Extracted

• • Target

    798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae

  • Size

    5.8MB

  • MD5

    1398c9c6999be6f56f2364ec680f8557

  • SHA1

    396c173b4c084afc3a2c89044ffa42a3f0e4dad4

  • SHA256

    798fafd34288fe8439dfd609d2599f234c6cf63b047f032d872d228f951c87ae

  • SHA512

    49ae3724b60f40ac3646a44164fd6879480d895e1096825f484d63d286b5c5b8f2557bdf752f746651504bd038bf9e93dfe7400977e2bd6ba24576843b3393dc

  • SSDEEP

    98304:BUlRb+MDHwasxU19o7SDWNYbM2Wlghs4DqHvSse0EpO9X0xUCd7Mmp3/U5uaMA:CKhdU1xWlQDuSsGA9X097MaPUo/A

  Score

  10^/10

  easyloggerbankercollectiondiscoveryevasioninfostealerpersistencespywaretrojan

  • EasyLogger

    EasyLogger is an Android stalkerware.

    trojaninfostealerspywareeasylogger

  • Checks if the Android device is rooted.

    evasion

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    bankerdiscovery

  • Checks memory information

    Checks memory information which indicate if the system is an emulator.

    evasiondiscovery

  • Reads the content of the SMS messages.

    collection

  • Registers a broadcast receiver at runtime (usually for listening for system events)

    persistence

  • Acquires the wake lock

  • Checks if the internet connection is available

    discovery

  • Queries the unique device ID (IMEI, MEID, IMSI)

    discovery

  • Checks the presence of a debugger

    evasion
  behavioral1behavioral2behavioral3