Analysis
-
max time kernel
48s -
max time network
136s -
platform
android_x64 -
resource
android-x64-arm64-20240506-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system -
submitted
14-05-2024 02:09
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240506-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240506-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5242d556f3a5ea6cca441a5dc741121d2
SHA11a739953c52aff8f08ff19e580a2e77bcdf49aec
SHA25673f9d03c997ceb584b1c5afe86e868dd50af927462c79d201a1339f9ca747a38
SHA5127eb06dba9dc87c29c272359e4f56ac66d50ca631cd2fedcd66d6d266f3c43620666a07edf911e4d988b19472bb0faf279e650b2bb44d0206fd64fd3214c465ac
-
Filesize
1KB
MD5fbd8b9ae5216be6b77d947472983cd98
SHA1fc7a6ed58f8fca42f9d874c99582cad21408f5c9
SHA25682d6a0bccc7eff0adb09471a2bbdf563e8667139feb447411d32ab2533ac4001
SHA5122da8ca6486affa00d5f99e2262ab20fd76063659fc538b7241573a22edb1eeb5055302ea303df2765ca6da3d7591abfb02264960b4791895a44ac40955e6a1e2
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD58c0fb7d39e5558d60041aebaee169767
SHA11d336c32e152c45c079d83b2ab223ab1130d84f5
SHA256a4b771a9e42a08cde602510783d57509fd252edefa240e7fc091fe1bb6667ee5
SHA51206abb133f0e473ad2d96f4ed02dc85c0120164d6557f9dacdcb84cef3d0768ad216eb7473867fc8f69562eb080a948758b26297111e33b6107dc86460b8dff41
-
Filesize
8KB
MD5d51e94d07c20cc4ecf968d4f130044a4
SHA14917dda7dfc165b501956721861d63970631c8da
SHA256bed45ce750d705822fd51abde8ab6a93c7aae096d261d78813a97536e6877f98
SHA5124698d08a3f690da6ccb741fbea41e2a3254b53947424f00028b39c51e09159a58c692bf96f4e2236a0e97392b1656be28f30906cc87d799e99efded718f9f511
-
Filesize
8KB
MD5db19336e7b1498cfa1ef1a86a2534f91
SHA1ea1ab8558f0a0f300cb233172278cdabee0b4f50
SHA2563a59a46cc72a8838afb53210c3ca1971929b6ef35d071ec4eebdf233ba6794c5
SHA512b0f61c8eaeae4ca8a127523e4f9d00960751003f87bff3bef267e6965ea7097caf7c48f29ea0f8d2a40398c5e8c29ddf1c4586b6e4a089f9d50d1057451a051e
-
Filesize
8KB
MD53360358b54fa4e8e13e11cbe847f6754
SHA1206751a28630e9f388528284373c47d39a29bc9e
SHA256c4e31dafccfb10f349176d5203016d4a5b22f99a203d3cce06545fc7b6105797
SHA512457abd749371572438525b4a32f549bb88312684931698ecd8359e5b3dafef9d9e86dd11934760c05ed51a72b6cd66fb8169ccab006fb3db468c921c56f4d0e5
-
Filesize
8KB
MD55f45b3d4b9e6a2c1bec75bdc69660f5c
SHA10e27eae6607b17e723499574fd3e99e4d2a40eb0
SHA25619c028f383a76264c593fe997156cc9fc1257ad1b12e26465135decf42fc4ed2
SHA5124f8e969a8e073c1be7976f1ad54898dd9557699061c4faeb564d057d508b66e555219728b1462081d7375b9f17d1cf9d6a23237f529c7a04afd56290509c4d6d
-
Filesize
8KB
MD58b05493c1bf8c8f5ec5c2da5cd900034
SHA12915f2103a016f7decd60087051c1093afb9fd69
SHA256229d9b969f63d7a7c07ac723742827ccedec4283f06730ed2d694b9508bab00b
SHA5121d68a0df090bbf9d44105ff3a58ca477260c91e1339417d4bb3db35190e29a69760b823f19c71f2c41425de0f6c3662edb4ae4710a4de08c8470815089b362d8
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
512B
MD5eb5b644e498eb9b71ebcca4706cc35c8
SHA100737074bed196118f636f7283566117b8fe61ce
SHA256944fff9d8b294cffe326c85fa4339a956cc8f130a465f99daa6aab55a674e7c7
SHA512623ebcb5781abb04a2a8c9c2b1afab86da187642967305e6bb77cea6a707b851e98a007a7d2dc46ac1b51e04eeb658557a10d2e857b7ad976bd1ff7143654052
-
Filesize
8KB
MD5e00a379686dd4d0811966ab57f2994fb
SHA109acdc67da9156b56559271686a7ec6a4e8ff7bf
SHA256d61c5a8f1eccaf52ba07bdd7f4080e9dab5b1dd70ae7be627d2f532d4f9a69e4
SHA5121e4544ebc188e75b0387d5336c8ee40b301226a072f87b6fbfd06299c74274f8b65cc29cf59fd4214ee0286f22227e5f91b747e2021ff038db34f5b2e116ec1e
-
Filesize
8KB
MD54471cb47296adb0070e7b622fa2306e6
SHA1b6451318c9bd83a4ef20f09b7c4bb5dd74560f1a
SHA25656cc232075a737b7fb0eee53b4c2e83938ffd85efc0834bb852414f4bbd95fed
SHA5124a336a13a2ce220a8cd2dbad788f88c34a14f6685bd816007879ee95c3b3814fc4a43e01142e7d29ad6e3a2f769cb7f4e2ec76a2139dc29b5fa84f6a7bcb65b3
-
Filesize
28KB
MD5580894839a93c48361478a72b2f63a03
SHA1f925bd54a922df5b4d46ffe1bd5993ce7f49fe21
SHA2562186f8f01137a2e7e65fec30660406efaad9c503b98981283bf4f1e00ccead58
SHA5123c6b94cff62e91e7742b5785b1a3f52cd6e0ded3320c23951518634763f6305d29e64e2c4308aedb0ec5bc57624f39af855b3592b48e471ae8c7dd55b4b764af
-
Filesize
512B
MD54f279ea5e60c1a322f1fe45ef2c939be
SHA13eb968a905c9294202d6b679867f927edcead25d
SHA2564f032ca723e43ae55f8f606cf470f776e08bf56aa48488bbc127a3f4e581b5fc
SHA512cf8975aa69cc10d445b43e8d497594098b973e3acbb84866dce2ccba7be9867de26b112eb3e1242ac428dbdc2ee5b7fba744198bb5b5518fcc4e5eb18ff514c4
-
Filesize
8KB
MD5d7e52ad26a21a4b6845bf543d79ceac2
SHA1294e0b650bbbb418d129f3c48bc89952bf76994b
SHA256f4a5d173f2b19abc2bf715f0ce3bf2842525e02514df59a37b43dae647b3b3dd
SHA5129cafb54c6aec54c100c98332931dd305adbe25f9d748f005ddfce95c1951b3793ad1f6b0d7e9d39c731d457bda965528e83ee6a0c15a82649a3da48e343b2fe2
-
Filesize
4KB
MD5889e88e931a71539a8f625f065bdc447
SHA17f41faf061b0ef7cd1df3154b33fc3c8bc993f99
SHA25679fcf64abd520d4ee7497e61b5f62adb8e53f1d4cc3d2a8adc190e87c7b5592f
SHA5126e7c3a1f1c62d5c11b739ce6fbecbacb728e4f572cf85d7f3c791c3510ac3140eaf726e4bc131dc8387ecbacb05e9365ce22c01c5d6b9ecc81115ecd0ab0a23f
-
Filesize
8KB
MD5c5cb332ed0950d1cd3628db2257d9c43
SHA1c9a93737a411ebcbfd049b43e23912c9a8031dba
SHA2563e9d1ff7647e7b1d9724990a081db992f6c8baf82b4bb6d1bfa53966501fd1f6
SHA51263f6d4eb65c99488e6d8d9ed5a148e051679fad255a2472a6e829065f69cd3e0d51eb6aa5a68aa9dca7476a0d72fdea9e547399c235746f8ab54fec4c8e9a640
-
Filesize
8KB
MD515a534780013876511a6b55bbed249b8
SHA188654e8be5e31abc1834301e434fdfb284102a7c
SHA256a7e6cc9438ee4f587c4cb06ca9cf98ff3e9ed79ede4449eb4890e7486e0bc579
SHA5121fc238b1cac20c2bf60c388167325e759d9a9d9a0eb0b6866a240a3db9af2d8698af1db2946e6f27e302fb26334386447e9db8eb7fb5dffd9d9a4ff865a0f8b3
-
Filesize
12KB
MD588b298c59eaad00e122bb88a4997b97b
SHA1f9a8f6dd979e4b6d780f0d50cc272cc9c920af4c
SHA256116b6e053554bab53a71051d75863a08ff5b97aa4a08ec2b949ab5490fff4de7
SHA51246bca7511e238db304603b3b328a6e0bf4c6b360186d7a4ab7aba69a8080e49545cf08f8c8678d3c7b52fb72930bf7e9572d1df560e688875565088cfe6bbc53
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD566ee9a2675bf2cfb742976f2a9c19a46
SHA13855cebe57fae57bdc52bac71abe36d73e666186
SHA2563cb7e3b0280448827ffe7e9ffed024165d22623740de6378ea546365b87012b7
SHA512a435b9fbc49b024eea9022e1547d1b6ecbd026e122ff95d3f7836d75ff52a4a06fdb9c70669b0969feef91c9826ce249f1d28d6db249c6f9580e31af97ca05b3
-
Filesize
16KB
MD586634ace7757c50c139643ee2b228908
SHA1e2cd77858ac1ecab220456c91ce25c617bca8aaa
SHA256690166ed31b88d16590b242598d161b0afea26dd147c7f3e34969d5c7738999d
SHA5124d40dc282c31789a3691f05d461069f80d6afd845bca6c00eb10960cc0fe5fe85f703120c095b4643438cc12d8c421c0f2fc6da043428ab8eb98ced8a2c4ae6b
-
Filesize
16KB
MD5c6b0b3c551fc19aff017acabc846e4c3
SHA1cc129856e4dd129db7c83979e0f93bb056ed9165
SHA2560896bed32ea3194b4d256763393bf4cb7ab1cefd9097a2475c71bf637963eb3d
SHA5125658c9a7a7eeadf20dcce8dbada3d882c70a839f9b02b0b462f69febfeb61dcd1ba0300c48fd6170eb96608ca1e83df934bf4cb0d8ac668fe092d03d4efd38da
-
Filesize
16KB
MD59ea7320d16456f4b92ef612efd3f7e01
SHA1ff8d4ffde7ffa5c22b567fb80a50a8f81eb7be70
SHA2564ed3d06111e62891739782e05899f67e0c0c0b3fdd452b9fc6a11854360aacb7
SHA512ef92fc3cb5c821280084e29df8d1a0adf3688483bfc9d13134b519e686eac35bb54fea3a64256f27a6a71a427eb2215e378ec348cdbce05b6ef75f2791115a95
-
Filesize
16KB
MD50f181047bd390948771371bfd3c422c8
SHA1cf70c26648358c6fa73c5f2d6de5304226787064
SHA256ca7d667524102949585e985da9ccdf546342345b172f539a9575d68d1678cbc6
SHA512b88e54775d8b1ac4a03fc4d7d15b44f7be83515598b5e64109d9184262ee418e885294bdb426fb210951e1e2be8966afe05a77cb907f7a488bacca821088a205
-
Filesize
512B
MD5a15139ea3b67c1b54a8a61a5f8a05aa6
SHA15d302bc8397d168fe92189a29a8a9db291122c87
SHA2567d214e520eb835a44a1eca590c46b453fc8f65fbbcc909d5bdc140d3283fdec1
SHA5121ebef22dec8e21fafbd75fbc3f4615a7ce417935c25d95bd9bc77a075397a52362e630fe13afeeddb723db7890d8b361b41e5e567d5b858cd1e75fe44941e9ce
-
Filesize
8KB
MD52c13065d931d9fd47428876cf6a64975
SHA1c3f0af65107480c7161338fb0717cfb19d9736a1
SHA256f04c862639949adf40b44b963ff07c48844212ca03d9ae171c07c0daa5ec32e6
SHA512cef31f9f650d2a3a57ef87a594a219b00f928ffd748bb809bd5340cf9e1a7c069b6cd89ba98a705203fa7ce21503579820334ce65ec53cf331dcdf70c8a41ea8
-
Filesize
4KB
MD5ab9c9881437b08a7da1c2c242af9429f
SHA19b9107d581382c8f3a289ac9a55900eb38a90fd8
SHA256e01b776eecb60b5d96bc57dd1163517f7fc0afeb7aeabba2858c1e54fa84eeb7
SHA512352d7d27c44a374703f4f84329f121798f6f7fad99b685a9280ca1ac3b3e05c0af0c79777678d57f2ac8375400009a3793a8e6a17ae0651a0f187a82cfd4b58c
-
Filesize
8KB
MD564d3ac9df029e3d24ebab58b0df275b2
SHA1dc28c92274e737bdd28d509c2117f9903f029fc0
SHA25662a3a847c39a667e8ad4237450e5f5672db6f46aa078a91be20e86e4f25b7e95
SHA512695c81ec34b81e5df0e41d4d949ba68a2250df67c2003b3832b5a32a152ec548aa7c2768eff43bba9b2ed877e1c0c5b8fef21f450b2722327ec0042f64f2b7ca
-
Filesize
8KB
MD5dac56e25bcfdaad4b621324edde64bed
SHA1e934b3eb056143c6c3d1fe517f9dd1d113ce33e8
SHA25691f598b4419e16a18a57dfb8ad6d88369898c41913d7d1c0b47f63ef6251205d
SHA512b1252bfeed592185d6e5dec73cac6dcd9e5803de419dab72d19cd2363a6ba69d2074df40690882050837fd0af22533d2b76cc19e6e72faa126de819fded8cbf4
-
Filesize
8KB
MD5e0c07d2585800b333a4a12bb8fd0fa4d
SHA1cee5ec1ed3103bb0a7d2476282b5c96c99f6e802
SHA25640b3163a28e184752402d0e133ca8eba15278b184a06b84cc9e2d789c1c41ff3
SHA51256bb9b30d8c10b7eac5d244255392a0f0e496b10df0cf25efee741ac3f7689e1ae664025007a0da1407b5d40b1e62a9b3b0443542a345319d38d70963f8509f3
-
Filesize
710B
MD54869acac5f30da4d111abd2635c15cc5
SHA1bf10af59110abfee50a7c3388a3f04ca4c78839a
SHA256527ad242895f32711572d317a083981d93fe0265ffa5abd46f3a91e705345084
SHA5124060a89e2685d22a57895a4d2450267de997c7054dee76d805e491981f2f7df07ae42b811bfcda151b43e2aef7903bbdc0371ae9d71eee6cb46fbe1b50981192
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6642C82500C0000112F64AC167DAB119.temp
Filesize444B
MD56ca43083dc8f1a06bcd847278e1ddfcb
SHA138c432e186d8956472bfac1e4a1afeadc6a29556
SHA256715cec63657e6a7aeffd6ec3a10e21c40f4403527b207b2172fe1a65deae77c6
SHA512cb54f3aa22e0348e109423589795c3633b59c60cf71f395e76df37b76e99bc69cd03d6c9b7df4346fcaf24e777437c3a9f1099630c8805d23a8b2f5ecf83ff4a
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6642C82500C0000112F64AC167DAB119.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/6642C82500C0000112F64AC167DAB119/report
Filesize733B
MD541171a781897cd6b4848932df6d754cf
SHA156f061072e6cdd93378524d3a5dad5026b73246b
SHA25654113405db7703024fd3c9a7206519d73f3cbbd68111101cdaabef6e3f7cd48c
SHA5125e490e0beb4ce1098138046212b487da1c9a92cc6f425236acea21a57ef3a12bc4630bfe8e97efdc38863be54447eb4f58f8cd4bd1181e032972129951e077c1
-
Filesize
565B
MD5c98cb521635d069c3f1852bd7820d8d5
SHA14cc3b6c9eb52e08fc680836bfe4ebafc3e719408
SHA2562566a0e1f54fb8e7e8c9b81e0ae4a52405252d06915ed9bf88678981b781c881
SHA512db3f01ec1778d36bb28a393b5804d6466e999108171297b2357f4e287d7a6b97474322aac19197c13822601ae4d1eb67f7399909aa46fed7c33c40d26d4c534f
-
Filesize
90B
MD531c966fc05e9ef48afea4b9f15821d82
SHA1d05d082d014ccaa8fcb46f7a667eed3135b4b102
SHA256c06f816627bf20b743d4fed2d61fa606c3a56763f821bec303ba15d7e672fec9
SHA512ee2c12186af8388d70100354f1916b190caefdc85923963098c127c2be29d3fa65738349c336317c86084ab9d4d9e1398d285cfdbc7ee8d5cffedee82848223b
-
Filesize
36B
MD5608f1af4cadc62cecabdff66499bf348
SHA1cc56ce32e134fdbc9ad3f60667ee448bf8403d0e
SHA256936d649ac201e30d7796a6d01c8ca6e9251552357f6542e96bb1536509ba82a3
SHA512673d7595021e94d072399202e646ac97a9dd8de5c20e628b9cc89a77b5c1084f3d7ec8ef23c4abf179466c7e95bbb9e13417698529fa1a9ddd4048f329c32a12
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5c3adb1c46ab191ad5e5d2cd3a74347ac
SHA1a79af5c0dd3f1622bbaa680377c3738122ea82d2
SHA2565dfe33f622a0f343ebf595edf395a8a676f867746ef8ad64d4517a32b5d2af26
SHA5121855a67d80d4eda29fb356efe7f3cae13898ada04bb942402d50db41f8f2511b7eb41a86b395e6e8f5580f3737336b4ed7fefcf1929e104de9e48bfff18960e3
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5be95ce614ffb68809b030afda03589f5
SHA113e32c45b59ba7872efa34877679ddf9bcca88ad
SHA25602a24589bf859f22807d9c1d347ede90fbccefd1fd9cc2385a4db9bcc6389498
SHA512c9ecab09b157eafa5dc25945175c107372178f3a3e82261cad984770dd924c0552feb1ef70b0e17e029ffa669c10c9d7ac3cc8e1541594ff15bd2953ce21cbd3
-
Filesize
108KB
MD56f3d1533778a20dc2cdc1acd521ecb43
SHA11ddc563c635970170cf7ff1d88b50d83449e1e31
SHA256a51f7dfff8f26b2fe14ef0e9c094c6350fe4da5275344303c40f331db43a6595
SHA5122c3e9ec4c2bc9b5f0822dab9382e0370c587b6eca2533e91a22036af3bbb8126c04069215b1656b52438837d6c728dc53684368da3482f38374151e6a112ddff