Analysis
-
max time kernel
48s -
max time network
139s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
15/05/2024, 02:09
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5baba15dcaa3bf781d0ae7db3309e2eb5
SHA1e1a4b3288bb3c5afd52abc6fef11d1b7de215d8c
SHA256e1b5c03ba48ddb599d06bc963c8b70a506d90e726976ed9093ac1698f5ea83d5
SHA512d3f49cfa3a7bdcbcae2335a4ad3e18208ca2d13dccf043da7c410447f06f791476e6039a77e46895c8cc880a5fb3d33b81c6f447dc2aa9bea7f80a4440709778
-
Filesize
1KB
MD52f066428e103e7d561891528963f54b7
SHA1aafa8f00e3b5e76633289ef7cfd37611026d3602
SHA2561c6aa74829e3ea1f9e59dd8408570a11b4bb16361172c1426a9abb232363572d
SHA512132397d73f262a6cbd4a6a492dd609d8af692b88276011be72f1811066ce2f43c93602fb15c939a3ee888d8727f5d2f03402d4ad31663fed9a1f7442db2e8a87
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD56722dff784b7747cfbfc08fa4e9eecde
SHA1826580b1254105bd29060f388de42321f0f59d5d
SHA2564df5e209f1f0036ebf7015a26f7e99d9bcc58cf86abf6a3d6e2702fff538b588
SHA512fd3e430e6b12d4773345bc5e0e0133942dfbded183c71c39a2f3b47611c9b0b0d8526a581909ff54df0ad5a22ea057b957392f264eb3a79ccae1394d602849f7
-
Filesize
8KB
MD5f5f93c8cd0ef3375e186a892ce1878c5
SHA19f64a9fd7af3251c2e30b52dc0c5f322cbfa0751
SHA2567ff04de75f37918b4751b07d2cb748fd1612257ed96f76fd0bd06d94831c03a5
SHA512cc3727cadd77b708428aa8eba11b50b7f8a399ca4cfc73df57c490e64d9b8f808a8c6fbf11618e18a4f414a4bd4620dae0082a00ae7a9d63cc649180d321b7ba
-
Filesize
8KB
MD5ad971726a4d8f20cf4fa3fb74a05c73c
SHA19627968425cdfc18618250fa184ea97e911da1e0
SHA25660f65f79e5eac320e2f55382f67872eafc228340e7902c403c623b4b5a4f1fb4
SHA512066d8ab53f4f4828c6871610ee3105d3eb80aa930f9d906565c4cf5285d8dcfd8aa9abea5885dfbe435969d99d0bbdb52fb70631c72fae4f8506469b89d622e9
-
Filesize
8KB
MD5d8aa8833135d41c4fc83f76877acf2ef
SHA14799ed187a74b13d89471faf73027eb34f518c4d
SHA25673ad492315409cd4c553995c5a5def9c1e73ec33886bf2b51e2c39d3490fb74d
SHA512982f6db2843c6671bfaada32b786a40a24d6a800035ed04227f37236bc87a3e20370f1a34e2e1bd4a3636c4760180ce810a8fc377e9cd87aeb43f3b0ff2e2416
-
Filesize
8KB
MD509bf479bd8ead722eea6411d293d9693
SHA1ad8094bb05b45e8f20ddab5dbb134e9b0472ab75
SHA256a4f02990dbe844899f14d08bd0876fe3c8e697b20c696518463644ccc21f9189
SHA512d492cc08fffe9cb1b2a8d82211dc80bac7e27a7dbd3aa5f7939c55af603bdad16dd888603c7a2be1c094e3bcee9b0544ad04797848e475d21011b0ed9e2ecdfb
-
Filesize
8KB
MD55da2733188a188bc55fda9d594311599
SHA1b46c8c8b2c5aa2b37fe2361872fe62a297c0f44b
SHA25673b4f1352558ef3b3aa200dffbfea352209128d962975f6df4f248c65657c4b7
SHA5121676a7c59f48674708679041b0e1c293fdbd6b5725293950012ad1222798fc4dde611a656d5400c25e48845ede411b55281ee268de14e71fb9e208ae4bbb2203
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
512B
MD50336c17ed8b5ee9d47c141aa5f7dbebd
SHA14a5c1cd275c00cfc9859117d55b269de7acd6c8c
SHA25631d21af5fd62a0a12a93a9de1a523857ba1e177c12439306d4802707d11d3e8d
SHA512c96ffa742ab4199660350a99d3abccbdce7be22cfc5829e662fe5719a12362580ed127fd96488063028724f7ae2dd7325d9075029ed0019e2392c2e0668e6e62
-
Filesize
8KB
MD58b35adc82b60a782ec98c79f3bdbdcb5
SHA18b24b221ef4feeedeb95040c6c83306381ee134f
SHA256a14816d1cc6b9726fe3ff697c6bfb59469aa0157b3102ab85008f9a9c8f03cad
SHA5121f4a605845ff873c773eb0ba67c1a52f905fd14fc1a956142cbe44aac53f1873ae3711dc277a0f3dea2d83452d878faffc3e5bd43d1e7caafb28e7d0ab3e7ea1
-
Filesize
8KB
MD5cd91f8b859f35218996f70fa91337c56
SHA15a0fe55ffea61298d399d96c7675787cf0496564
SHA256ba7521119d486d65b2db1e23d3b8228369fcdd84bd15d46caba74328756fc217
SHA512dbf580a6fb46b661f995ff1fdefab26a07524f864961247de5d80fbc83f22eec673b45f7839f9771c4c943a110be57853b97e22289938f1652ec8fab1a578c3c
-
Filesize
28KB
MD5915130a49a096ee419d849a70d0d9c43
SHA1eb196d17a3531a2556d3030429f480f6b8608cc1
SHA256cad9fdbb250a5b421c29e1c43af2ae6b8a90ea00c99e742f3db5d164dbdd0185
SHA512fc123af8ecce1d3e567a5a046f48934ecd0443539f1615e5e88d2aaa13481786efae517634450973b9c4a637b913ebe114e324c7caf2f5e912c48c330a238516
-
Filesize
512B
MD532c6ebc20df9f61414d1d67f44fc4273
SHA1b169dff952e01453f6f3556305a03418faa387a2
SHA256aed8c03b2cb4abb7f1a846626007e18bd4ce7f8e52f2c6e7ef7dc7d25b88e400
SHA5123e42ead7de7e13f4d27a9b42c5688ee0c399f80f87c3175acc14cf5e51bb6fbc0260dcf52856fe549a27799514bb636763c84fea52a40eddf59d9068431ac796
-
Filesize
8KB
MD5b5597da87d8f991fdb3d01024dcba5d4
SHA103cb552703509d181ef2e15f5e24984b280b962d
SHA2562ff4353fcef722352b852cda62590a274c2e9da339d5734b3454d59f2a620bfa
SHA5121a75ac0541c49e28c560f9005f86dd5f29a64c6a95c7dc5afbbc2d20f52076726bae799d4206f5f2804e49561f59eacca4196375f9148c05248833ea84d04b75
-
Filesize
4KB
MD587e3f4b601704762de1a25e79af4e9ba
SHA14fb63fa84e9f32428ae5f4044c2253dddd189b0f
SHA2566ff15ec5e4b3d9539f1b847a3b0a3fdd976e962fadf4e0cc119362ed677e4d6a
SHA512026f2976c485eefc4aef5d4e85a22437967c032c0aae8bda8444f5b5e884cea0d04f62955c5306449ec8582e2850e5aa1d7b559191531a398ca39a71dea5b079
-
Filesize
8KB
MD587a4aa9ccaccbb5cd97c088e636d354e
SHA1d757ab85dc54806accba7e737b4445e8c602819b
SHA25686a08437873801cf1a52e318b685b6c435efa42dbd2af845e8f73f763bf43a6c
SHA512e04704ce4e652eca4319565537d08b07bac601579e01c140cf7ffc1ba65c96d36b0e41ba152fcba626503a5f6c6b7089820f38033e9aff943409f7fad02e390a
-
Filesize
8KB
MD599088abbdf040b3886522ef12dd5129f
SHA119eb7645d9ab0722f1064ee4a67fe2c0d27ab5b9
SHA256fc8b2e5025e39800179b6a7870760b2bff295931ad5385c15e75690751fd994a
SHA512fa268dfad2f66fac9e1653a85f5f4ee5a4b16f467cb927210f16e32a00658b767a280bff33c3c6f0fc4413285cab348e5955bec416e48e73f3e4ba5c03e24cdf
-
Filesize
12KB
MD56f97206cdf6682b3249738c3bf359a3b
SHA16be311653744558acff72c779a4a1f9b8287d560
SHA2567b009471261530eab6a22f6172c2f83578e5cb0b23609180b34def08cf734653
SHA512abf695e5a37f9aa45f39f9d6659a61ef06cf112ebbb6a1c498bc2fe878e3123ebad52286b0ae121f5688a47c0d00201ebad0110598572cbd56efa5ccfbde47b5
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD53bda62883d8f3dd3ad31ded6c394bfec
SHA106a31ea559a08d397756ec82f2af576deb3a1833
SHA25664da3e49f0407156a05a139ba6913775fb208990554140894d12a325571fca6e
SHA512eef6c9f437c948787c0ddb84ed49fdf2c988dba99ce4edff19d0bdfc7769666ccb0784b8bbffad4ed5a2184d85656ad02725380325cf14720b81445f086c3a8a
-
Filesize
16KB
MD503dc712ed4cae7520dca1a1e06846614
SHA1ee4d9f7c3712a4a5f109d2c7c0db603c3dfc220a
SHA256b77a4bb9669445e61c725518c65d5dfc6484218f5b33b8adbe4ddc3b7c68bb69
SHA512a521e566b624a2365776ec1f5f410149a930eeef3ee289f176a468c4d191e1156b6791f07155804b52e239dad76455fe2d523d788a3d7818601581cf0679b079
-
Filesize
16KB
MD59354971034265a5e9d264b6ab0aab8a3
SHA1950cf8c6efc1fbedbd88ab25c2da4433d05f16a9
SHA256b659e57079b964bdc21458bc0e342533a4399b1f7fedd0b54d4bc809bac027f7
SHA51273775745bf28461a7dce029f412cdf7b20005bcbe93199f9f73c5e50a0d9e9a89b76d27f0e2afe162de36b109d863f66ad7cb9b728b8460f2ae3cbbd46b7e5b9
-
Filesize
16KB
MD5031b0acc0a0ce80ddf61ae87fd724095
SHA13921cb848f3acdbf6aa44345769b2b58279beb97
SHA25613596a32848ea5de2de3665879a9d5102a00a51176d8944de0f9bd767931895a
SHA51213247b56d4f5cf40671f637ed41ff4f704dada603910285dbf2e45226b0f6c442a97ec88728d2a6e36a7d38a2174ad5f1f015d653c5c316f355689657315108f
-
Filesize
16KB
MD50f181047bd390948771371bfd3c422c8
SHA1cf70c26648358c6fa73c5f2d6de5304226787064
SHA256ca7d667524102949585e985da9ccdf546342345b172f539a9575d68d1678cbc6
SHA512b88e54775d8b1ac4a03fc4d7d15b44f7be83515598b5e64109d9184262ee418e885294bdb426fb210951e1e2be8966afe05a77cb907f7a488bacca821088a205
-
Filesize
512B
MD5a41dc2418f545a41ae96bab324a7fe3c
SHA187bf3dca7ada5f2ba37dbc991e678668a551af1d
SHA256035d3183551934367e5a7bbeb9de414f754facde35c0be338fec3426ad211ae6
SHA512ddfcfd6409045ad064b4486a9a3243ed0891e6ea7bc74ff3d168a0bae939f2d3b1ce12ce76c706585ccbddea7e69cd6600ca42e181a05225677e488a3ab667aa
-
Filesize
8KB
MD55657a4bfba82d1db14dd318a0519d1db
SHA1b8de049741bd9c562f542014e6b72be6649bf72a
SHA2568825669d40399bae72c9b4b3ee9c145fc4ab6033564e5ad2b2930cc9f07f4531
SHA51250761c01635fdbbc8fd27dd47ce75f3876fb6d6453d79b49fb675ba82683a956a8587543a7957d941c477ef8c324770a8342d997b415e5804e906f1347abce9e
-
Filesize
4KB
MD5e863f019ba2d64250ff2f52e101e5435
SHA18b78992ebac2847c354293b40d0f9afc4c64ffab
SHA256616a71d8b324779c7c642e5f77c28845688bd3679c1271270cf80dc2f9cc40c1
SHA512f55d05f882d469e747e581a279dd790bb7398c80ba27c92e4021effff2391b3f5e666258be41904c2f76b4324664337bf3ca6d7c7f1d4dee602d8a065eb1a910
-
Filesize
8KB
MD58736b3ddbc1f80b01c8bf85b0530c927
SHA16e9619f800504c238c43d736c73ff34fbddf37ab
SHA2565f3f88c997b294ee22c1b06c3361b0cd62aa8e930a0a6a7f11a82c2b84968b0f
SHA51276a741e4558399d5916748d0a0134dc1311ba5c73da6f54604fe9a05f424428423eb3a53bfcaef44a4c5c65556b740b8275996e813583137c14e6341bff831da
-
Filesize
8KB
MD5185f2051947969df82858095b275ce23
SHA1d8f2aa2f1c3333875b279ffd035ac8afe1875d24
SHA2563577b0d60f144dae62b3b537ab905c6c2855fc07cbabd80e2d65cde5d584b5af
SHA512c13e7d57eb35e6679808d33957faf37b0c17c4d4b23f26957e7fb40d1e00603360b479cf0b71587a52b5db91fad2d320b5b7d4a9b4cfdcbc1b8b3e7da40eaa35
-
Filesize
8KB
MD5149be736ea0389a1d7a5733418cd412d
SHA1e8cf1ab000a66b5eff40f56d24cd7fe647b62e0b
SHA25627286b09b842326de91ef7c13b9b49438d46e9c54088c31aafba6650dd43d407
SHA512324a082080985a14e3d405232137a1b592d1f70ff320632e4253e4e6c2f83a717be24c21f5fd07b20cd91576d6e500f19d48dce1b4d3f7bec9ec18e7294defd8
-
Filesize
710B
MD5569b55fce953ce51c5df8fedcaaa4842
SHA13cb9c95f6a1d217918d17def0795416c4e19a7ad
SHA256c2b6a70f18129e7527291dd74d043e6309ad2da4bc16c371e330f0ab65a078e2
SHA512bf020c95a5a5e32ed006ad73d6d27218cc8c9d539187521583e741f8cbbdfaeb853687ac3032170752f0658d9e74b05e16a2c336d8503502662848b9aca0e628
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6644196000D4000111A2BD5F2E74EB9C.temp
Filesize437B
MD5c8385e61f912ac49b683874740da7e96
SHA1035e825a79359d35b6abc83d8ad4df2932ed115e
SHA2567877dd8d0dc30397d5b49b0f45269d11eb953ff2e229aa5395348812019bb2f2
SHA51220cd2328ae45fd0dc2cc5f29e8a154966c7ed1113a1cbd0d88a196e03b76eef514ee10c3977c549b5148062d09cf399243129fc60968ce7a81dbe2dee6dc4c04
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6644196000D4000111A2BD5F2E74EB9C.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/6644196000D4000111A2BD5F2E74EB9C/report
Filesize733B
MD5706f622942435fea16100a06861cd497
SHA12babbf171dcee33c1f53ab66fe8c2efbfcaf818a
SHA256f8b7f7d8343e313ebf9bfc7227aedf63f01a224ad683749a6d5299c36f57d4c8
SHA512ccdfcd630893957dfe866869832693b4133d66c4d73dff41076144ca6ad0bd44334b8fff72edc4abc74c3209dd05869e8937b8db226073d2ed7a1a12ac4b4d9b
-
Filesize
562B
MD57fb91dbf7e21869aa00ef4d17222d82f
SHA10ea68b1e1f7ae9ff9072d39dda5e4f633ae8af9e
SHA2569fad945af5503810da94c1fed14044282cfd3f1959ed4b7a0045af3928681f49
SHA512cda4d9abc3cc99be610541ed87be8308c16591b5449f1449ebf1dc58799206afc9d0ef177dbe80f36a36cb2e45a64cf0a978c15f0cf76bbf63730c636c727158
-
Filesize
90B
MD5d21ffb95accef2de0f0675881fdd03c2
SHA1d2acfedfc5a80bbe5de6961d305c37ee10ac7358
SHA256768a70ed716e1bf0dea3b744e91afe1c43c8b4aef78b91afd149e295f30c9b8d
SHA512415236b13a2203689f90770f4ad355a7d022b5fbe47917e66c944c0ed974cd8b372aaa4a05c2a4cb6624617aa5df1636cf903b22acb42c12700935c49b802b7f
-
Filesize
36B
MD5e8e826acf30dd2ccdf6c80c29a232a2c
SHA1f4266f52daef84b39048a3cff5bb5e4b958dc013
SHA256182041455e5eb0bae915e200ffe521d9de9455e7e5b3badb7ec1c9329c1afcde
SHA512dcf7e3f3012161896382933eb46f9fcec8d85d686ad767468bdfdcf14f4b06fb82742a81199e32fd927d66897968ad80134a65e66c47d675456809fef0d96da1
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD569c60e1cfdd48d09f4aa138d0fe1caaf
SHA143a3fad4b36547780856ac00f37369250a56a535
SHA2565f7a11b9a0bc3cf3c05f7cac11cf4eda4810b61d9155c508befb0a3f8a0e5ef3
SHA512b72777e9afad0347e73818bd25b732438c245b985198765abe9de2daaff6c2ecf86fb41917c3dbb2e12ed6cc1dc493cae18dd61bd7e7467438dd14823f94f7c6
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5fd4778f6196630a91b75a4341ce21778
SHA136debb38b0143ade4afc5e8eafe75cd1a2701ca5
SHA256d6e3116dabae5bb4b4ff1cf656c5d7ccacda18f31062b764108fc3dab55fbab0
SHA5125adede4d7f34f92ab1788d881290045e2baf6767ee47a7e6bdb093ba183b46265be5f0db7f6a3ba61786ad597510f865672363625b8895a21c2c6b2bb85e5308
-
Filesize
108KB
MD5c54bee6c0fc2f456d866a8e41afa6562
SHA1fdb8e4176903dae17d2927bf7b7f64cc257097fc
SHA256f176dfa0c9ab2ab02021d24be59842c953980476e2ad599ab1cea78b01112610
SHA512667bf0e0b089e4f1bae4228d4f0fd8a8856454c8f87fe3d25894ab2bbd8a2509952771c9013d5f08d0c712b6db1c224b9c87d1dcb587e26ae47286df158eb4f0