Analysis
-
max time kernel
47s -
max time network
133s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
16/05/2024, 01:59
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/app/Superuser.apk app.EasyLogger /system/xbin/su app.EasyLogger -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5512e9adbbde25d07090a38f27adb4d60
SHA1634aa44f80529b2a9ed436d9310909b157827161
SHA256667315308ffe559a78b482add9eb9f5e937e90cc9fa8a614db253bfcdbea7223
SHA512e5c945801e0af2000a6df96313e690fe910e854b108aa5b17fc2c9d7dd05d8d342a6c878e407a34895030944dc8d2ffbcd9bb7a5c6a3a20126028377e56fc52c
-
Filesize
1KB
MD55aec201036e2654d6a5ba26fd62363d9
SHA172f3a722b04f6db70b54dd0e8ffafec9517c5a83
SHA2561c4ab4c7daaea517d2c01faf33b015ea2789a720f1e46da1a823393593672ceb
SHA5124331765b791742aec7936f8d0353c04fa7b4326e7f2e080e1789e802236ca11b66b4180ca201d150f212840cb841bd13cd14023e9249a57645f641470cc403d7
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD5e336dc497826df5ee6ce958eb62ed781
SHA1f4f0bc55f6f0413efd99dd2320b206b242170c28
SHA25621eb3111454b97c9a976e2d1ef98990ee7761a58aab3f688c246799817a56890
SHA5123d6b138f5b849b97d7860da42d43d2aaaa21374164f11f1054060451ebd3c337db1e313dc45285aa5f862f2f81f77e927c6a94b59eb95137ebfbafdb67a23d72
-
Filesize
8KB
MD5f52efa2fe4b7401142055f47565dddc1
SHA1bdeea25bfda9feaef98a76c23c98755fbb0abd70
SHA25697c090ee4a4dd96886ad92bd6484e7823a6caa7dc85584b1760b696cb05e497d
SHA512e7ca6eafeeaf58275f7e63f857da69326044ec5a78082df04d7eb59c3b3a0b9d0eb3020e3f601084b6979669f0a8871c471b4f1a6fdfad54a7c6d04664c4fca3
-
Filesize
8KB
MD50a51821d00314996e90b56f6e31a96b0
SHA1f924aa85aafc842da4dfe65a8a624e471ee81caa
SHA256c750df0064ec9aa1b4280bf673d4ca9f0222b2bd48f1f816e4b384a067ab8bd2
SHA512083e07539ef8c892ca0771499af4fdef5a371e31b9b9d0eb5d7ad2e4297b1380ce23019ed05057ead58080ef21aad41cfd1ea547b053f720f20698a6aad38e0a
-
Filesize
8KB
MD5693af0288d44d875e6297684a3e825b1
SHA183f4a3b1c1b8d9969c8bf039bdfe021ad53a050d
SHA256cf495eb946b951e396652f86d161b8fc22b54f8cedb21e5ab17bf75f88604b34
SHA5123bfc3ab67f97d3b0fb671e0eb86e8769213ea8863c5fd6de2cba8ec9fde5785ebdc900ec39330e11be5789a40e217363cc9d31aa7175a3268e02e5cabf9557a0
-
Filesize
8KB
MD5a860d34eb7bbea3adef38dd7a75070f4
SHA19f34038201d202360f51a6e12557701aa7ff7bf8
SHA25691e76e8b68e40556211df0fb6f9476408950ed37eddbddd6f837c253fcbba0fe
SHA512cec5585b7b141cf6c0a99c5e33ee96d40dac47c57072f653d65151a99c33b122a1a075711b551c51088b33c3d2b6782d637d7aaf1fcf962057fbef45648005ac
-
Filesize
8KB
MD547bf22ac0729141a907ca6353883edad
SHA18882262df2435ff8a4b4acf812f0fdd2e522433a
SHA256f02ab903a1a9ca7760c1625bf10483ea07a85fdc3b6ade1006fd70ffab198db0
SHA51291930627224a694e9afd45e05fd4ce61bcd0e73e17e4bbc182b19af73ef46c189bffffee4020e5bf2146aeccf1f173851dc7fb86d3ec5a8b4326def46220ae7d
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
512B
MD52a2b09f437961d34ece93d4f16b6b89b
SHA1d3180e16a9d3a825866af73588c257333b9e8c33
SHA256a5489c383f58edc17fc74f8f3efd61359866e97899d8e5512a186babdea23459
SHA512a2e4cee0fecdd69a495d9f27253ab8c32881d26eaf4201923d601878fc24bff47f2ed4a975a47a2400266a8b493f2271c03af645fb3318646971f8f6f88278d2
-
Filesize
8KB
MD591734433e355cdf404068b2410b759f0
SHA174f7451e01b136593e1cda36d452a0b018d09d71
SHA2565e88af6a9055349cdccde3b211c64bbacba22e0173e9d9f6fd032377d24f725f
SHA512f39c25729261f011ac62a5fb01ff46f5311fc96e01f5668cdac18bcec7d70915aa5277a6ba6439663941ebde4891b6084faf47f87d54ceb32e5b674f0ba40306
-
Filesize
8KB
MD5b253677a81671cd84c2e133af5988783
SHA1d4f13cfc135b60c3a1771baab0e5925f9c48c925
SHA25604f762326dba709828218290c86a222b10dc8e6d4d931f2cf8b5105ea24b0eeb
SHA51201143971b5e69b0aa7fa3f66aaa04fcbe7e392399ccdca728dd41c3c2fa410ab216fa4c01a134d5e6c7f5369994a19f8640ef7542275b7dfc1d724995d727763
-
Filesize
28KB
MD5d78635025797e49f9dac57efa261beab
SHA179940246dcacbb65e5f35be4824b5b98152aea22
SHA256b422577193fcb8e5cc8a191ba1913d7417eca4b7e272f4dfa3adccd06ef7a197
SHA512558c46be872d7fc0a835dbfdbbcef0bf6d974fd46b7e58bf90acc202349b703782f5988943a5515aae79216c3f740cbb757c99cb98a97fad2e396e69c7d8bc04
-
Filesize
512B
MD50c3d5dfefe6e39e916e78355d2ae8a25
SHA1c8d997acd5ca77b8b7e313345186fcf4377895f8
SHA256ebc578e7488a5b8bbfebef1c3b7608911e2d0e07f2790c2db5a5e55fb94ae5c0
SHA512ab5c682fbaa3ce146d0a53f2638ae3675aacbba6e50a79a44a5e1b80edfe2fcfdab394797bbbe0104d2bef7c14439c73d449da8fd6e7dadd595bd78f9b423660
-
Filesize
8KB
MD517eafe24bdbef2b6b295bd272759a68e
SHA146ea0d0880c8616b162ac2c7d188e7a102fc36f9
SHA2564a5b88148d3ab4251799502538674a151caf917ad6f57602597d04d4e5c625e4
SHA512463bf4490f0cb7c0ff32ef172a0ced9f455948c55a310a37a042672ad172099e04a93664ac42b60b5f276aa77eb01734d073c0d3802bc53ece3b0017bc4c1230
-
Filesize
4KB
MD5baf966d525ca4052cc30ce31539502a7
SHA16028af721c6615f0ba94f49801163b0be1058cc2
SHA25602f498fd89ef445f0abe9ae4a0e61fb5de25487b17f15570d2b0e88907db05a0
SHA512619d2245906a5c12585e03948cb6601121ff43b8ab05f99cfc59df6a5900f63fc0daa1bb621aeba57a49aca1ad5fc9acd4ac2f179aa141ce73b260ae4593b61d
-
Filesize
8KB
MD522bde2c33160eab2b116e74bf81cbb5f
SHA121055f04d490b523bc53ac11af23b1b190bae9e5
SHA2568a19c666d62efa3204e6628d62a88e5d2942e3c5f622357ffaf3b2b1a8aa38de
SHA512058fd8be44c651cca0188a3df68656159b1f1bb0b9a9f7cfea969379e8d443d7a44484b8542c69870098d71ccb3022ad00e38c9c41dd0e3495230c50b7f303e7
-
Filesize
8KB
MD539ff10998935391e9d41e0f67578054f
SHA19319e932e47899c900ca50a069bc436fb3208324
SHA2563b78254fc48775d795b80e42d07f867bb3764e201247cfa8b5a0763275d07ca8
SHA512b2ac7fa1be540ee274b5d1411c166d2225d85f2ad12852dbb7c6fcc1384588c4d60305fa8dbe69913e4313fd4e5d345b3b826876ca7d2f6c3ec5e5584c867b26
-
Filesize
12KB
MD585915d66d71f9035c07cb61f6dd60878
SHA1504938e2a3c8b9933cfccaa1e6377425010cea3e
SHA256178f538bcec2307ab9c4e6f17e28aba49a4b73fee9840fbce29d9a9008a178ba
SHA51204a624ed00568b1c71a7e6c2b662ac39e2805d350189dfbc546dab07dc2961477e8cff30d260f6b611b63b595bf925802b4d787aca11a7ffaf8c6dee31bdebf9
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD513ad80c50a549d4165c50cab63508bbb
SHA1722b31c6b6ef4a5e3b33c1ea5e0b83de6fecf0cd
SHA25681cba9095b373c8a9669a550dd8c93a05967d61a1624c9f2f2a742cc1a2a451b
SHA512c35410827b0bb05cab544c07802d8edafec3a26ed8de98db1b415cfa0897064a84eb86383e33f1dac6e24eaa60c1ca85402fe644cdaecd615657e458ea91d474
-
Filesize
16KB
MD5410d265b53a4aa913f592a5162e50121
SHA1ea354f6bee78232692f48cc87722e3ae822c3749
SHA256b33f0555d551d1a7659764981132a954679c7ba4205a15f7b60c0ba3d5c6ad27
SHA512fa3eed20d255f56c3cb0d89905cf8f142cc3c1d2dd599a683c46559b12d362ff82b131335d7fdfb47356c44edd2c6a82d35ce4b357f7de341cccd1ead5531b87
-
Filesize
16KB
MD587eb031029e83cd5958bed34c56a1a57
SHA13cfc702fb6730e6a74443e9b91a67c9664d9236b
SHA256487f17b728e969f7590e752d089b1a93b210709f048634c86aedb2531ddf5b1d
SHA5122678532c5d1fd8a03b5b817edae0f050c409ecf8eab47719510e0bcaaaa6b4bcf1da3a7aa2c7601d6cb4e91d1f7baa67454065a565f36d28bd966101a85f9f04
-
Filesize
16KB
MD59014d9645fc8b7868095589d6ccd7c3a
SHA1597ef88352fbcf809a57b583e3cccf49dceb5f9d
SHA25637b19954b174fd80234355d59f2ebadaf41e2c8c18e10fcd5ccf743575fdf745
SHA51232d874ce7299bacaf2ec18dfc5577ebf672ce2ed2fe71138f1b6fc98ab3db595964d3e58d6202b1980a17c0b06cdc1e85a2be36d4cda618bcaf6ca11d3925be6
-
Filesize
16KB
MD5a0325ff5668f4474177bf7958d70a597
SHA1f9471cda55083be6cbe3f62cfb230b2b317cc4de
SHA25671baa9bc34c3832c1b0a51c8aa3bf03424c6696ae37147861da52fcceaa0f688
SHA512c8365efeead343b31fbb858caae4f8b1b6c9fcfd04dadc3bf4e39a600eda4fc4540a727a023cd06bfc28374a21e0655cdb14a680e202383710823032c8fcbc26
-
Filesize
512B
MD575faf45c1a64508b453c8bb8780984c1
SHA17959c349cd8957ba6c2058acb1e9270b7e4feef3
SHA256a0933c95d2f01b4cc68098d542440daf23b32565403ec51a949e1bd4efb5578a
SHA5124917a59bba10bf58927d8fb9739aaf167832d6c194847c4cb5a3646962b536d9b70ed33fe7673631ceb373c6395be0d3f5d8d5009bb25d244316bfd7dbb9698a
-
Filesize
8KB
MD5f350a81d4c6a5b4e0c972ed44e613305
SHA169dd8eeb55abd285bf75f073e763ff5bf79de2b8
SHA256ffc8ab22d1eddaa55470494212a7cac138af87df2eb7853c4305ff7bd9386673
SHA51297ad92e53dd8a6285c4db9e691692d7ffa9c4027d42bc542ea3c08f9246cbcbd69f4a16a2a77640d13aa317ee47ad8d0309070a716369591e4c8a815b82e184a
-
Filesize
4KB
MD53a2d21795a0b2c434288f27053018149
SHA15970e0cc624c5221f1c69ef04ad6080803771aa7
SHA256d6a555d05725092b37def74e7b730f25ba5b8582bb355a19c8e5f2cb02df8776
SHA512888141356f0b2e654d3089f7d23e92b45cd71e480f97b73c34133790fc0b29217ec55c0d3ddeab1ee7719be40cf73889c4b9cda3fd6834430557fe4da99e30a9
-
Filesize
8KB
MD531fbd161bbdc3ef4c3a01bf4c8eaa244
SHA1ed2830e80b7b838e9cf4c761869944617510711d
SHA2562a2fb6b8d8908f9414407eab72672b42a3888773360c9a76f7363a2d85ec4b6c
SHA512699feae00206bf36baa48b4dd009829d1718bfb8126691d9b06aa9f4595da71187335fb6eada790b103b7a628e55196a4d7cf2ff4686c18fdcc063190c16699e
-
Filesize
8KB
MD5c53b287c2494baf2b563d50761b92a75
SHA1c4eb0caf80c1d2d38bea7f1b098bb16779e30c63
SHA256e32a545bf82ef79d128ff8a420196d506bd3fa544461982d9b54caf03e1fae94
SHA5123207eb49eb340f7db1c9eff1e6fc1c672d0704f10f55367d76540eb41a07335cba5042414a677021503e3c38fae267b4fffedd40b5111a01a48b1983a9f601ea
-
Filesize
8KB
MD56c8ef4ab76901baa4c3a6b013eb1619a
SHA1d66b4bbffc50407cd38aa17a861c0ed8aaf7fcd6
SHA256af54be207ad82f50ef7d840dabcaea6becf33e96020bd2d0ad4608a7be64555a
SHA512ba3890b9fd70541c6ac566769abe7434c05aa6f69687dcca60a184a6e3e33d27772728720ad6a6a222bf16e49f6d7d996255529783656f55f95d487a81411d4c
-
Filesize
710B
MD55bc59c833a9febcf4f8b1695e15e2e23
SHA19e9b9f70677b065e9af3703247cb4109076accfe
SHA2565680a4e4526eac334130da3ad0b4ca259d8f10a6b3106e7922d485e3dbe17a60
SHA5121f632f70700340c1a7c3617f4e6f2aa24523be84ecb9a8099f531d64229d4123c4a06845fffd5d0d6a80af42d20de8d8166cf160d71e64290ff87174b02842e9
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-664568A503370001121651719851BEA1.temp
Filesize436B
MD5b728bc232747696f1d703e95ffc6f6f5
SHA1780b54fd5ad04dc134a76c2ab8d40c5ce82ab276
SHA2567ab659883659d68bf5c358775cbcdcd4b5aeb5cdcc5512828dbb5d3174cfa5b8
SHA512851f216d9a0f404fb10d30019776ba5011ecbc92291bd9893364ddb0c51c0a02641fde1ca4b98c4c6b6f55f42860ee1b206052b1e8c13e97525eb5f0bf34182c
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-664568A503370001121651719851BEA1.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/664568A503370001121651719851BEA1/report
Filesize733B
MD58265cccb666c7e01ae8cc14326d8d49f
SHA19143643c319f8a4456a9040faf0fd6def27b0fba
SHA256a7f6cd171d1364cc614a4cef081039d1a523804d04cc93d5941fc68b4e3ec517
SHA512fb24fc5cc5963e9527b18d2a4f5c236c0edf72a6a023566cb5e154c72be6467fbf5f2412d54fa3757fe09fd6eda8cb27b2b42a457339303bffbb834e200a7274
-
Filesize
90B
MD551fadcdc211aa6f47f12f2f9154d06cb
SHA1f965fba50f4af7cb1dc7e53cc3ea4ec6ffa38bd2
SHA256f01ffdbea61724a49293c0cad8c627bdc2faa216fa82826b91ec5103be599d1d
SHA512afb6546a6a0b2daa77c96cd7174aae23eea308f2c0097b7ae6e4c48994b10e0f824c3152f7d35d63eb2f69e20876c50b65b8fc2adbfdd0bffc09af6cc13f3a83
-
Filesize
564B
MD5cb35bc77d5e6ddaade870ff427f1cb63
SHA1edc8a815641cc254ff791d51774e617723e800ad
SHA2561fed251e838d0178858ac20784ac6596b9092fd0b6b037cf255ffc208ce9a8d2
SHA512a2d5fa71f85cda2c27231cef5e9d829e6f97ac2e8436af3672e5efe82b975347407af09673e67eb98eaa899c61f58a591907a2936a2785f52e171b7177e8c69c
-
Filesize
36B
MD571f266d781e58cdc35e208efc5d4e777
SHA13bb6c448ac4e2b1a3ba9e22a18c2ede70d2b4bd0
SHA2560b0be39b17966dd63ecbf43920899d0dc9db9f0523ebe4a1876ab44d5b12b9bb
SHA5121f6d376c4acb45f554e94c800ab353330fa2c3375f94b8238072523b139fec1bf3bd2e4e24b4b9b89db41ea599d78eebb810e6963b7f90063ec7165e91b57587
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5ddfe0d97babceb2258fc311e65360c91
SHA19941d2714021574d3f80d7b79eecd99468f1ab90
SHA25604d7e7b67a9f43ad4376af49f0d572a26e8ea964dc815ae1bd4bf2c0e95d0cc2
SHA512d51b91241e7eae058db18bfc956a39912c096329c4cf014e719fb924b05584ec0368bfd70d05981f9abde2891b6bcbca599e3a034193d80cd29051dca42b49f3
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD590b46a4771e91eeaa37614d22205385d
SHA1e2d79c1183bb78bd54b2301c8af659bbce50c435
SHA2569e7b15e817dd2bd23ea8ae24966133263494d02357fa17bcc116377598f559c9
SHA5129c1715c80a0506c8583be328f3b8847d631aec5976e2b3708d9c5791d80f74e173f09fcd3077f525cba2683dea07c281dccc20bd1e3a4d66826b65e6ac018e94
-
Filesize
108KB
MD558c258ea11accc029b3491533ca0f940
SHA1c367958d40d6a50132366a12e0dcf15c9f811461
SHA2569f18ab92fe23e8f20249e0d3f196439b8a5f2823fbee853fc23040c26f84671a
SHA5128b53c074d962226209852654327014518e1ef582e142e62902b9e1639bc2378a68aaebe981214a0b105fb62f1034deb59f76aca8633a08ef109a8ec823920c2e