Analysis

  • max time kernel
    14s
  • max time network
    137s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    07-03-2024 03:45

General

  • Target

    2eb4546ef8f173039501329088e7cf81.apk

  • Size

    1.7MB

  • MD5

    2eb4546ef8f173039501329088e7cf81

  • SHA1

    3d5fcfbcc0c6689e0f3a28483126c0348fd6793e

  • SHA256

    6260f500a0847ecebe34f4fcbe89cf5f9708669dabe7bb1dfa6ca0d2f3cbd107

  • SHA512

    d79a9ea31cc6a5377c32079b72d587a0dbe9578d65b462275bfd798ef9741d4751c5d960ae2da06644e6736f5bce07ce5727e11e4e465648723b108e3e7dc39e

  • SSDEEP

    49152:sGmzInM7lq0g+5zZEnZe7kdMg/Fb+xbHeG3q:gGMpawEZXRx+bq

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
  • Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
  • Reads the content of the call log. 1 TTPs 1 IoCs
  • Acquires the wake lock 1 IoCs

Processes

  • com.sas.seafkoagent.seafkoagent
    1⤵
    • Removes its main activity from the application launcher
    • Reads the content of photos stored on the user's device.
    • Reads the content of the call log.
    • Acquires the wake lock
    PID:4231

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.sas.seafkoagent.seafkoagent/databases/evernote_jobs.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.sas.seafkoagent.seafkoagent/databases/evernote_jobs.db-journal

    Filesize

    512B

    MD5

    1252c0f27c60bf6228a335d0c7cc36f5

    SHA1

    1840dec5c068a3d172fe020c1478cc059121c0a6

    SHA256

    bffc013180eb23b234fd6b6a2df80c615e7b5ee322610fe80e7d3ab37c7e918e

    SHA512

    44959f2af0479157088d11c39a7cd73ce8fd8ec6c0125329cd7160c44e80191574bbf3e85bc69fae2e3fbe400f6962cdeb2a22ce45b006e7cefab832a9d830cd

  • /data/data/com.sas.seafkoagent.seafkoagent/databases/evernote_jobs.db-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.sas.seafkoagent.seafkoagent/databases/evernote_jobs.db-wal

    Filesize

    48KB

    MD5

    ab4e0b339a0c56aa7ab8cb522b999e1d

    SHA1

    e2efa3adc266e3418db16efafd0528fd7f644821

    SHA256

    336f3e2bbdc09b5e465233dded31e3957fd3c5e2e6a675c02f3fca391aba95d1

    SHA512

    54174bd027165a19d2e122722d9edaefa3046ef4a849ee916d0395810bc4d8f7fe5a7bc081b2e5a748f238e667c044530e3c01a239176d5d60c5fceabf103f7b