Analysis
-
max time kernel
48s -
max time network
144s -
platform
android_x64 -
resource
android-x64-20240506-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system -
submitted
11-05-2024 02:09
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240506-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD515a27a2654baf6acf523a072b7a9865e
SHA1380de56590ec3948fe92920b5964713fcba732c4
SHA2569982f169f01d826d3725524b832cf5d1fb7d2832825346a56d4cda918c748f8f
SHA512ae52d143ddb76ff4f1265ae58024b5935117011a941563c7f2dd8ea3fd23aa95d6e6759a678ce9ea2a91781c93154924283519ab91d66c65247cab316b7917eb
-
Filesize
1KB
MD5df857ad25e0a22225706cda2b33cb0e1
SHA129d616fe6e13d806661a930664d7635f9754ff57
SHA256d143ec1fdaa8de3ce518918c5b033c9963f7276f82e7e35440540a4ab695d6f6
SHA512804969f4488f3800557134777f20014c789acf380ce7fd63fb56ce9248b068ff8217a9ba19a0a3366ca1af49297d61d300d6379c8cece7b995e4e70f29784967
-
Filesize
76KB
MD5244592a5662464f9e6e8aa5d52402428
SHA1885e44dd3ccf643475ddb16d7d2eec0c809fd1d5
SHA25654b29062aac9ef91d03294047b7780498a2cdf0ddd75028dcebd9b6b7a88214c
SHA512ce35edd0ec05450bb08d6b47583393eea034333b99e13ad2bb6848724f09ed71334a858e5cd5ccb6909d516ae70545c3e7c98ff15673005e25c9ad60b2a11b17
-
Filesize
512B
MD52d9aeb2c7594948dfa662cf3a3f908da
SHA10c73d8bf3e10a0b294fcfc2bc2b12dbfea15accc
SHA2561c4c775c0524d3dd9ae7f3a121bf868b1193bf9d03550ffbb5e854e35643837a
SHA512ba0edd18b5f2a6d0e49182c072512498e70daa0a8c8bd571b32f291f71890ccf3ef59fb9fe779cab0199405e50d53f025cf77952a1725cd3352071835b4b0864
-
Filesize
8KB
MD5657a7341f6741a5793dd0ea9be4f8ae7
SHA13f1f177cc081154ec1f987ff57f4cb967d521c2c
SHA25650f98d75a223e5e1876937374c1adcdda84018e65a997f7923117c3e60707c53
SHA512ef880bc0091553039725b42a989803c2510b7b4ed6c23dfb1398fa92834b36440dc8ad202de1311675cf80a82cf89bf6f9687542e094e53019bd087deec0915d
-
Filesize
8KB
MD56f494cad07daf690cb5fb92a45958765
SHA18819513ff964b535431a1dec68818f9b19684723
SHA2564827d3748fd1d0ef72ea373a4291c6d775d2253c0abe077262c075ab34c4f714
SHA512374251664667329dfca9de96e12b9e6ca57bc2c5f3c54eabe5dd1bedd660194eee9a3c4624729a2276e571c9c880f0a1f805d3e8801156ac3eb637012df270fe
-
Filesize
8KB
MD5382761095138570e37afbfa2a3bac5db
SHA12cc4ae2990325c13d7d2f3e2b481df007d12a111
SHA256e26bea665de489b422f0e415d42c4967ace85b5b43c190777a9a1ecbab7970e3
SHA512ad15cde13d177eb4b46f6b7a21ce0e0b84fbd19d1092278273b0a93942ead6b069235c2a3abbb40ce28764aa3612e6c9691dac37884fc113c7327702ca186eaf
-
Filesize
8KB
MD52f3bd8b4e8049e4e96b9f3590b0494d8
SHA16dd3e22c94ad45eef8afa78bfe20936047871d54
SHA25625d2263af77aee6463e9f5e7e5d3b290e0f8a427275af1c093a67c77c7bcd230
SHA5121c5e98cdc8ad11ae7d5886a029a567e5e2ced13d96042ce8f9d2add5818738bc4ba6dd711cad4b4924cb069fa71f04cb97e55bed3a3cf6504f9b5c533b488d95
-
Filesize
8KB
MD5eb456cfea6dac02973478fc6e3f3922b
SHA1783a5e800f3ab2c095045b9ed87576767c38f3b4
SHA256019d7392210141fcc1346d4ac1bbe3fbf81d0994b9b435f920c650139d988f12
SHA512c283e4d26e63973bfc4110034c3196e42609be486bbc068359bf5eb617e8521d6a86962ea5a2777fcb3cf7843b5ceec85e2b1169a789cefc8f964d0fd3e1f72e
-
Filesize
40KB
MD515d5b92dcbda7ef7f9ca327a903e46e4
SHA1ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA256e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
SHA5122352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
-
Filesize
8KB
MD51e3a1e46846fb7dd609fd85b11dda9d4
SHA12f2c360a8232b87502ad3a6136281887249d63aa
SHA25643d2dd71c26ec10c19d130a29f86ad457418414eaf6e4e3a3900a54d19b943d2
SHA51215807f57f6b0937e4a47a8af6b6e67be47ee2a2c9addee91918b43425ffc33e0a616247edf96ed1cbfd80a08fc6125827f273d611d382e17ab583383e1047bc1
-
Filesize
512B
MD54fa092b35c93b2d87586bceb17079ac1
SHA1e2f1fe911edd41ecb82c4b22bbca413cf277073b
SHA2566210f8dad19880cfcefaad3f827cdd37f28f299ba233272cedbf4ed3b425c475
SHA512e82d3d2df27fab855d484114170eeb6ac85e186b6c1eb68a55a6a9ab49c6b606b3e045b616c6da6448757ac9a6fd6f24c023f4ffb1625d937d9fff53fde653e9
-
Filesize
8KB
MD584d399e2f8a0f099efa9a3f90f2f1211
SHA17bfd6467498579aee497fafe92c883d93eca2574
SHA2563b575b3eaad2ffefe7d5d8b47f01d0680490ef693c3d193d9f075c02ce698ba2
SHA512d29ddd6fc31982a82fcfb5b31c5d26aca9f80f9c26dd3d520bffa66b2c9e99bff4540c3666b7368fc011d47acb27b2e20142d078e57ebaedb5bed57bfa317a1d
-
Filesize
28KB
MD5954150b836c40f5c6f33138a23f831be
SHA11f09f4b6373cd2cb07fb5387fb53c51314b2fdc8
SHA256b44fccb627c54b08b018b6845480e373d2f56a19071aa29b2397f00c20df9036
SHA512f89016ef3fcd8bb7c47ac077275ed1bdc82891efea864d5df6622f733782c75dec0e50baa2605d321bd57f87ef7797e4d558ce72af445a3a1c6696a01183170f
-
Filesize
512B
MD59bfd21e942bb0e9ac5b5826726667e29
SHA1234625992c6877a4fc070b3be87a1741006f029c
SHA25693d72fb350495dc75cc20e0d88aeb15f89ee7f8242abef42f5c9f691be9ad8a3
SHA512d1783cfe7e285af606770cc5b0cb0e8f2bb09f5274aa57da4f3cda641d4f45bec5905e4df43db21996d17f974e64630748d6438b6b56b948c3b4689611800d9c
-
Filesize
8KB
MD51b5c1808ee8362db4984d12a8573959a
SHA1da45b1fd873200ec19a89d37eb6a98305f335782
SHA25606f34add211a2a5135d5bcce32265c0f49d13a58dfa425816a1a6cabb5dd4df7
SHA512849e72a7571a57c8de10c9d22972bc973df6e076f19e52407045649b5a32fcffde0910aaf40d537e049a2b46ff67dbf5436e5863b7cd20a49bf1b81726d88348
-
Filesize
4KB
MD5a896d96e152099d4bc9ef18a8cb992c1
SHA1781611e68555a36f11cf82c893dbbe8c85987e48
SHA256abd80a215c9530ab7d43814ff0aeb574169971bddd82d73ef0710856f2a2be87
SHA5124c958a287dfd1fddfd443551cb403430079d48367e768de8e347202ffb2f9d3aa22a37184331b4823abd1abe481d40e11523392642f320b5eb6c2c60e0d0afce
-
Filesize
8KB
MD5a4c35ebe2f0740300adb4384ba629818
SHA10966419ef9c9a0feb1bb4f4dc168d16e30a70ec0
SHA256da04049e36860ad4c6d273c89a5e7941c557ac4b5fb87a75ce80bd1e69797f05
SHA512b81bb3a215ef463763f79eff87e2614e2cc628c1b3007f46bdb772903badf97ea77b750bf1eb3b5c779fde0da0a4116685f50b37894d40299d644482792bd649
-
Filesize
8KB
MD56a8fb9ab0521881628f8b194ca469856
SHA13703c19505139fe4fa71e649bbe23c8b9601abff
SHA2568ec50437fcaff0273a86382131d6070ce53bc352b28f3d987403babe13b852c4
SHA5120c7147137e6916b872d86b2a1983e4761531fee781604129c5a6f9ae7dc441d40758dcd23ec7be6127d33322625b82120460dce86d8c4d694018b39023957fea
-
Filesize
12KB
MD5c6f0f7df31f840942488ca20c2478903
SHA1bf14dc22bd8216a7da99b6bacf6378388410c2d2
SHA256070c82d00ce9787e8ca4f606ce5569bc93ed8905da56bf2a8d18fba6432808b3
SHA512abdb3ffe43228d4ffc55ff8ce58873f6d7d1350d9dc47a49ef05c94761ea09918916b5646962b07f12cea6eab3205fea97e10d25138ff13871791b5bad0d3e5d
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD501b55e61ba5f9a89a56858c577070214
SHA147d1e2931dda619d5061f405f81e071b5c61813d
SHA256a3622ff0bfd647752a9d3e05e975891eee9bd90d6711d11cf575568fbbb9b202
SHA51240e0282129355604ba626946c3b9903835b8bda2a4503704aeb76b1caee29dfddce28b71fe4087f88f493766e597e452f35c6ff48ef6d00e3abfd579ff4d880f
-
Filesize
16KB
MD5b9ca8a47d79669ba64d1683a23569bb7
SHA150fbbb0568f7651211115e2ecda191377a16e260
SHA2566203cd37191f36fe85f19d236e7a1c5e3d6e7e97b87a2d5eb798b4c14aad6b06
SHA5121531b5927a3d52118a1689e01cb27a4fc28499b269c6085f9b5ec1f16c323052a9d004d4cd945faecb2fbb9232a6cf591f72978516d7db377bea5cafc0715ef6
-
Filesize
16KB
MD53b64eda5bc75a966ac8267d56d84e532
SHA1ebe3c3828ce6f61944954da26f7a286b4b64cc28
SHA25656934d600171eaeeb6786784057075ba692f44c845621e54fce8e244a0a80079
SHA512eb7a2b84918bac48eac2288a271bdec49011df837e05ffa6adc7045293579ad0e3ae075a57084b9fb0b6edf626067c754fe239d7a7e9f6798f4f675abfbb323e
-
Filesize
16KB
MD55000f44a30ff0735fe2ade77671c6d4c
SHA1607e5177e66e2aba901cf441eaa153120f63a7a4
SHA2568e40110e90dd6a1605db7272d61148977df570161eb20373570c36689d6e046a
SHA512ff4e4c69a4efa488057ffa61e4aff58e21b333c5519caba0d2baa3a7d5d67e0c14a206bb01cfe08cce5ca5f35540b1fb0c26395277b1a07d521cd0fba8832b3c
-
Filesize
16KB
MD5eda96559b53540b070e486f526a4cacc
SHA1ace2f4645a2297d178ff849a13c95b9432445307
SHA256b535b1cc36838c013324c98e411f043cba25a911479a14bf498ccd52a51b3968
SHA512438403f921348431cd8fd0cecf380868e2dade89978c25a038b86447017a3c04f78f3f1ff9ff610cb1adb12919854ca66656918526333896ef39e6a2502133ae
-
Filesize
512B
MD5bccc894eaedd24b5b5793da00c51dab2
SHA1b70f80bf0b0121641d97ef058c2e48936b674c1b
SHA2567e47bd5cd53384ba39519d8c121a5aaf2a95f81425c39b64d5d7b12adb4bf16b
SHA51291671f8a5f3878bc71df35a2b8b08ef7b80d3e9ac5cca5c282056166d554b73475e1f7f3ec5940e214b616d6d750ef65cb6f2c91ed3c3541e9b86821ce61a145
-
Filesize
8KB
MD5a578c5c552f80c4b6d6df785cfa25a31
SHA1721b342ee39a7e59b8416d165f25ae56c4d53d5a
SHA2563e5d759b39be04579adf4421f2eddd8615ac8270a35b15cb3c9314e75a0aeeb9
SHA51248c91fb2d78b39cdae24631b3d22cb2707b67bb759ab6de081c0989035b6ac6cc746f7c30c0938cbc3a6bad1913ec3a1a8efde707a375c0601f6ef8cc52c9732
-
Filesize
4KB
MD57ae6b576dc835b392e85e2a4e58d3118
SHA152eb496d634130800ee5e14d9d94b1420dd5212d
SHA256eb13105d98250d2cd86157e806b11e8ba8b9b9789f4edbbf86c5722184ac2106
SHA51296f7be57df23ab6bdf14b238c4d957a95caf086296ccf06850646301de7b42a7b312defca23bc79e5cc43ceaf9f4b1ada86ae5f579b5fb693445cd9f4baac63e
-
Filesize
8KB
MD5d0453ee65d5b802f656a50c4fb7fd99a
SHA1c36ff9154174055127a7489810a81b0e289e6ba9
SHA25668eb4b4fbed49fdfe7b38abba2cee689de5fada1f9ede1f8f4ed5123f9fc90a6
SHA512c1ae7f39aa8968d0343e22cc49894f395d12baf08ff781f54357fbf9c9c8161dac1f22d6d63abae9f2c56b74d2cb62e0c3fe4b7faba0cbf32357b073d486409d
-
Filesize
8KB
MD576e11636a2bb55c2d080903df9cfe9cc
SHA1d6c4c89cc969c40e7970ca76273755559523fa65
SHA25611b166e0662377c78c625b329816b78ef261308023ebf130aa278451fe4fc826
SHA5127c962b41ec446a4f1f64c6c08fd8c242aff61d2d019e142145b33686f0074fc55da77cb0bc63ae9e51331a47197b816832e1ba60624b654b1785df38208ae551
-
Filesize
8KB
MD52abd47543df2b596fb9cea9d38ce151e
SHA1ac7c4963d7fc69f99f8928106d22650db177f38d
SHA256dce33345bc561db62f70a2acb8a070d765ef9af5c73780c97734860d684db547
SHA51245c29db2ef284dc84ed6d124806d3ae0aeb0c92a208fa6b6d66071e4909d6e4dabc3e13d677be912d3af3788625e47831c96bc0116d3937244f58a5be3c75f93
-
Filesize
710B
MD52ec5b3a28b8e80dc3edea35a3d0102f3
SHA1cb9a55532276f0a25dd80c3d1a8b86721c44830b
SHA25673eedd0bd780a7895bea4fb8a6f606bc4e9208b5045bf093070a0f170c4c4e40
SHA512e1f8c6325a4ded6f4f3843cee53426b9b0d9ac96e67117f72e036cbeb6098b1180d9a2d46dcff038767ad7591b3a41bd5e0e4b55ab32338f0b87fa5b0b9ae71b
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-663ED37900D2000113BA54B6C33952E0.temp
Filesize439B
MD531ef153b87cd14549340712472ed1914
SHA1175359a57813e4d2c867465973a291b941021dca
SHA2568990be0c79d61587fd6b0a3fb35e83cd27f51f7233c800fa6089d1dbf676c00c
SHA51265bf13ac153049df9dd2aa2520ff848559877269ed04d24f585a75db1fa0115a917a96012b49fd40973f100b6c68fd33ee2f2e3bae05ab3a40bcefd04fb65d9c
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-663ED37900D2000113BA54B6C33952E0.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/663ED37900D2000113BA54B6C33952E0/report
Filesize733B
MD56c98ab52c2367c03cdedec458a64907a
SHA1a9a1f78061ac5c194ef0922870d34c469444891e
SHA2564b48deb46f867cc6ae6b6c2859f911cb68913d89acc52492c89097f9f413b416
SHA5129c98ec5e6169224200643bb9c83fd727e7a53e8e72b584ada72ba28b8d67fd9fab2aa47c3ffee78ccd3164e3589151bc9e65325885f5a4ef9aa096a15a5716f8
-
Filesize
90B
MD581286ae997e49e77a4a2d98d727fb5c5
SHA107aa718376c25aa686e6a72cd5126d2f16563fe8
SHA256535b241268bfedaa226f277be552c95950a3482d29bf3dfb87496c6d1727443c
SHA51243459250defba1d10a7879cd4dcefb8593d76c50ef968c75a810042abcef83536387a92bd1cf33d3e1f9ca68c48b2a0ace3dc19965f6e6b75903e0eaf56da1d0
-
Filesize
564B
MD53a5e6c27a2587187ebe439b4c6835454
SHA1d35701d3bc2807d39011a1bb1f3776036648d9b1
SHA256639a3cdd113640272a0775b96642b7c31951d8c40737ea91f12cec8e12060b57
SHA51226a18e77c365222f51abaaf42574b849708a5be8029be5982b768fbaafdab218512384e11ffaec554a78137b69abed26c5505f90c7e2fa0dbcbec604ec5860d0
-
Filesize
36B
MD5f403142cd600cbb8c719fb8581ae7401
SHA1ba6f477385ad437d7d6b794c758881ac29e8a0d8
SHA25687572f6e7b196431c696964fa11364303b2c29f295bd7a3d0babb1cfc9e9f241
SHA5123e94af8c3401ec0ea0413bee16b23afd20f0d92b062a492dba55254e9bb02bbd074d067dcb9d65f5d74de90d807952f63cd79b8847ae865490750702317018d4
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5f52c7cf64786de7d146cbb9eaf06ba91
SHA1faf9eb96a4ec8e4390961b1eca335f879b51a0db
SHA2569323341d08fe0b2a2bee3ad80d5342555e0166d87b6ef02702f95a14913cf99d
SHA512ac5f8e1edecb42c387e15ffe2aefd892c2a889e6635db8ed60a652bc2579fcafc7027f30dae2c2d1c12f29d1a4e26963cc27c9929e39d09b6dec5e766552b25d
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD53ae70221779d3136a587f8d91b64baab
SHA1b666f8c9060c9534bf6f6faa7f2575f6c821a46b
SHA256f7039dd2170d07d1890cf6b3b59f9a99d20e05ba007b9b4d11fb5812673cba08
SHA512d8df02c1e0fff5bd3397e3171124a5290286aef161f1fec167c3a6e9ff6bbbad097ad8924e1a717ee1cb1f566dceeff29fa1361201504d60ddfdd89e207a8527
-
Filesize
108KB
MD56c31a795b7832599825a0e1a81f1f4c2
SHA17b858209365849d7e009c86159ce9222bb8b4b82
SHA2568d2371c983a952e27458d02e656efd6aaebe59b28a5bd48782ba369db75f1265
SHA5126731ad42d9c0387566d5b92a8e279f71c3ce2055731412dbb58e07bd8e231fad9812b098cefc8fbf5f861da1c2875d019e97d6d0d6500073cb51c2b1b53da13f