Analysis
-
max time kernel
48s -
max time network
132s -
platform
android_x64 -
resource
android-x64-20240506-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system -
submitted
09-05-2024 02:10
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240506-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD50facab941aed3a02a510a8fe42de823b
SHA155281a02d5163a99218d1f07938c001e3dd29a1d
SHA256c4ea2ce6dfbf071438283d933c19003e39a96c1e2d72c165e6b6d8317b741553
SHA5125d1323edcc6a760b9377e0792a8ba4ada4a49f8d457598de137c2643214188dac9e32714906d3a697aa07e5c628860a7f19a60f732b33df258e8e2dae8d2ac6c
-
Filesize
1KB
MD5d77c1ca47fd13bff4b9c99126f08d07c
SHA1411afec7c15f53982a5fd35a93a44547b0f76bdd
SHA2562afc75b64bf0ca64fad78f873917d2b16152b055e9fd96300d8ce6abc146483a
SHA51216a4a1136e15950d073ebc052c845b48cc17aa349eb854e542da91119e9ef8fdb31f75bdc3ca3511a83b7180e8031e363410f44951751679824854881936853c
-
Filesize
76KB
MD5244592a5662464f9e6e8aa5d52402428
SHA1885e44dd3ccf643475ddb16d7d2eec0c809fd1d5
SHA25654b29062aac9ef91d03294047b7780498a2cdf0ddd75028dcebd9b6b7a88214c
SHA512ce35edd0ec05450bb08d6b47583393eea034333b99e13ad2bb6848724f09ed71334a858e5cd5ccb6909d516ae70545c3e7c98ff15673005e25c9ad60b2a11b17
-
Filesize
512B
MD5de3e475272c296531cb21bd36c7b4d80
SHA1c32b3da68059732e00c659ccf49dcd431470338e
SHA256e6a7cdedc2c14c64456a22adc68eecc617da09186c382364a520fbf4d6e51680
SHA5121e815d41d58fe0416e241d10a3eb7044203af5b69dcca53349f9d43a67a10d7c361d835b2c375e234517f9f410e0749c7ce9b95bbfa8fba4e09e6ba92c701961
-
Filesize
8KB
MD509a14cd0993fe50e22dd133ac5b12882
SHA1c7727b9599079bf0596d3832c9852c1ad36db881
SHA256d108a062c02700d4067650f29b467381e23100cbbb531bc20b6b322b48511911
SHA5127f5e8542ce6943146e2e699e08ba4a7dad8bf9366ba335dddcb1abdc716fbc7803829925287deb46cee46d1938a789ad1df2b954fffffaa75fab89b28cc211b8
-
Filesize
8KB
MD52694e631654a5ea1b0129c24d8f492ae
SHA19a60cf12d42b7454816973093ad7e90c9912156c
SHA256a4551443defff805b67efbeec01675db831f4ef523f5c17c61ff2d51c055b877
SHA512246402f2cd425b4c46fdb41e788648436ab95024b73a0bd76b0ee6efb0ca2ecdae9c3e88fbf0a512a76aa9df9c7d748ea3a186c9d6e5b27d45fb1133b1d8fd86
-
Filesize
8KB
MD55d29cf0ec4bd9b19f47cd184782817c7
SHA1f7c48adc4f7972814da0809a04955b74acbcb215
SHA2562fcf22da863e453aa7eafc8a6ccbdca3f252139780e630d3ebca25ae430338c8
SHA512bfd23835f30ede2dd4f2e09648ae7cd96f5e3b5b976ea3d9cd9bf3a33d5decc70ce698051c4642c9cbb98ca7787fe14307aba503c57f68e9f28a400b40d73d71
-
Filesize
8KB
MD520890eacd61b397f87e8510cab4fba86
SHA1816a562e91a1ae0ec07a288b4e73fd04399c71bf
SHA256cb10be3fbf61c791285ecafeba1b5e4c620720f827e01d87387ab34c52fcb9f9
SHA512c5628d406454239830a04605943f99d2930aad7111598658fc0a15a467cadba033e21af9aff2acfbcc9fb4416f6f9117fa654965343602149a2431e0cc2851f8
-
Filesize
8KB
MD557c73f6ff369881bf97c065dce51b3d3
SHA153e3cecd4732a49eb19c6e9f78f2486b863195c9
SHA256d96ecf53c8b406577e845036ad5a4d8f8653c53fe6a5e4fc3b5abda0815f275b
SHA512ba6d67b817df3df1194cb8ac9ecb38ad3b98a2a42bf7b8ea627f72f14dc493ba1ce3e795d7d52febe721db97987dfec8c3bb7747f241a4b703663e7e5adfa1b3
-
Filesize
40KB
MD515d5b92dcbda7ef7f9ca327a903e46e4
SHA1ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA256e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
SHA5122352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
-
Filesize
8KB
MD56b82a80969033ce5e0ad8b2cecb7cd6d
SHA176d3390f762127339c1e17fb1f57b1588993dfe7
SHA256ce45559bf7dee060756a975eb865a637ad29ea88d3c364178436b52982d455e6
SHA512b0546c18328f5078d42610338ac387717e912a66282f616bfc1584a0e4b134780e843711152480854b1ac06d37e7f78e92a84cf45e439be4ae1be32787773a35
-
Filesize
8KB
MD53e9d7e625f26988ce1bb5c9af9eea59b
SHA1e737de5424a1447c81da250dd2276e4f833dd1ba
SHA256f05dfc42fe95015c9f832d08098a2c93b75793859d81b69cd6d7c3058899b1e8
SHA512854ce594489cb5d9715cb4e5e115f64eb08cf53f2409a6da29007a68ad0388d0b7f870713e96f7b2d3070057716634430323c4b787aae3959b0b26c7f80e5c90
-
Filesize
512B
MD5e6ebea10d61e9e433289f5d51c9d244b
SHA154000b17988810ab461bf335192b0b90119667d7
SHA2569cf42e55433ff0317ba97537ca6aafe6402c5094a1adc31a4fb10682a12aef67
SHA512090a49bb6d53fa935a090cbc2ac1557728d2ffa2900e545e823a4664f7a5a6b9484683aed8b4c6f77fe27ce5ad37aea6f5029d29aa723e8f8e2143ef016833a7
-
Filesize
28KB
MD5a58fef5b305a2d8a28dcbc2031dca976
SHA1da6a1394f7100f0e2d563391f12443b95244c4ac
SHA25650f8fe53811c6e481dc139e7126bd931c66508ac939d9bdb718c79ce37debcbf
SHA512355a1a1cb2745ec38c7b5ad1d266ca634cc71be133b999187b7d2257f324107d37a798555b05b8f498b33a8832dda80df799f15dd8b2e2cf2f94bda265f0aa13
-
Filesize
512B
MD5843da59d364d662c841c56d70ef5c350
SHA16ea3e596a6c07e013324b7ac92f0788dceb87bc5
SHA25600d738f826545dfd3074a882754f7cd305eb3d368197341a14e7d9fb34926ae1
SHA512d70c29105367e25baaf1c2155a3c2138e9f072cfa71b39e27a6272af0a7c36b1bdbce1ce98886ef701365cfbe15d3941d835cd0cf1c5339d1d93873f5d4408a6
-
Filesize
8KB
MD50e9e33618343a4c4093794cd14efd849
SHA1541dfec87454d55b3c20734f936196724672fec9
SHA256b54a247a578c4bb00cdeb143c10f89952e940d1ca3d787ae6094605b96fc095c
SHA5126ab0859f96010744d980c0783844eea24392498ad3fe8f4b70602da0a3e08bedf721a414ed2518d6fbe79ab8ef282d8df1c670b7292c199d94aff04da2bb18c0
-
Filesize
4KB
MD54c52d44626051bcc95a6afe044042244
SHA17745710087288d9eb59071ae67dd8d52b76f890d
SHA2565cb1438c9d074c0e38f7abdd38e0fd31d6611ae849460e362467c95929e600a4
SHA51251ea6782da9c16c0a744bab8476ff8dfe54962c9023229ff80ebc4334dc4cda4a95bceaa8f45d373e75ab129ba8063756bf8eb450b43a49603e6517732a9615f
-
Filesize
8KB
MD586af7beba684593b31dd08aa08a9ad9e
SHA1e15ec021ece9f31222aef0eed9fdd58a3eb75dd9
SHA25611245499109d04e2eea41c3641a0754dcdadddb6a3d602c0276a5de6d95f7d2e
SHA512c7d2c75f861351188a3287995e406792c9f981263b4b2f9bfbab71bc11564ab03ad45369ab4dd6742e99b45511fa551577dc6d84ece682e4eac893ef72bc8b56
-
Filesize
8KB
MD5d1a5bffb23353d6df07cdf220ef70c42
SHA1fa223dd08b794049ca37a2d781824931c86401ba
SHA25681696da13b63586940b9617998b1951ace79d0aa5ac52e2920ea061f0d243af2
SHA512cd052b513d74b8b13458178c081b6ae2e909fe51aebe0a37ddaadf937c4e937db204a9d847a088974161f250e48c313cfc6e678771661071e929d32bdde8696b
-
Filesize
12KB
MD51852f771fe4eb235526ffcfd53c7f79d
SHA1510031749f9387c3c2e96e6a8b7329c2dcfc2f4e
SHA2561d018d6bc575131bd58018d51631813de4ebc45d47d1f8cc9c403dfd4cb94832
SHA512a8d516847eb74b3a7bb0837c73fbe54952895b11c67c3d26636c8859357682047f10adbc433f791eda4a75e2be49e25dcdc0e6dbdfe77cdb5cb65f441279bc5f
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD5ebf515628a7bdf452577be56e5797e80
SHA1a29e1885fa9964a277e69880448875a39273d472
SHA2567399a8ed1aad4965a8c35db7211b9b20256bc1e1a3065dacd13962ee4406fcab
SHA512347b72124199e74b0d6f7b0e9b9cd7892a8304b5c99679597d52112b29c01ed5ed8b2ce08c847929c19120c88890ebbdfe99ac5ceedfa0e88d34f0079e007d25
-
Filesize
16KB
MD56b69ae933bcd3293196c4f095fa7ace5
SHA1e3587ec53cfe13cc50fe81d89ace78f3ab259fa4
SHA25657a347eacc63388448e51d9ace1bb104efeaed8eb0fa6f065b32537741eebc14
SHA512524354b6473db9b99d29a9d0a5a1f73d8ff959afd701b9f79b9477c4fb9e673619ca1597b855e3ba9fe80b868d16c969d2fb14fb7c286f3a0d9bfec265f5c71a
-
Filesize
16KB
MD5050ef5af8865df00c3eda5a6d5f3a45f
SHA1cd271fb645737c93721297c420d8f72d7ae1c56a
SHA256bcb62f352f6c8a3deee7fe4e76c3c306427ef65fafe6166c14b76c6c0ca6d8c1
SHA512fc9c4e399bd1d7bf0441ce238fadec6b75521eadb6d9bea3f77cb9284d1f8acf731ce67b41da152babab0c74917a6cb643785d55679725077e0bd53ddc9a3db7
-
Filesize
16KB
MD5dd0cdcb6164abe5aef694004f0fc3946
SHA1e567ec8428b81f3db5eb04884e5911d6acca9e52
SHA256ef641ea5942c7941c81f4d15385822b2f7b9a2cfd6edb96d4113e23351e4611e
SHA512d38a02a700648303b5ddb684e9efe63df289396c2818365189b6ec38bb5ff701491d78564e563340564d87e3a98c3edfd860fa0eefae93e37b5416862afa6bfb
-
Filesize
16KB
MD5eda96559b53540b070e486f526a4cacc
SHA1ace2f4645a2297d178ff849a13c95b9432445307
SHA256b535b1cc36838c013324c98e411f043cba25a911479a14bf498ccd52a51b3968
SHA512438403f921348431cd8fd0cecf380868e2dade89978c25a038b86447017a3c04f78f3f1ff9ff610cb1adb12919854ca66656918526333896ef39e6a2502133ae
-
Filesize
512B
MD5fd0602586eda80f2b6dd0f9d930a4e76
SHA1f6439b6bd985e23219f6320eb26715672375a786
SHA25655f548250613fa75e3d54618977c8ea21d0560ea0e1dae59651a7cc7e6bbd859
SHA512ac9ddc6e7df30e12857d2e0e51c0883ec9fe483f13c2bdcd181149b493ba84fd1ed422c923a3ee448aae09e1aabfc804d3b5b795b25485990e5823b71fcc38f8
-
Filesize
8KB
MD5be58a1c2a203c4a6f380eb63052e9b6b
SHA146b205453422f4c26b61a2777d7f4f55a96753f6
SHA256037085d9b763ee8841c1f495dfb71245564359e512114ab82129804d905888b7
SHA512620a4db6bfbe57f44bbd4c1d9b6128cc63921609282166d9d3417ae9aa63a62338b4e70543589dbc13f72007c3d13d362f54c7eaa56c099650a9a891314c6fec
-
Filesize
4KB
MD577eff4992c27b702e11f98c0a2b7d226
SHA14b4fbab02824fb27da236bb77fd82e9686cc7497
SHA256cfb83d7a3c1ba9d4509a2c1fc98b031ab8f6cf0648a0925632268f59f5c13cd0
SHA512812179a8bc3c33acd5f82ca77a85cc5d5e47b5b765319a296515c05b32dbbe95f1342209a2d14bc0cb860705d0bd683ac31f51fcffc6f4d88ba081a4ea03600e
-
Filesize
8KB
MD574bea2056abb0ec1bc6e9a3c7fa9a5b6
SHA138423513097a8ac6de5db936e3d28659b5aa7c34
SHA256f52dc73294af8c4f3ca9d73f6113d508c38593a0c0c6d6c4eca89f656b265328
SHA512a30e433fbe7d32cd20e790b9abe2a10860039265da0b9537972761a578f90d7f08881f39c6a0e4bc4792eadfeee8d3fed3fad042e59c5efe469bac89a4d1599d
-
Filesize
8KB
MD5388a133ec3c8ca693426c239e391baad
SHA110d4b62a920ee0edc1b2594ca4142d949fdbd1d7
SHA256954a8fff74603a4918a6f15a77621b3f3ba77c748a8c5241f6fbd1e20d647179
SHA512c56afb2e796c0b45ed418b747215c625cbd08ef44c8adf9f92fa35e65f4c8ab54106184f0e8e069bc81f86da6059891c60d8ef2870222a8aa4f65967e0d6dc57
-
Filesize
8KB
MD5136a3b54b65353025c31433b2f8e7223
SHA1639a68b1a8825e07b10b8e8dd2eb21989beb36ca
SHA25656ae684224885ecf6b4cc07477efa1db8701eb21963565b3bb09ec5be7da210f
SHA512a42634da34203aa0caf02c2f81dbefd368902a87fc211b41c7cac622df3f450f4672da1593cebc2f93aa510fd696064acb80b0fc6846354f6af57be80a3902d0
-
Filesize
710B
MD5dc9d8e4c3a23555b4be4c42c14e88ab5
SHA107167b833a7304a5f3a785bf1ee58de7539d7d2b
SHA256a41cc02bee25dd0f6ce1c0062f6b4498f5e12e0f639de7fd6d627bb464b5c0d1
SHA512e7f57b5a51db0b3ccde613cb3352ed26e27eef179f86662c954fd981590e3929c967d86942635e1414832679d9b27ac60d370159c1622081ffd230aabe2f0275
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-663C30A30014000114336D3DBCA5CEE6.temp
Filesize438B
MD51bbe06ad2b554ed3b61a2ab350d0d1bc
SHA147b6aaa13338f862c748852eb76c45b8c622b9a2
SHA256bb49eae90d24d4abc730130c168dc02c939f2d03ab4e6964cb19b2f961cc5aed
SHA512ee228bc802d9e9fe20e9b6a9ad5073e0f6997386ddf0d6db25c2d9f69640787bd52d940be0b6dd4b9d484a2d76142ab76a9387ae0b6b5b0c5d6af55522e1e17a
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-663C30A30014000114336D3DBCA5CEE6.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/663C30A30014000114336D3DBCA5CEE6/report
Filesize733B
MD5a6ab641201705e31d3641e02e5fb1eb5
SHA151ba5a4b2583c213b0a1c53eb7fc724699bc208f
SHA2567f4ece3f841dc3b365a8470d92e45942ff3441e0e584186b4ae8165bdcae9606
SHA512de3a8d28840c9cde1b2e92aa80e0579c3003588df96aa3f314a074a4c3da62456688ea32925c58c73e63d92cfd8d70858f69b221dbaa8e190855108f306339c2
-
Filesize
90B
MD58649c0bb45bd34e173fb176eeb0b6777
SHA1e0c6472dd9c134db71aa2a716b7a9d2dd299dd64
SHA2561b03c211193bc2a402765ca66240bbb8323ccb95e659404bebb8526db36d2fd8
SHA512df3021d49eb65433cf59323e1d2821e674d0e15eaa181deba513cb985c85a7181dcf2d7903d0c36aec0913a2f57ce40870b88b0bc985a35877f00fa546e12cd3
-
Filesize
565B
MD5b81113190f0040c385417dbddb1aebcc
SHA101b5d8a82b43da6d0c1469d3409ec56946e1c4d4
SHA256e963c4ce90bda777e814d84ddcfe8563546dd5767d4f4ff06eec8a0fc60ee439
SHA512db5cc3e4b2d5cdca992533e7c5953544611e7aa98559f5708ba9d83befc67cd2b86aedafd5a0fde25efe3beadf9ef292b436790203fb37b319a065b04ca52e1c
-
Filesize
36B
MD5375d4d92c788aba3ae00953fa45d9b79
SHA122ee932ae8e45efb755491170a376251e2d252ba
SHA25606f2792ccc106ea21fe92aced2d1c447c7b2506da0b40af5e15539c18ee73846
SHA51291fe662219ba1f1173e84415724e22acbf3f8bd69ecfe928e8b8e3642604ef3b7470c409b53275a7d78c81a75ce4b8dd7b74e18f527b281127816fca1f5f8aea
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD59772a3d479fe0c8b147eef4c6e163150
SHA148bcdfde596eff7f64ee6c4fcb56b87265d4352c
SHA256d247029ecca16293c31d7c5daeafb0618b30077254022e37700b430ef69c44af
SHA512c944e2ade298dd81bc3e6a8e5b2bf3f3fa6fe93debbe00c5b274f52fa49e0479bd93a7dcf56029dec3b77dcd992f8aaba052823ae50391148c555828e39a3cfa
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
108KB
MD51952050a346b8aa0e16d4998d81608b1
SHA163778a128e8aa656cbe524c1786ce38fd0cc28ff
SHA256956d3246fb66e99bf1fd77e565d3da3e449801581788e75246a3245fb13c4a9b
SHA512bf1f6f5296e92cc574cb8a0a2aea77dbecacbcbca121c76e3caace5850983725b980f4645695456f75f680daab759a82371ca6515f7f208fb00772f88be66252
-
Filesize
16KB
MD583933ba1e9ffa8ba3b981ef9ac8e12e6
SHA1fbca428814388487077cc25888005aff23f3e8e7
SHA2567350124ef310130c3929220d37d2eca0370c5a817732fa4650edb24188aeb8a0
SHA5128178b2502028d49b080036e80b120af572457bc3480854df0946acc00d93fef03a29e18c05c314378d6020fb38ea80386c7f131751aa9867be894588b34eaf70