13d97d78c5f7b1279f4530cb58ab48bcb1cbd55ce26e6e14c6a8bfd778c9f3bfb1e86b3
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
512B
MD54759105fa4a6cf7cc5f91acef9fc4688
SHA103ceca86032b6af3d34fffa7323f97b4375d0b00
SHA256a1ecd441940f57b34349fe0c1135fa5fdf71fa40f1dc3dbbc3cfbe147921124e
SHA512067976e774db6b139aa9df35aa6003b05f1432efd0d64cf5aa6978235bd8839dbc38c35c95042d197ea7293f4735166b230182fece96b55dbade84650f7a8f82
-
Filesize
8KB
MD5fd9cf247eff579d3f8b83f78ffeb3c65
SHA1ca3d4873c2c637dd38697201cc0b7128d1e80868
SHA256fd99d7945137135e8961f436b52c9bb0c9c88f17979b61eec33468d94be2aaee
SHA512a3b7c872f0527b139b701d190a43e4cf7d3b4f6e067b36cdcc1e748d2e23eb5bc71c9f25f5d7c60372ff51d78eef1439cd2a45c43150bc85d05d6c609f472e67
-
Filesize
8KB
MD566e928f67b8d5270421013bd22da25e8
SHA17365776ae8b64d45434d07ae13ad07e896d84c34
SHA2563dd4649561e0a196c13b5495aa4c353a30f4ba143c3a68307dd63bea10523e85
SHA512df4688abc761b47bf8990d8ae329ebd569826d1691c3a6a0ecb55912bb382744220eec5501314c693f92a8ce74d72a126a7e1eaa279395ff2786565ced6781fc
-
Filesize
28KB
MD5958bf239896b331340fa505668a6bd33
SHA17868c04c34b5e1818fd950b1bbca26080fd3da95
SHA25659804b4bf51ffbdc99085b72dfe4dbcd3538ecc75afac3ffc01f5374dab29206
SHA512ade8d166674a86d300c38697210d75ca734432b46553ada79fd9b4fab77bfa730eaff5d4785701ac86cbdd5fd2e4252e646d36f6c453e9215193b5b74c2814a2
-
Filesize
512B
MD5648b62b75251e7a64cd0f3314ba6d1c8
SHA1c09e9bb25fc50f130dba348a25ce75428c202f2b
SHA2561ad9bd50b597a51344353efffe4b7f4a6540bbfdd7ddf58debb0f827d6191000
SHA51296900406db57eafd80183448720a26b4c93d7dcac862e62cf4e9a276012d92005588aba68fd67f3dd0b372470998a39169b1ba07875c95ada35e9819b1e09cd1
-
Filesize
8KB
MD5091fe77593047a6e0e2bb0f049bbd41f
SHA1e4a246a9752c0967d4cf409373bcc8595838e815
SHA256edec4d65904f43cfa27331cc2346b67ef6e61064027b6f9e506ad72fc3092c96
SHA512f5445dd98700dba856b0956d3912cc84ad021e91b8b053ba1563817ccdbf0c275ac472f497bd10d99fed2cdf113977b8051130d3267a472f388c309d76b39885
-
Filesize
4KB
MD5ad083bfefd6c7e10528d71f68762301e
SHA1d7bfb773ead5fc6efa586bdfcbc1381b1e88dff1
SHA256d821c48d632ccc86fe191af19614c3049e32d5609deab2f7372e1bea4ec7af67
SHA5124c9d24cf4c8919a085928027a648e624aa4b68879dd9ffd219576cc3d567873ccdd221e88cc9bfc05300287f922b745a5bbd2b9ce8449a4d0b26627a21b5f836
-
Filesize
8KB
MD50f6b14f5b2bb745a80c77ca6a5fef4b0
SHA1a444e21707da9aefea8b0028743bd137976e9944
SHA25693b273de27fda07eeb6e7bd24a8008550a38e4417c97314bf1f8e1139b41d88a
SHA512c6135443dc4b1c1c7f1d16396f7d1d3382b56ada2f4db62f63a630ac4cbec2ba14d205594c9d0a422a93cdbe59ebf9c68de70edc1cdfc04acb04d2105b61bbe4
-
Filesize
8KB
MD572a39899cce9b8e5340ee934f8f70a04
SHA186888ab135e83fed3d4ee6b998fa80f7daa4dd4d
SHA256bccdc541119bdda0f80e1efcf9adbe8ef651ddb5a0de02291b6a6432f3a37680
SHA5123eaef24893627ee2aa29a00ada2a2def7e9c893a7af2eee9baf6e6984139e7bb9855008370a5ab7e1225123e44b586d24c457ead01a5ca995864a4c955f83132
-
Filesize
12KB
MD55948ba935c39fca0ed5f262734810778
SHA179a952d88a257b2af5115e4020d951fec7359c7b
SHA256430734aff8be455d9dc87bd7e54149cb1d330579696a31071d837092e0d28b14
SHA5125d7e4c577fcf51c861b0c9c5b90a0343b8e5f556c84131edd6d647f4ba1bb82d4f4c2aa1cdac08307dc5bc6781708fa0211af65e7665dadb6a64c65607805984
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD54e496cf54367e305884ee1ba04b6b2fd
SHA11b0f3839a9b620c21c3f8c859c4b9fc1c80b4b6f
SHA256798ad63aa16d8e77d0f77d1ea034e864f9f6f1d976616822d4a528d307534883
SHA512ca6e7d7d46841e316f45f371f8dc25a940070c34d05226ffa0c73c1f5e37527c1fff44285a1c78737f3d7b04ad294b30e33ab40c840b1ebb22133d07df63ecee
-
Filesize
16KB
MD53cefcc2ad93da134b1bcbf523ab1345d
SHA1ddf58fa9bbd98060b33b993ac2c7e2e34764c1db
SHA2561753923f3f27f984e7ae50b2e29e1b5b86535e20e0f28ec1d78ad9b57671f24d
SHA512035913ef55d7ce72a43bd23cbb30e13cff3c17106ceb22c443a03cae0036ca7c511358969ee1bfb95f08fa6470f33538052b1d8956611a79f9ce322ed175de73
-
Filesize
16KB
MD55d42720388da2e4ece3c526d687c4615
SHA1f872e3c1e7523608ac79498661063812162b5b53
SHA256f30f47f021221bddfa1d7b144c36f8db0fdfb5bb09e6b25790dbb535bbacf11b
SHA51212e520c4bee119c5d54ddc7caa6cd83bb2863f4013f5d2eada213a9434717da88201cda58527e3c06a77d433c749a0905f94916502a1362c1968da61ddfd3fcb
-
Filesize
16KB
MD5e4249c8408dd79abfc2048e06de79ae2
SHA1a66876be6875dbd27ba63fb0531cbad0cedf711a
SHA256768aa7eb338061f0a63b0708d28e312668170a5b94a9b4d6ceda6cf8ecc3c86a
SHA5126165e12285815b6c55743f0ded261f1c8440526af60a13816cb3bb39e021a205d3859d1b96f39e5ebc4c897d965e21cfd4ac9e9dd0c99c6ffab2f6331fe34421
-
Filesize
16KB
MD50f181047bd390948771371bfd3c422c8
SHA1cf70c26648358c6fa73c5f2d6de5304226787064
SHA256ca7d667524102949585e985da9ccdf546342345b172f539a9575d68d1678cbc6
SHA512b88e54775d8b1ac4a03fc4d7d15b44f7be83515598b5e64109d9184262ee418e885294bdb426fb210951e1e2be8966afe05a77cb907f7a488bacca821088a205
-
Filesize
512B
MD537767d7fe3b1b55649bfb59dee3d0fab
SHA1781b56153e9bd1b2a6fc10241ef4b98a3cdb2f44
SHA256005c10b240a69e3998332bddd16e3e335758dd52709a94081ef3b4dd1f895c64
SHA51274461ee523ff8cf4cc6724e5e15455f797f6016c1b16e681810dbf32174cc20b4109b81e555c8d7a76f75c96263137166bb54878883159bddab9118e47f3e747
-
Filesize
8KB
MD5a60327805bb1d31578920cd6eedb9878
SHA1ca5daf4145ff5c44b9f87e2489980c2442969b41
SHA2566970578c11f9c946ac7f3570960b2b4d31ab530529bf02f4defd0f8c35d4e633
SHA512479ee4503befefdd05bf64c9e73f8944f4854f78d7ad0a8bb1aeae4b3937999b5506444a6d6adc5881d84d0bec2af14423901d590cb09574fe3c2316d13adf7f
-
Filesize
4KB
MD50ac6eb168dca133bb8eaffaf968524a8
SHA1f3358dea6de1cd9339f3eed7bfa03d828c98e4a9
SHA256e1b7282fb35581133c2974bfbeba2cce01dbedf0c5682860667ccb482b650221
SHA512dfc77016f29facc3987f7edff4d4204c95ffd25dfb4b62d6904bc9d7beab34c34f5fa54ec23088071ceb8380fbd6a2f4746ea9769fb35d7b8013271f5fc5e676
-
Filesize
8KB
MD57ac3066f730adf6243a7ce0b1da82a43
SHA158387cf5981a05dfebad9a0f93f0914913b8bace
SHA256d800547ecc6a54da39ee1925dcf22bcbd5fabbd2adbd5e358a929e33a5d2c7a0
SHA512064d98d1eb3b681c40bbffea1c944b22dee80dd4fb1f22358e5e295ff3f25bf2535bff6212a701430ea0c6d295aa478868af863900f3fb9f11dc77d34427b5bf
-
Filesize
8KB
MD5b1b541d56f067530f12b4fa8c18dc510
SHA176a8a4d979e13cd7ed6518c2ab35d3cb9c5c2e8f
SHA2566accd6216287a48e90c82fca79dab121e05997440bccb41b7d41b452119354dd
SHA51221e0389df5fa8da8fe36ed4ba4ab16f32c991ae97b92e1d8d555c05fedf37a0d70b040973c0f7c18904636c9f342ae3fd043723277acf8458abec5b56c758b74
-
Filesize
8KB
MD59982dca444f4b9da46e5052def826b2e
SHA13b60d0e1991d67234a6d519264d367739c187761
SHA256e9b47715cf6a71ae5f7d4c86dc03763713e6bac46d253e4404aa786e306b9b76
SHA512f2cc954fd3f689014ec65b926e1421ca7e260c0cee950198b26bf9e5044125199be3adbb923417850eee22273e34f2e0a5fc5ef3626218de538a9803e8b26799
-
Filesize
710B
MD524bf7f7ea580dff3961cfd36a8116a08
SHA1c2e17436af3b6fc5005608b481794948851ca824
SHA256d70ba7cbeb528f85c9d8364625a99e47e304dd63903e621427c83bbcb1c2e287
SHA512d266155608a224835a9fd7787d2bfa22758a9eed32707f09343e95e2b9b4062772d1e588a2d929cba5319314aa45462ab7cd3725f565f77376a76ce9bb35bd7e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-66398E8B007300011334F47C707BC6E9.temp
Filesize432B
MD50c68220cb6a0e7890b5815267eb5c5a9
SHA192145b328c2d0d582a60b5b4d2edaeaabe1b9c38
SHA256dd8b6901f49c92550c1ec2aa53fb17f475b048035c30fd1f3db91026771ba4c2
SHA512b1f07a713af7f511c487f7da97b79f7412cc5411a6de1984f77c0abaf276412fcd7bd798bea9aba00446a4ddd628096e92ba55c5934f2828d7e167d9ee67a8e9
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-66398E8B007300011334F47C707BC6E9.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/66398E8B007300011334F47C707BC6E9/report
Filesize733B
MD533771929e2dfeffbfa84e3d9e9b89e53
SHA1e0eaf27e8f2b0a80ce756ce697dcd63cb5473a5d
SHA256282be6dc3573ec97da8610045bb24afe3306f2c7c3446bc1e9c2fea3400e5ffe
SHA512067f21e4f1ef6e400c9bd67e226ce1227c44c688a11c14ee6a2f61a2d67e5dc89a8cbd676ed4db779ba2cf9fd949aa26561bdaf3cac4f2a1a0ca774bbf5977d0
-
Filesize
90B
MD5ab64b7789199acf9e1765ed16226d067
SHA1fe410a03a4fe4ade3508abdda44f6df731473d5f
SHA256bb060bc2951d7edd86b0c5b132d5d813194d66d50c340a21d97b4963096455a8
SHA5125ecb42592aff70d6d6a4eb2d898d8fa24d101a1111edbb334793dd6dff6e02919d1ff2adf78527592d4a270e7e7e0503ca21a9bf433acd405ec60b01ef60be6b
-
Filesize
564B
MD571df0dadf6d3944df8ebf4c210a7511e
SHA1146c7f28942aa1a3aabd9ab05a07df34aad73556
SHA25672c3920da18bc442ff598aeb92116860e0aabe2a9ebbac08423aa388457e5a57
SHA5126680ef0a14c0252cd16c1a097a1e1c2f6cd4895c8631c4792230735ed6a882ed2b094942feed23320b3436853a5f24e7f363e6eca65014349ea1ae1c33c56ef6
-
Filesize
36B
MD5c9ae45212d2b30cfc0df5f1beb86bb71
SHA1dbd0ff3db5c2890eb58c4f6ea108dc9ccabb4729
SHA256d5ebb8fc0fb97d982c5694e364f43cc5b7f1b53237a6f3d05c0e6be1dc50cd1e
SHA512f50c370abdc4686b53790204b42fdde6a0a555b3914e7d1710910c5071998132ec1c0414e0ce81f3c550f532a55f4057628cae9ad17abc99487027cbc444d716
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5f364a52d8a173a8c98b7c534281d1759
SHA1fad469c448ec998577ed2064eaadc55c13c7622e
SHA2566b8456e9f3ce97918666837f2b3753f4e7b5db29a8891c575cb9276e96dade9e
SHA512050e667f41a7b207ddb92ae6c78a5f8740939dd79d776485e8cdda3fca4b69d8716160b4764e6891dc50b1fa1e5f0026d2f1e79c7b89ab598c2e79a7bf5c51b0
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
108KB
MD52bdb9ad7117bad6fedcc6a7b794e98db
SHA18299b6bb13808b91b1b84b67d58f4a27bb6ab076
SHA2563c52ed6cfad95451a7666db2ef4d82ff18f72a641ec3dc4c2fe5db92ece60017
SHA512284138ab5a7814307bcac6048fab4fa3ac630db9aab2d674f9f5cf14074ef0d70c4c830352a86f6604f2dabb2306e6794dc97aad993485928ef13cfb0f8feb1f
-
Filesize
16KB
MD5f3a61083e5a06d717300b8c79dcc9679
SHA1e7bb7aa3b1eccecb8a6d1975de61c99d8257da08
SHA2563273b007c8ce78e70449dd8e6e9bda4957f3e664db78bf9a58093a238daafa3c
SHA5123c1776c79111ff18f51fdb953b8c3713144dd0379560b4b43956c5aad6b99646ef86433c713385f5fcebdc51d05f7a034f0ad14fe55e306e3db3fabfaecdff43