Analysis
-
max time kernel
48s -
max time network
133s -
platform
android_x64 -
resource
android-x64-arm64-20240506-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system -
submitted
11-05-2024 02:09
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240506-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD51bac345bb3fab3e6970e032ee1de04d3
SHA1526c991e5cb80fefee23618c0ff0195a57e9d7d0
SHA256fe6e1bc5fcf2feb6d10a20286c48f442bf85fd15a07c5526df964539484200a1
SHA51262fc2d8f736b74660ae8ac380278432d3df859c83786b9dca8442623787063cb269ed0ab617b03d1178838aa4c8d9b87e36fd95a06cf1b8c1b0b116743afea87
-
Filesize
1KB
MD50ca620fbd8edf0c54bcf45d4b5108260
SHA13054369b28ac775146f4715ea4fb462ce9d513cc
SHA256d77a9475d45d4c16a5fa559a5038a6243eb0304ae46a4d674304b4ebc8a5d8e0
SHA512c7c9d28250387e6681355529461853f749ee035c348a71650ba055108cd1b318274b114ffd724e518c022eb5781472f9c4eaca16f558a49c1a067aa85b17a4b9
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD5c03f060b31052a50b50fe8edff550e99
SHA175ed19831c316571d455d6876ea117aebc46c2ab
SHA256a261750c75e1215d8017881bd301c2f81b175df886c7bf62a275f8e62dbf77de
SHA512a944fa1f49a1ee962e34259a251834f77e51bd4fed829e3ca9f811a0e68b39db6e7b28d961758062131ad757fb34593e6d77153fa7f7485358dc74b8080cc766
-
Filesize
8KB
MD5ee3b8b179b9cc626ad9e883a448abd81
SHA144097236a60ca02fa4b4b120e5f9b59dafd36006
SHA256f56a7592750afb05bdbc72c444d539b9db5872ed12a09b66ac83d44711911cba
SHA5120a05a5d5306d9294c4c1c25144ec7bc6de291015e41cd3da94c767648a0b2792f252e9f7bef39d601c834a710271fab5bb747618d7edd55e799284c7c743cf39
-
Filesize
8KB
MD54f2b729166819b6ea7a46543057c0250
SHA1be398859938cfa43d38ea42e400ea61e41fb705a
SHA25612338fd13c47a38822385cd7db2948697da6e1891d60e2b2dcad753d676cf21e
SHA5121d6c88be7805b635b068cf5a55833ce4bd99bee280fa3c81285ccf4413178687ec651746bdd52cc180c85836a730432e8ca1762ea10973efc523dcbbbcb32424
-
Filesize
8KB
MD57a4848ae5f7ad61b82cdcbdc20708869
SHA1006d0cb1509a4aab4404fce5b99569e79844717e
SHA25634fc3a70bf384558818e20793521ab53429461108c3f38cd7b524ebafc045fdf
SHA51204b749a7000db4fdcb2a9950cf31fd07bf390a61df6c17e3162e507eefa1ddafaae1549e9acd1f25809544d268a9fb45188146bbdc7d423156c20cc1f3ad9a5b
-
Filesize
8KB
MD5feadd768971e179615a7fd3dbee8727d
SHA1f073fa043c9916112c22720af7fb1695c8c68d9a
SHA2564a432dfc63fdb19a075d08da65995725ff5e7d95dde1b61471f0e5133329d0af
SHA5122f4cd7d662bc94c2465649c3c0a205407f9529ae70a217bb7780df6665054b9473a6cf673b1ca777babb8c3e6fc11250e605d1450ffb1f9283c3941fd876b639
-
Filesize
8KB
MD5627c8007cab35093fb40a5d4bbcd8817
SHA1fafb6ec0269fcf9b0bc99c0adc2c63584b3896c2
SHA256ab445a022ba5395369ad5d3c93fcb14760c30171ff32f26d7767d502e21c4030
SHA5123dc01c4f5ad2db87f393a6918a2422a2cd22c5ac259383ec9e2e31979c8faae771cc291c5c5da216427fa8c90d01ba5d20d46afcdb342905563102624bef4808
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
8KB
MD5d75915ec37b8a308b26d24208123db7c
SHA106a6a37db1441bfbe41bf773b30fce58104ecf16
SHA256ffe63ef7bc84d6168b118a4369c57572b8008393b2a9e32dc9c8486380768651
SHA5122b4626304b6ed767f93e08743de9fe02eb015464c000b818ce3d70c24c0e8b29b2224659644b805b9369b56f98f3c8462eb6d42d3845ec2aba8ce7a0e45a6d41
-
Filesize
512B
MD58555910577aae175d11d62213e71a026
SHA13d5df3626d69c4a2718ff0542342bdd2f6d1db06
SHA256b7fde9c1f752fef5cf29286af923f00bfc5db31d73aef89f3cfbb51002673b8c
SHA512a5cd2cf708cf6a07550cca037039fa5238550ae60143e638ee13304c390c80335db2a872bf5cd55f5834a0cb096f6f70d6f1b51a5cccfdab851bb82bc8c099ca
-
Filesize
8KB
MD59f10ac3aad807d5bbaadf47a4d67db5e
SHA10da5fad29e7d24e61c1767aa0e39f1070aebb19f
SHA256bd6181d2ab351ebcbaa0b3a70a6dad267ebf72fdb60cbc8936bcb96ee35faddb
SHA5126150eafc55f9dd52750474095631e7051e35a32fe0051547655ff54f2610e6c1cc429afc8fa19fe4378305d1c8f94bd4220749d93d80851f49fb77c34cb26a1b
-
Filesize
28KB
MD5f86536aec5fc1fdcda3e2391a77cb281
SHA10963eef5d3195cb90854d77caa99ac0e8f177762
SHA256375c78520fc196120ab798bb57b172390194dd064dcb451399e6bfc5589688fb
SHA5123bbc7c46358daf3b35c0addced33bc44b0030f97bd554032c6ba46ba881a842aeccd63be1622bf788a5e71375cfd6aad9fdea5a836ebd5d3954cbc5e5df03af6
-
Filesize
512B
MD5435d02308831ef0094f11135fcbd11bf
SHA1ec2f16887213853e30f1cdcbc7f749033bf96ffb
SHA2565ed1fddc41576a389c28d3fff33f1814bc58596da50b4ff9160ae329ddd31aff
SHA5126f357aae0c3e509ccd54474fb69deefa73fcadc2f1e014fedc23fc9942641ea90fbc0d60b3b7773c0a6f3441494edafa8ecfcaa168552bf2bae0bc5b4d8cc467
-
Filesize
8KB
MD51981774563e1f24cba2d88fe16bc674d
SHA1cc8697ec2c6b0108146e2b7f2652d5a7abfa7d21
SHA25696e2cf8a710918b112f6d451b6926f7f7215cf188973de2235ca73491d129946
SHA5121fe9b9b0be4fb83542407c793d78b2b9b1be059a40f1c89fa2424024d1fa3e66f8df49727bd85690686a31cbaeb35698c32fd33e861ced6d671d3da14396bde0
-
Filesize
4KB
MD5a661037c4bdbedfb5052841c5c117dca
SHA14354aab239811c59d70f61c4e117dfeea03d4ed5
SHA256f33d5c3684bd5eb1a95cc606afc9e417131db03424bc9204c53e45e3cf20afaf
SHA512870bc43535f03fe19101ef6a4a834ef159dab8a2d62f963deaa20bc0db9c438a8960c50134b76b71bbc365c2411e488155d64d7e0e751a2a4c5e6ca60c81f01f
-
Filesize
8KB
MD588bac27c9b053b3d9dbe4d5332dc95f7
SHA17c1c1f251680e9b767ddc9859727c373f1048f0c
SHA2567ef4c7af0f92e28b6f5c4fbdb77183727b24d5d8c6a503772ee1825852c18996
SHA512c641b0e7fbfde64a430b1efd2201610f69af381b179ffc33782d8a9dcda10cac228ad9c6657f4dda952d2a35d97136c8f43648d5f230dad1a638a8c3e6c45c32
-
Filesize
8KB
MD5ad4854d2964cdb5b98abc9d108e8e2b6
SHA1d395b7a38f26d25c85663f8d0aece564c1c99724
SHA256ce4c06290f654f7bd05194627a054e3f09685eec32757842547eca45782fb453
SHA512b85f25fa319480e90b66a0cc923f08e943b24b7b25b1bcf7d41ad20217831817e4b8420a959b9b152fa9dac018a4157142fe1edf2a5f7e70e57959f6310c609c
-
Filesize
12KB
MD5226e7ae665779f69b0bba15292edc896
SHA121f690ee310d207104e4a4dab9a7aa8135eeb580
SHA256e0a024cdfe12c5dce4290f4180b147c292e1a65d3934765691e107a173378e08
SHA512e553a9453091bbbe40d0e682da56bd5c3ff94ab6a3823ce2bd246d743616c4351eb2804a93257b0ea363b6ed22cedd0302987a54331e6ca8ba3c18c7afac7bd3
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD58c715235a5c0a909a03bf100a9f62428
SHA1a6b957f6af64b5d6f32c47f95d5aca76fb845614
SHA256fa7f0829d3ca4d46a5055348f4ecce17d6381dc3f4ab0ad4472083d6150f2405
SHA51247e3a78c6c4bae64b9fd4aa6f3fb0960af6cb919c6ca26b76de91b85cce494106be2770dbd82d91fc54cf594bdf958b359efd54cce44eb9bb177e61f324e0909
-
Filesize
16KB
MD5671a38f426a7f5a6345dc763741d84f2
SHA135ee57d1528fa5f32be5d089c5faeb9aa81195a8
SHA256d8ca22b3c2389b52fda1324d0dcc9227c918e1c64a7fd8ddbfbaab207a04f881
SHA512cc76cac7b6f4bb5ca8dbf9c4ead46560c7f4278ec01c4a7b9a38165ebc18964c8aa2b66502714103092b339e5d4752d5d208296a531a3aa638bdb253b08e5718
-
Filesize
16KB
MD58a2182381684a55d1bb838e762d55f12
SHA15818eb607e2baf15f55b17f2353cd85285008708
SHA256c2d3446e811dfb1e966f2928f71a0bf8903dd2f042de23e8bd0d85f17f48e45d
SHA512df6ebaac4bfd31db0af2177921c83b2da349c1bd687a027acc21cfcabd62d0cda23974f9a91ca2b33f88c152bcd983690aeb16f8d382ecd41c08085ab36b507e
-
Filesize
16KB
MD51b64dbecb58b6345df14a1568a69a6e5
SHA189e5e60b1eb9adc3965605ee39656c3fe15937ce
SHA256520fe68cb0a55a13e8b168e2f8905647ec7101d6c1631e8df69cebef8c1a0721
SHA512028070deb5425b76953a735e92173bc551ae164e00bccfaf1e43187d2e064b57f9a7d10c9598156273242a193854c8faea2f76cc816ef16a6d58d3d2d3d77bd9
-
Filesize
16KB
MD5c6de019a93b8a298c139021e0283ba5a
SHA150dc2c6c159ffd1142b0227eb079e94e90964692
SHA256bffd2c611a545c2a706cfde42b9a0ec3e42a0d439b29dde7b97f04585eeec3d0
SHA51214001d11deb208c3c9a2a2261fcc6890df0979a120fa7fd71983e03f04d763efaeb4cccc517f58e4640393e1a01f93955f9436a5b78eb05812cd81dc67c13b1e
-
Filesize
512B
MD5143714775518510a952095a347ebddec
SHA135019cc2024856040a54192f03425061181030b9
SHA256d51dd90b5e1bbf4c373a8c27f0502709b2f1d635c0d1f65fc467616525f84ea4
SHA512f9c8118e3c0aa53bd4fb5bb4238148961137172c493d91a8acb713c32b448ea91959883f9878e9ef4077e0d50cac2ce7279311657ba3afac5504d5bc61794e84
-
Filesize
8KB
MD55dfe420ef2f90248d683003b2071cbc9
SHA1b226b7489ed33d9bd2b36f804ab3f9886f0789c0
SHA256ac721b65bbf1bb33a09ff14b5bb3e1d1b125a09b01a21a92eb2ba65dacee47f2
SHA512f063f7b9ab29b4e1faa4a49211b0a7d0333da4c7e26475350d5081fa98e6df6a6a4f8eefea637e658c1a0f1b129b8041035a4d3b37e9624db9c6196a3eb06725
-
Filesize
4KB
MD51da6a8474f8ea826b781a3b66d45c3b6
SHA12777aec0e6b4b8f4af437c6ec1286d205cf3a1cf
SHA256431b474cd6adf20acaec17313803f64e2ddbecbf94435ebf9ac4bcb5052346b1
SHA5120c842b68b67aec57a044e09fd4e61bd15275dfe4753af0b33400dbc6580a0e53e51466461b72da6d3919c29aa468ba023abc0dbadf6ba1a06e2c8d193741dabb
-
Filesize
8KB
MD5e0d07b2a1119a904011971984e75cd57
SHA11d44f7afe9bb6f98d42364468865dd2b9e99d1f8
SHA256fc4fe55d90b7862aca8473406ebf93ad7723d89309c75c8ef8daa96efaa4230f
SHA5129e91d12a39b7492dcef54d4d08b5a91c438dce6c367170b83392a6f8cd870b8625beaacdb88aad021ce7fe7be60edbfcfed032833a529bbcf164d89eed6b491f
-
Filesize
8KB
MD5b9595155abfb0be4fcb0328652639ed8
SHA1d382db9bbebe44d7863b0aa5e543439eb22f9ff1
SHA2567a1c4fc0a48ca0f0250ea92b964e7d1449fe24b5e61e6966ad6f716c9c882038
SHA512457e1195b7f1fbb6c88d5a560cf456cec2c064f3531f3c0dee94d40a5e21deb6d4e89eae23b3619df6d405528ec396a79967c44255f868a3b9f1ab1168f172fb
-
Filesize
8KB
MD51a0354e36c64e152cee53104eb2a5c68
SHA1b04a3ee7fa0a98fcb98eae91a3539f31d8044cb5
SHA2564b6891b90322e15f625db5e63233e4b4a662809f022822edd4e47e99cfcbd936
SHA5125a7e419a9646fb1ebac2897cd3f4c493d421db2eb1fece7bcc83c7653b0a19dff274b88e20c52d4d727030da0f2d4ea932f2477f4350ef61c50e0ba0a960bee9
-
Filesize
710B
MD51fd6b9e68fabb3274e6376c3b18ae91d
SHA1158cb9c288efa8ed59011f362c25c9ac7eddd930
SHA256a8aca825cbdfebb64f6bc17357565e54c7b0de269ca437bd92a7dfe97df4d140
SHA512b1e87db2d5e790a13837bded68ef5ec567caac613e38b3fdff76c381c34a09428e89c2f6ce41fde1a838a7bc4c574b3701b480ace5158e06ea99c74ca339a310
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-663ED37F02C0000112FC208D0DE9C98B.temp
Filesize442B
MD5a7aef954536aed3d4a1b4270fcd49866
SHA12d5e486d1e84efe4a88cbf8e6b9adcb9f13174fe
SHA2562b37758289440c6b6a906c990984978912738d35bb96bce9fd9985217cff0b59
SHA51256f2e5d7562edb9556d4ba021b0b7874fb1de5ee9971e191d4e316c890bff07d6e2be25ac0b3812741304aada1bcca55e70447f016ff5f0962dbf22c9de12f73
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-663ED37F02C0000112FC208D0DE9C98B.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/663ED37F02C0000112FC208D0DE9C98B/report
Filesize733B
MD5dd2005fac33dfcf424d255e9b63ad216
SHA185723fed7659fe28b0de23a01f9efc3737f910f1
SHA256ac4bdad50b83960d73de21cda081b9fd7b6e2971933af954b14cf3e8ae8b248d
SHA51251fa9ded49dd3b0a819cd8b58106810f8e8c5454c5013e72c3c6820c59f042e4300e97cd26ab879d0ff3a463b9251a9dc4f94d915024dde16cddecb6f32fce0e
-
Filesize
90B
MD58b1f05e5662649ee688f0db5a197aa4f
SHA10e9797100c51bb716907c448a645bb0f66c70118
SHA25633c79f70d5173d08caea63542c5ad72943586d09a1ba1fbdcb84c1180281b29f
SHA51262821ad6e75259dfdc2866d482ba7061a7f9f6869f6f796984395e2c2f970efbdb13e40beb53cde68d1333c847635e9898ba4b2ba0f8e32af93372bb6857f9e7
-
Filesize
564B
MD5eb7f94f3502e892054002e11c357c61e
SHA16c617c6d15e8823802b28ad5e6fc214e66d3f6f7
SHA256f65242a81879f349186d7fb5138034529dac89cb8ada53e48254ad3f83c33e98
SHA5125fd4c2b6bb61d35bed24ac3ea9a1881e6ad27c619cb9cac5a3a1c1c90940947900eb897747c7aea854ad7dba44ad0e66936e2fed5e781a1254f1713721b089fd
-
Filesize
36B
MD5ed8817154c9134b3589677ae999f0d9f
SHA16534c7cd18f8a13c6416e1e50da4c6f738e7cbd0
SHA2561fcd84f295f5ead6d0e2d316b3c4bb9c27fb5364df5e11fd4a571ed68a72f8ba
SHA5122a6e6636e3bab375e46ebf689628f641d1909ed63e7f8a7d7fe4f018c79609c8029d1b14bde1a9448898a4c2e1db3f370506e937f3155a4a935b76805edb5030
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5332faa834012197005754afbb1783534
SHA19c07343b1b6ab49e99b5900bb30ea1d6c6dc492e
SHA256587d784ddd0e9a1496f4daaa0f6fd9696164eba648beabe0843b624e5f86ad81
SHA51283fbba2cf508607ca99b72c6f4b27f92a0f24f912656622fb500de56cd724cc2e023a48af4d633fa2ec86581f7b6ab1f3570bea4ed09f0347de174c1a7e5a193
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5c7fc3f613c2fdf44f397412d24c7555f
SHA124516b3d07568bd10cf95fb5cbc62f46b1b854ff
SHA25616a8629173741b21e2ed35f5e7622fd5ccd2177b22ce1de88cbc3d4f0d45aa3f
SHA5121cab6e69e7e1d40f62f1a0a178e591a65bba607b994c2ef45079ce29c001e0b4d339b7798dd90999b331e25784bb51e8460b73b9c42bd69212d1da4f9fbed311
-
Filesize
108KB
MD57626f9436a602b47c25bfc4c14eba360
SHA1f35f4752ab737dd12431ae0d862ed43a9dcce7e8
SHA2569e0a16853681a40ae1d7203b20b3994d2d61119db77c198db7116ff79de1b03e
SHA5129d227f09f68ea99f7cb8a142ad3124ac9136cc876adf3f2cccb9a49a10e14c0002965124affb51e034f6b23394566043ce50d48629abdecea63f4277e36b1900