Analysis
-
max time kernel
47s -
max time network
131s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
17-05-2024 01:57
Behavioral task
behavioral1
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae.apk
-
Size
5.8MB
-
MD5
1398c9c6999be6f56f2364ec680f8557
-
SHA1
396c173b4c084afc3a2c89044ffa42a3f0e4dad4
-
SHA256
798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae
-
SHA512
49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc
-
SSDEEP
98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A
Malware Config
Signatures
-
EasyLogger
EasyLogger is an Android stalkerware.
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/app/Superuser.apk app.EasyLogger /system/xbin/su app.EasyLogger -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo app.EasyLogger -
Reads the content of the SMS messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/ app.EasyLogger -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock app.EasyLogger -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.EasyLogger -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5ddc417f3fb5eb5c01c98f344c5e967a5
SHA1b152565747fd2dbfa808733488c4e8a65b0c9cca
SHA2565f7a2a4b039ccec0bcfcb062bf529b613a6b1c673d96782725125a2f3d5d6bd2
SHA51246d0da7683470992036afc40c465ca8d74691ab38cc819ab0f5d962c0dcd54c7440762951b8fc5d405a808b5f5a3f345ea5952763127b8b81745c669af2b5d59
-
Filesize
1KB
MD5165f36f6244c235211dc77caa4e10863
SHA145060f9acdb7d8f0d9d9ef0dd240ddf1865b2364
SHA25649712fc13c09be9666e97c9e106840d58cdf260738c743d4dff3c0bbc3d328c3
SHA51289482d1207588e064bb5379111eae06634033eb3da48887f03053583391aa4f9a7f1d6c204bad2120e4f062cc42c341309f5f40e11c0c24ed962b3cc7bb3b7d3
-
Filesize
76KB
MD565e41370cf11c2718cf78e9ad13f1f86
SHA1a8a58e529c8d41223840640778bd8961d73505d5
SHA256563253ea278be27154c894cb4d7cfaa4a653509f0b1ca54577988d92b381f9d1
SHA512c7291142379de850dd9b5992882d866eb50969dfe531a530f8f4144c67c7d8b39f77243cba13cbcc731658e192cd845ab817eec6c37411d7029b83668ba47069
-
Filesize
512B
MD570bb578a65e6e37ffebb8b8375d17100
SHA13dcf94e379bc7ad119ca3871a2d288a3d3cf6b03
SHA256e2afb322aaea824cf39abf7ab26d1e357d16cf095cf43059445898d32db348e5
SHA512bdf6b4c8ac4656b613e1c0dc162a27748d92ceefb6fc47f3e6c4d89531647c45c77e9ccba12815f27cf0feef554c4adc6006e6a12f3ff9ed7502243a184ed34b
-
Filesize
8KB
MD5dcc1a34ed0e1ab937e629968074623b7
SHA1a5e792db282930e90cff881f7056bc872dda4a4d
SHA2567153cf16b802e2c44330ff888bd1e1af8ec9527acb9a2f5f5c3aa6009e92f6e8
SHA51210d376945352f3d0e2aae6feba7d75c8302fe43ce02e81b02a6d9f88e2459fca8eb328eda1ea74393b52c06a71701f94370621174f10d8f9c0434b4a8643852a
-
Filesize
8KB
MD599ab7b97152c2bba29e5d410336dcfdd
SHA1319dabf761fdd9d2acd7b282b5e32413486a9592
SHA25618dc523aa540bc40d4c60711c932011635a776ffd016ef910969c8bfe090721f
SHA5124a69b8b9a1ec47ee310e1a1195866c0add10ed7d34638a4c05429eb9b4b1e0c429c242ba0816a2e9fd9b5306fe493edd0246d820d869f623c6e2521125cc874d
-
Filesize
8KB
MD5aab573fc850ec881fe4ef2a193c5f029
SHA1568016436f55c40152b3414ac251d68ab022f959
SHA256cc371f91d3e24080148536b4fcb93cb3dda33a3272025874a85117c77cda38f8
SHA51202939470bae327b5c527d44e18a03bff650cc9cf811bcdacbc7ceeab489c46e11408c8d96ac73cf1291c9e62f120dbc6dc291da246e7f4cb8187f2b53b99c029
-
Filesize
8KB
MD57a322be483c3fef771d46a628a4a1371
SHA1bfa11fe5f4e1493ade2d3d9cc740486a2dee44b7
SHA256aca42422eeb99e26fa8246ee39575b3846a88a79aa1ba45167eab17e0b572520
SHA5122eaecc4c7f196a98d3d8cec2043586efcbd417ee60476b42150cffb1d9f5d795cfcc7c8e47d74bda99227661275349f7ee01beef84cb86825d6b33b6fa522416
-
Filesize
8KB
MD5994a701ff1e0a9c5903355d704a8f498
SHA120afaa3b298989c8591b1fcce8c512b4b31d7b83
SHA2560710d06993988e83c889a468bdacefe9cb067e794da6f0c7835f1649766757f3
SHA5129bf022ddceb73cb21fdbc57e6504e02976fff27fb6a3927697f2abde55b89ed4faec2194e66297089d578676054a90092edbc620efe5490a0a192ce32639fe70
-
Filesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
Filesize
8KB
MD51557f03195a722237949a3385babec10
SHA1c7607a8543e6f7278d99a5933c60c7d0bfecd404
SHA25654b56a645c63efd0dcdd25e399aab69217d6417fdffa9864cd4296c83e361842
SHA512187dfcf01665e25a55dca840da5fe86d84437026a82421338a447cea793d49f4abc2fc494b415a4033ec2f055a7b2271350722eb6818c4379afb51dbd8cf4a67
-
Filesize
512B
MD5d6a8d7049499b94ae23d7da5a0b637c1
SHA1dc4d08e886a640f75d307bc617b27eafa92c35f5
SHA256e58e4f27346afc6525af45c7f613b1ef5d397ee7f04713c7e51b4d140ac56def
SHA512b77b5449496e4e7136a46c2dd346bb0129cc5b34cad08e4199ddacdda1f40be6e6196cf67206a9fdc1673fab573fd2c38fafc47201c5dc862c99e875945f1887
-
Filesize
8KB
MD55dd684a704f65efe51a8b4b64330f1c0
SHA1e206d3243aa3970c7c3e62949020cee6cfb29980
SHA256bafa11e4d8bfd3cbbe243912d52ed788a090a3b3c3ae8e593f4af15987d2d1e3
SHA512b9f76069f09a549b7b6e96d7a47ba2628a997fcf334eb954a35da5a2c6a337b67f1e36c35dbb35b26f5f40346959818e0f314d179916cff3b246d7c3bc4385ab
-
Filesize
28KB
MD5c6f85cfd13665b5908f682a38b6133f7
SHA1417620528f41541c1ff25726c57a8074671aaf38
SHA25676127a512f57656f488f0f04f3a91521f1f8e946d20442013d9e58e0c69adb29
SHA512c917360326ad9881fa8390e22a58386ad1e1e924156227b4ec471c7c3d8675dcbc75144f03ffdf64776ee9489c8a6b6b927026cdeca3c76a1056f4b6edacb936
-
Filesize
512B
MD5694653f07364fced70c123059c5362a7
SHA13a0f34d8f4ef868e57e2d2ef0d50f75eab845416
SHA2569eca1e2eb843b65deaa90b58bf1c418b635e6db9f8acdafa64711085ecb66dd2
SHA5122a4268fc091ac56867be558750d651710683a6bdec2dc4a0348dfbc387cb5efe2eb0dc355ac4a3e61e08a66524cc9ce70f8a898dbfc17ca6a5403660da451d23
-
Filesize
8KB
MD5a3c6f04ee7becffea92eff206989b71e
SHA1c9e97353d8ec7d95a901eb91093a01e5add67f49
SHA256a53ee7a8b5e961b48c6d0c4210ef0f5e756bcc98c05d13796b467ff73920fe6c
SHA5127ed5acc681d5242783d37e3d808185e78195536168c06c13f7f9414114d9c6e8f99f3a9b60bb1ac6f872a9614512b3552a8b6c7f6e85e3c273c5f9beb1bfffe1
-
Filesize
4KB
MD525d2e71d2a41c507dca31f186db444e7
SHA1a457ed56ce5b081203d712ba966490207eadd2cf
SHA25625aaedd9d1348b35d50e31492fb337d5014659cd3fc258232ca1665b245a4113
SHA5123fafd8c998a27575fec4ccdddafb3bee063ad00eea7a27289ff2c07a41262ad17ce6de6c1c7d1bac24d742f8d2d863a3b551372fa8aeb7ec08f328a8f67ddcd1
-
Filesize
8KB
MD5f695636da95d5a2faa4c30b426604de8
SHA14a69d9bbd79baa81897265662dd98650f353391d
SHA2567c42189e1286c402fe619e90133483a2593a955b5c575fc709d5f226713b419c
SHA5123ae22f5bafa9e96c77544c097d9dae5729105c1f079b9182e52080687033dd6c8a3fbb2dbbbea4394907c3733481e87e99d30b767d01d6170116639b3dcbb442
-
Filesize
8KB
MD5b60d5a17de416319e9f1749b4d4f31f5
SHA16ea4d28b61e570a70b4507c8f3adf5bb35dcd058
SHA256443c4562b63a2a0b7e2b9cf2829575c40acf06eb2d86e71431a81418b984792a
SHA512894cbc15f3276e254e39b46d21f63408c1e659941bf60240bf76670e22e1a0dd77101beb2490f746d541b7112b2de6e1023d712c457ddd7ffe5277cf760b7cc4
-
Filesize
12KB
MD5f764ae69040e50aa3ac7a2829e6b5e60
SHA15f7aeeaab6a111d3e0f3d3fab4217d8d2e21c030
SHA2569bde841a6d33adce079b4352f97982a11f8d65a051ad85505681d030dfed93c6
SHA512f792dc5c28459f3a3e9988d6b7c6d5180af914228763fcac3cf46aa528bc53f29f510f7137fd0413ef563eb0bf7f58eb656ccca83ce7d635302e0d5f60c82428
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
16KB
MD53b94cbe58ab45dac6e3d1b674b14cd22
SHA1f2ad9d6ece3eeb62ba3f3724e167f2d7bb743ff7
SHA2568fd375975cea7cc348ac1aa2720e2730de7141bde59aea49565f31f8df7254f7
SHA512c7e8038c3ecfb33f151574fa2336b852f73f7350e370a36e1d4507aff351abffe1cac4a0f96a24bf40626e8f5049ad93789223a93a5b4bc5d2621833ca0ea864
-
Filesize
16KB
MD55dc9ad4053f2d3269fa4393c2a86de03
SHA1d45f9438fd71322776ddc7c18ef8ff4d7291f695
SHA25696ae9fc7786d6ac359f1dbac608e7d07e43a1d9cd5d27a57d4ea81d419acf641
SHA512406887c3ba31c72e4babb41779cbb9565aad4eaba149b8122fde056dbcfd99ee274e4eecd2a580dd2e26a283651e158a167bb068f7bc55171396bf6deb723511
-
Filesize
16KB
MD5232034a629718433b12b1818b2a1a081
SHA17daaf407ca8478704b3b0293b4c43b9fd17bf04b
SHA256f94eabd24c232a8594c2212e5c34655058d24113bac18f0fa96a46744af2b8f6
SHA512bafdaa257db6b165f455d278216ee6b86a2c5aae8c2d642a42843232caa5e9ee1e2468b939810720d7694e04e643c6980d3fec6fcb678ac1c388dab78251ef66
-
Filesize
16KB
MD5dc01a9955853827d46b44f2effe58881
SHA1024a32fa4e40d1da66de7173d14dd6386dd7a214
SHA256f4e6538a1d90a824ea9bfa8f0a86559d000af05ae24daa1be44a531b6948b6d7
SHA512c0bb757c1acfc82d0c8953b29d3d4a6203be1282cfed363519c645142cd395c6884670167536fea25bc5de85713149185b45d1300f997f635635cc09d2298dad
-
Filesize
16KB
MD5c6de019a93b8a298c139021e0283ba5a
SHA150dc2c6c159ffd1142b0227eb079e94e90964692
SHA256bffd2c611a545c2a706cfde42b9a0ec3e42a0d439b29dde7b97f04585eeec3d0
SHA51214001d11deb208c3c9a2a2261fcc6890df0979a120fa7fd71983e03f04d763efaeb4cccc517f58e4640393e1a01f93955f9436a5b78eb05812cd81dc67c13b1e
-
Filesize
512B
MD54ee1a9029ffbaf7896d08c77cd31cf65
SHA19bb018cc819be7f634a58638926052f9be820bed
SHA25655cf254d91548b51479caf59c91f5d7be67ce1895db082594eeb5809c965eed3
SHA5121beefbeab2b036a99b8d1b8a255e70f995db1ee4310589f7c9d5d49d1bb00fa08ccd9b7c44e5664e465d7244c64a5c50b24f6ee9f15b8e1830631274ec59202d
-
Filesize
8KB
MD5689e650e971de665a34be568ff0546f2
SHA1f038dd9d2ed82d5c603fc86f052a713cf6907b65
SHA256df23e309dc73dc787a1eb1aa05a2648cb5eb2448fde8d55e2b9789797a7d6512
SHA512ea1c9b665df7c393e470609d06098381664646e5fc3981376c8fa50259ac71b764a8b8f8a40d7c17a0d654f6141ab6e2054c3f10c0bf3b19689901fcdfdf86fa
-
Filesize
4KB
MD5330b48f4ff32edb42280fb2298747777
SHA192b223219a5901db31d8dcc95d0aedeb03ed08a3
SHA2565aa88f7d960efba9ea63e0087585b20b1db138b2316d3239cd2276e71cacf72d
SHA51202305f60220facb43d297e285697df006beb1b364325c13ad151479dbe763fc71d2393f7e9105afbaba13674d5691fd405da18a66693849887d5036b424aa1b0
-
Filesize
8KB
MD58564afef3ddee009f28569131ad392fd
SHA1166cb09006dffb3ee17c9867fde3cc783eba15cf
SHA256934d039e851e3604124251d00e38c03c717f9ef1b117a2d4840d111b283de790
SHA5128ff64e9029d6579de9cb887f778d769f7dc0720e3de455c703710ed488a2d8228dad985bd20bd8f08caf04a13826f9c36b0a38a3b04f5b8ef548fd908bf10833
-
Filesize
8KB
MD536ad3c8a0b42697345ca7809c027aadc
SHA19e40b20ce006a0cce734d0bb5aba2d3a06f6736b
SHA256f32495ea50f516a0a7b77c8aa0985177724027bc768619991a2150ac029baf12
SHA512958c0d511042d02495838b81c899704d17f0ccb3f797effa62e6adb05b2d3a56917ca38a28cc5273fe6a34a0419806b9c5c8ae54ec744fa6a6d17c63519fa648
-
Filesize
8KB
MD5ab84bff309994f16d11e296108555e5e
SHA122569a6944e513ee525d845af1c7216f8f35fb73
SHA256d1ba7eb34a4c87f847da7f69a008b03f3a3f9ba37b27a0a297968ddaec7a9457
SHA51206377d0d48c3324fc2518872c8a2b8ebea05216d76bee0142b57cdf97b6909125215955928172b73a18c6f3f565ec3bded490db84712e82e09665ec624f6a661
-
Filesize
710B
MD581d1632b294c876a16d988163ce2aa8d
SHA184d7fd866616c8157ec5c600af0c0078a1f80481
SHA2561b1d9b6dfe81199247041bb1bb97965de196b8c865d748080f575867db8b9019
SHA51202eb7661c56aeb96d21c85af5fd5cd410bf7938df8642e0a3bd910c9891f1b76a80d82eb87d966f10645d3e93cd672f544af26c20759712b506a9702fcd3ff83
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6646B9A902A8000111414FAC0D2F565E.temp
Filesize440B
MD5ed10b486133ddac3399855020b97d877
SHA1765f22e405713916c06caab7bf1aa4e1970d5611
SHA256a17e2ce1bf8613d0979007f26300204171a930c843181c0a4b76f4d4429716f4
SHA5127d48ab26e53840b5e201309cf42e52a761ab3a22243db3635fc5ee6a8a7f5ed8fa34a09772f6663dca306a758ab689251f70c5f17be5e4dcc7fee0cc5562031f
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6646B9A902A8000111414FAC0D2F565E.temp.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/app.EasyLogger/files/.com.google.firebase.crashlytics/report-persistence/sessions/6646B9A902A8000111414FAC0D2F565E/report
Filesize733B
MD518ad2e8f35f904aee19fe115eaaabaa5
SHA1ce8192454801a34d60e839cfb3129491300f1e6f
SHA25655d55a03505591ee962889592dc6b0f1e3c079eeb13de9ac247605a5ac264c46
SHA512bf599a1702a3e4cdfd56248fc334a0fb1e5313ea69beb19ebaf1c9f62ed2d0fc90ae0ed53fa82a5828461c16d727cb8fb1db570ecee844edd5f94333d523e207
-
Filesize
562B
MD5037619ed900e4616d716c557cd202a0f
SHA1453b50819038aa2d4a023bd44358e9ad9a8826d6
SHA2563416da4d513c9d42a6ab3a887ca235dbdcec992423553742ec03dff78846079a
SHA512207ee0f9ae76fcca44922b6f688ea631f583e6b88ede5676d61fae3aab839910a70a2b5b69c2736841457e8b21ffbe126ce337b5f8dd80cff8ab7e4721a1d9f5
-
Filesize
90B
MD5d10c1f8c71fe3ad5754a93529a830581
SHA16fd9bdd068817a8012e32b47500b5987f26a4e85
SHA256def0ad8df90ff34df791fec1b38ac3827480cf4df4155b73fe36e4dd48e57606
SHA512a555e36b4ce3844c67acc164774d65939a3f9a21da899911048590551d37e0310f65b6322e308f71e14c1342e9ac1fa70708001ed6582d62f686ffebe8796c83
-
Filesize
36B
MD5d8c12a5371973dd453d3d208f5be2f09
SHA1d6d02bb75a1191f8f70e3bfaa2269c14bbed436e
SHA256dca6fde06e6029b8b55e3376e2365d316d5e5e0d4e4e49a77978bca334450a83
SHA51215a9b5c7eda7a8f1f04a29ea15732edcd8dfdbcc95163a8010de8a821b6ed744411c55e328204f1fae53caff1393a7494d1374b32a003767b1ad0faaa77b47b4
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD59a12d1f4a37ce3caa89d5145442d3a20
SHA1d3832a5bb412b6be9b0da826d0be2689e87dfb36
SHA2561ca15cb1ed5ac40f9d63aa250736a6379074e7408a10fad9665a034c472b8040
SHA512ab5a8c982632a28fe66c09078c4c5fb1e5808d9ea711f2d080e69bf859f3535b883e332b2cdaa677945e03f57ab0e9b08382335dc8cebd21c25a0bdce95323a2
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5354ee7dab1a8abce142a78a51b1545fb
SHA1a533110618267fa272151958c7a0163567a90f57
SHA25635a69625569e6256947d50c2af7be7b156426cd706ce1e8a45af74b19bf3fe82
SHA512476017717f520bbd3dbaa11873f37e7ca3daf9f6a91afcf9d03bdb0e0f6d7aae3422542ff54725f50cf439baf5a878438b4aeff1bd85d08aff7f46b8e74626fb
-
Filesize
108KB
MD523905795ec566d1176f396f980c970eb
SHA1d070bd511b807d34f58896f911b84b2e08d5c77b
SHA2560e85b45a31a297d621ac98c5b5e7b6e4e486cff7b4e9393c6b20a9278f97f78d
SHA512787d8e514d9a552de0c591ef2531b6329fece19fc68ad132b7c2b4305eb9e55310c6406d1fa574aeffb16c1149c414092691e8a0c9a4397cb3a64ae39a15000c