Analysis
-
max time kernel
48s -
max time network
136s -
platform
android_x64 -
resource
android-x64-arm64-20240506-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system -
submitted
08-05-2024 01:47
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240506-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5732c43ca4ec92e96d470e7d494f18ecb
SHA11e89e30478e6db491520cf2176d1a76beae8314f
SHA2560b49725781c7a65b55d875437eabbb25270b99061c72437ed2fa88b49aa79af0
SHA51241c6d92fefa519ad46e0906a2086f42cd73224279451500c7d6620db2629ca6579e062ffb30b45bec1425351bf14640b6abb760e5c7392ecd743622e23c3944f
-
Filesize
1KB
MD5cd041a1ab9eee7eb7d7a7fbeef4c5af6
SHA1cb889dc20362529b63489391c17232fdc0258099
SHA256fcbddedc2412566f89ec57b4b225e7388dc3e959da7675be2daef28374340b8e
SHA5124b82a611eb805c90b0b19687e6b58a38a4c44a6ee2ddaad7d43f21ecd72b548ac771319247f192c11e4dcedc675c6f0c5e5f04bc1aac145ed9f73b1430fbbde0
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD5f30f43b01c60c5964c1a4b317f196a05
SHA10f298ae423a521897b27e6fd4fc80dbed2898b21
SHA2563dc314eccdf7fa049e566aae5f8924bbf2d1541a972885b2019f57a7fda2e298
SHA51237e744389bd46466fd2dec858622e5965966adeb9bcfd28d5824d3bf40d5b75f89756a3252eb1237b2148b21ffc5a9a22878f9d056d5eb6b5b1a039ba78a8a50
-
Filesize
8KB
MD53ff3c5c28f3bb6e98a9cd2be949d7fff
SHA11ef6d4605a6e100faaf54eb1432f0e3bbc1f467f
SHA256c3ab865e1e3d64d2663e2ce9ea7c37cfc907ee32eece07e80c8ca115343c5a9a
SHA51235d9e0f1cb107c116a0c0857259bb15b9a6066464438889ac5f8a613b649ab05a5e1a292ec0f47e22b51bc67d8ab73e896467bb72b2ac7331721e136021db29b
-
Filesize
8KB
MD58d7254fe690698bc6d22c213cea4a3ce
SHA17134c88560499b297be638d345bc01b43a71391a
SHA256c4112ed8d42f9dc6359401899820815d5b40dafd4958cfb879031861eb4a2564
SHA512f73c5632b7c60960139efb56bf8fa0a9a11b5105a3d9b3850f7c8af64f2c9a882c92888e2be85a0af62316684a8161fd9777cb38b2f627bdb74bd70745239d5d
-
Filesize
8KB
MD5414d7a260322789494c03ea479a7d2b0
SHA18dfe225e32d04bef268140aca0b5c602887fcca2
SHA25619e0c532cad52179954600a2b76f5fa9e6286f2025e8e1ddeb246a7f9dcb44a2
SHA5122058bed3fb504f4cf375a31cae0ebbdb5358296ad50a0e04d9ae009b5edd85809483c5a0567f1274f4defaa700ee2deac85ceda082faee6b933162b5396f08d4
-
Filesize
8KB
MD59ccbaddda6596a423f1f8021dbfbda2d
SHA14cb1ce6fd46f84d952b0e91736159424028f2ca3
SHA2561036e0610fd996afca6e0f0730afd6aa880a636642a42ba4578b359173bd2a94
SHA5128b4bb4360ac7954764748089f916d504e6969d15b8c97c829a36059b9eaafbdcedc4e963a17b0da1e95d6e706b9457a813420ae72db75993013dbf0e849dc6e8
-
Filesize
8KB
MD5043a8d33e013246b6f936262e3204711
SHA15f1995c10a2f043cbeb9b760dcf4965c158eb4bb
SHA256ac4ebed65ec835a1665df23699540e475693220c489f6d25506f98f709396565
SHA5129f0e178f697ae1203edccdd8e48f6d7c192bb7b1be496b79f6b0be710d8e59cbc20beac668cc2c39dfdf9aada47d346e99944be217ac72af03b5c324697a89e6
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
512B
MD5809a6abb749e287f983940dbb7ede056
SHA1be0389ee68a04a43352449ef045d45ee99d332b1
SHA25600759a62130afd88a15c01b74fa303198e3e397d2aa4f2c911bdc9eb4f80f32a
SHA5124895390e60a3776e112dfee20054057fb066257948d5604a7ea0b765dddf05c948d9fdcb310a51d1b29282b2f38345d6f7f5155068bfc4bc7f3df5be5f7cf375
-
Filesize
8KB
MD5564cfe3e3225aaac443e93cc277f976a
SHA1fa60b08b74fa16ff5ebaa13d4d840b94d1c6fe71
SHA25632eceacd9c0527a3a14965670a5812fe10d325dff059ea3e136ecaa7ada45dfb
SHA512bf0d2e658b069a651b0911ea302f0a35ee017986a56eb1ba65855c69ada8f570e006eb330e0f309413f5bb93f505673c447f6988035280f27e2360ec872cd14f
-
Filesize
8KB
MD54138d00acbbfac0621c526696132a78a
SHA188284b35fb3f76aba711987c4059cd02adc7e104
SHA256ef33915b105689461b0a704a469ca8e27a91be2d9a5ae481f4f3ff3292bad475
SHA5124fafc31a047012a8994a66dd36cfd740ed5c208889e19d9020e4918c8a1a5de5df7f92a4a9f3b99adca0a1e43dfe33afc1b80a5d2e76f1f95ba1cbbe24c62270
-
Filesize
28KB
MD56fb81451c85c3bd2d77c79b8a0ed0dc3
SHA1c9c50bc4b8d3ef6283df4b19c87a68f82ba83f50
SHA25654545a14e1ed132a54fe1cf350bbb30aecae88f12a3d3ea7a246862f0fe1f959
SHA5127bc9833235db099745f752ab3282b1597d89f38316a0317a951d4a31cae985d4c7fcdc2f65dbbb567fc1b394a826d88bc78b126fce6d7e44fdce9666f0e41390
-
Filesize
512B
MD5dd61e42b7e6888a443c0287cd7824d1c
SHA15662e66e5b81584b9802596d3efa13108badf7d1
SHA2569c85eaf8bbbc1e2a071dff846fa1da83425867ef66d42f27918f7db7a8efedea
SHA512970125171e3e5045254126102147bb8bed4cdba2929758ac1e9f0d558caa964e121f0f2fab374fdc5b65f968e53b4bca92581d2645c6591f89f80d0024815384
-
Filesize
8KB
MD5164ca63fe29b94dcf33647e5ce52cd5e
SHA1715249bfb34274526465f22b37e1f428635395df
SHA2568044167e3e791f786995c2a1a1fb565d976d219a26263aafcbf819a2c8753647
SHA512ce045c55eeb19e96b1ee93870efc77072b5b054e802d276ff8c4d59613c6e0787d002e4eb6410b03263e9947fee1757f20474803e6680cea82202cde3a4122e9
-
Filesize
4KB
MD564dc49391292eec5f9a19de2a09ddfea
SHA12357608e641c676f7b8dafe8314b6a03497839f2
SHA256cb39e37d05118211bf9f08d3621ec12a7f76a7d7f63b0af79e8480343bcd4977
SHA512ed9687686330d8111e7f9e6291d895bca4a0b350ae85ff6c50e63167435eb047064f822ed936011a6cae0a94876e33e60743fc0e3bb57c918b9c69a94645f858
-
Filesize
8KB
MD5ed94590739be87292809b57c772c62ec
SHA16fc4b5dc46200bee03cb4881bb6ad1a0721087ba
SHA2563e0f6f09ef4b8298da08325371352f7fd66cb812236dc3c4f775905e35b97812
SHA512ba8659a48a1b34900e3e4b8a1093582b78d58ef467023ce096c8cd963a2d9b908f0499bee9217fb80763424a80842031e6dab6c50d3ed9368b816cffaa7e710a
-
Filesize
8KB
MD558e5b12c1839c65db109db180d6b34db
SHA106c991f0ecf3ee6cd1acede87aadae9225310d5d
SHA256db3ee54b79e77fa216de0dfe81e4f058ee41fb36ae5e089d978e1c214c3807dc
SHA512704fd89b6d8d792a5bb276b6532ccd0ab411a8694a230ffa9b271a2053a6fe3870c677414a0cc11eff241831b23861699631a0456602db83e94471129999f6fb
-
Filesize
12KB
MD526e4ad3ff5a34ee5755488cfa3b26994
SHA1725a098ea6ebbf6d88f1a1b1210f0ca5791effb9
SHA25658de6811d97bc8ac832a642584f1c900e1a86c05e30962f936c356473b4da03a
SHA512020c0a08d30ea5efbc74a732af8906f31cfc3f17e5e1f6858dd600339012e2106c629743777c1247ad258bee49d5888dd8476fefb70fdfcbac94a4869475767f
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD5b231eb685813b5446dc09d72eaefa2a1
SHA17106b0d5acbf3063ba0b95ee3afc8e0c6c9bbe50
SHA256abc90ae038e26da55807cde564bd1952d37ef5d2328c9d54f4f568fa571fbcea
SHA512313097728b6fe430dc09ec6108225a1891e4a5fd857d32b42abb43febda4625010fd000a0690ac5c05de3e8aed6b8f245316d10a19012f2a4086b5dcaf853dc0
-
Filesize
16KB
MD58cf98dcbacba8eef450c73e5ab71b980
SHA159d52e4e25c0a9b3e78fb2a7c412cd315ad3aebf
SHA256412253c83aabfe2e58783fc43cb8436eb9ba37e0e6618e47b8e8566adca54d59
SHA512000fe14209692c48b2b532b0eb9ebd3da05f9e8ed76f3a77685fc32581f40453cd180f0c403e05801e6a9a9524637eb8ab42d0bf15369ca0fa36768da62b1adb
-
Filesize
16KB
MD584cee17136ed7b185b1a69be6f27659c
SHA1717eb9c5095fcb815dfc79a89e3656fbde34c6dd
SHA256debe91e45f06aa7655e4ce8caa6d6657f98f4cbc9699f0fe276b779093deae6a
SHA5128ff8db000977e88e51bdc69739fa92ebf9732bcc327e85b9b22d6d17c45c51716b9822a8fd8af73335ff885160af85645b390363120794753bd8665f64cdb575
-
Filesize
16KB
MD5cb15d1f27606f87a6a4a55b4bce1d1c4
SHA180e7d1a387410ba60f75ce3173a06af831954ffd
SHA25684cb8c31a4efb2c48c13de6c5d459282a8f10d1b9b85c10b594243684cd1fddf
SHA51295428f977cbba87f52f723fd768411d9a794a8483fe1872db831e2125d88f9cdd0f88c822e111142520f5a0d4ba76c1af2dd652d16691009c65c2581f63b87b4
-
Filesize
16KB
MD5a5d4176a81b5b983d6623440d0c6f681
SHA1632c820c46557c671fafe82eaf0bf1565d8ba697
SHA25698c0c2ec6ec441d4dc597633e9ccc5900161e49cfa49deba1c2ec10d052377b2
SHA51234234bdbdc82f13edb5a673128214bc03dba173b8119ce76d04f0289412bfe737ad3165a578aad386218f936dbca7534225c3e0e042f4fac115a52971fbca67e
-
Filesize
512B
MD5fd18af009011f2aa675a9fd710e8bdaa
SHA1958aabbb242dd26c2de2ddffdecd90f231daccf5
SHA25628afd2eb695526fa3aaae7abdff48de932ecb75c7b8b8eea93142d186c717cb3
SHA5125fa347b37f58b9c8d0eefa23571b968a647b8a63d65a4a682750e1ea5742ba24be92016bc767a00ec0049bdcdcfec05151cd5912c7a3362199cc15310be0af4f
-
Filesize
8KB
MD523df5ab93204d4572b450b35cfb72b1b
SHA1ef27df24eb394722984d920ab51d3bda6365d1f8
SHA256bad5789c43c5e07b773efe42af9084434b26be95ed6ed68bc8a65497d6e1138b
SHA512a3fd577585e152526b6a5cd579581c64b81ea241bdfcd36b25126eaf5fd036d70437a17437a21fc53cdb4f5b46e34b073ef1e1215908aff86b5f23d6c2ae200c
-
Filesize
4KB
MD588c0786c42f3add9a27ee83fd1662e3a
SHA1dd86c4bee066d682c6c4908697a94ecb378604c9
SHA256b14d3eac5c92050b6bac3ecde2d94d14f9921b11f5bbd30e9a9608c37d533147
SHA512618ab06c5266df00618caec31fe85a33a94c265241d5d1bf9ec11f260c0ca6d0512395fac1a73e9367e5cfbca727fa171b2a873f2e929a74fe744756f3ffc8ae
-
Filesize
8KB
MD50c8292a6f6bfcf63d4ac03f0f129ebcc
SHA1ff4d07525537b188b31471771958ecaf233460dc
SHA25601039d3da707a33667810c7f64dfd3bc062bb2f68a40b242cbd549d1a6779d97
SHA512a93df47d175862da51ab238186461f4201c25535f8769668b50f9120887e21b88a7e503f8a2b711f51cb318741da6b15430f1be5d0ffa258490bb2a326ef3bbd
-
Filesize
8KB
MD55d0d2f299fedccf0e3aea43fc02185ea
SHA11af3d26e3c43dca61a2cd09cd0051255216bd32a
SHA2564e168dddd1325a53cac3b1e1dbeda9f4b3fc2ce84d452d56450e15ff979da1f5
SHA5122af30d757557dd19de71f7bccff8866a0d26d1db1d067ec8f869a5da0003520203d52b9484a47e4ab7c5eca4d3fa5f351d83dd4c4de13258d5bb4a153d4c3f01
-
Filesize
8KB
MD513b3ac8a56f3f1010a7787f9046640d8
SHA13ecbaff908de59653fee0b5325fbac4ef0071eb7
SHA2568563db25992a76f348e9058afb0d8b696308920b514f3cad2ac67c78799b326e
SHA512a5f5f82e5c1a45c423d499466e52ff013ec5bc64712863f595f1b2c0bcae9219e43b169b1c8dc25309bfc2143f3504698dc4c58f613e325c45e736a8c4e15913
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-663AD9CC019B000112B261C5BDCDD088.temp
Filesize443B
MD596b524e4e518082ad753c40efdda46a3
SHA1f488f9741634dae2bc235bd1c41914d657400a77
SHA256df3147d81654bd745ab91ea924d23869043a28e41a3e53a2823b4061be8a006b
SHA51223cecf648805907de432dac16d27072e360faf611657b2f005517e030f5f58f1a606f4ba0e4e227cf7a88ef19cce88528006d5accb793999a5b3341d7995ab99
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-663AD9CC019B000112B261C5BDCDD088.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/663AD9CC019B000112B261C5BDCDD088/report
Filesize733B
MD50b8ee0e508cd2bdd39c9a0da5132f07a
SHA1f1f7b88eedea9ebc277e7891326b033f864331bf
SHA25640f21d0467d43e5efcd750fc48d7af344f7c91bae56eac07220882b1e8609c83
SHA5126cd73d12cb607a5f30e7406f99d1f2cb3004f888df14d83114eb397fa986200668363adf1ccdff2b93fe3802c41541d87f8dd941f86ff69cc6d49092a873f3dd
-
Filesize
90B
MD55390bfae0df907aa26dfcccca3f54f65
SHA1356315e0bdb7ef440333215f87cbb730aacca121
SHA2561ce8b00012fe9eb74aef9e11bcfe1051f6877859fced1423ae42c024709bd1f0
SHA51219af3a1589f7feb9a7e253e9dccd22d6bc392a4812a4fc8e9cce776a68f21ccbb61e9c63383a35784948876b8cb3b8d4aa3e81c56c45095cde2ea73067e778c1
-
Filesize
564B
MD59f962328ae8efabd54fc3821d59f1234
SHA1cf720a06464db676368c553d07b3725bab440504
SHA256d7d85d50823528341b36971bb45e5714953db47e0b079907c19528e76c5ce8aa
SHA512b22d0bd07fd917f7c1c74fa0935b3fa306a66f6493cba2c590c79833ea18d3eb2a0325c7579eddcd6d7667f56b8eacf13c20f1c880f1e51abde158e96f60fc2d
-
Filesize
36B
MD52d9ae4b068c2fb3e07763e91a53dd9c7
SHA1d3b3a0a021c4d69ef7e3608f4a01e7715ed91b0d
SHA256a73c1fe17ba2ace0a3fdca6d4a06bcacc0f9871183e92a7d54bf1b0fe568d134
SHA51205ce93844dc499e01bef5cbfb4763ad3af819cc981e0be24f1c5296efff27c74e9bf3feb84b5592382055621c3e2a21539f444a596e8b761b3502215a4b4e510
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD579786cb30b89697ca0057442081c04dd
SHA192df6191da6c1fdb2c70a5cf939a564a523b0827
SHA256a29e5f90b05e39868587068290739c57f2632f8d88316d87add2bc944efd0040
SHA5121804435189bbf8363efaeee32e2b80c9c26523b4340712df847bb267562e729d0bb76a41848ea7ac6f3bf2e5c3069ba7c88bbfca6ac1e600cd9d8e0682a75d5b
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
108KB
MD5e960db156c6c74cb2f251641bccdf7d1
SHA1cb84c3c71b5c57730fd5682c9f95e2a5eecde036
SHA256b4be48efda2242f26c6c9aaacb5c4942f6b585e6dbc356bc0ae702c5429f9f1d
SHA5128c8d9c97fb8eeb5902f29d8aad6130566b8c3e8dc38a0048796902adad8844772990500c0d2418572673997d01fcb9dcb9c58362f69ee4c139d0cf1a0d6acb3d
-
Filesize
16KB
MD50158962755a07118d1bfb6c4065a7cc8
SHA142fe3c3c8120d49778eeaecbca2f83989212fe66
SHA25678757bbfba47ac8ec89cfba07d323a0eeebe5354edf3737cee6e8608c9cbb903
SHA512b848fc0f9d04668aa63af862287489bba379eab8da420037151cc14b60c8558a49653a827d81fc5c87479004fa43016842de8a680a6d69207c555263a84bbb75