Analysis
-
max time kernel
14s -
max time network
137s -
platform
android_x86 -
resource
android-x86-arm-20240221-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system -
submitted
07-03-2024 03:45
Static task
static1
Behavioral task
behavioral1
Sample
2eb4546ef8f173039501329088e7cf81.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
2eb4546ef8f173039501329088e7cf81.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
2eb4546ef8f173039501329088e7cf81.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
2eb4546ef8f173039501329088e7cf81.apk
-
Size
1.7MB
-
MD5
2eb4546ef8f173039501329088e7cf81
-
SHA1
3d5fcfbcc0c6689e0f3a28483126c0348fd6793e
-
SHA256
6260f500a0847ecebe34f4fcbe89cf5f9708669dabe7bb1dfa6ca0d2f3cbd107
-
SHA512
d79a9ea31cc6a5377c32079b72d587a0dbe9578d65b462275bfd798ef9741d4751c5d960ae2da06644e6736f5bce07ce5727e11e4e465648723b108e3e7dc39e
-
SSDEEP
49152:sGmzInM7lq0g+5zZEnZe7kdMg/Fb+xbHeG3q:gGMpawEZXRx+bq
Malware Config
Signatures
-
pid Process 4231 com.sas.seafkoagent.seafkoagent -
Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://media/external/images/media com.sas.seafkoagent.seafkoagent -
Reads the content of the call log. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://call_log/calls com.sas.seafkoagent.seafkoagent -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.sas.seafkoagent.seafkoagent
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD51252c0f27c60bf6228a335d0c7cc36f5
SHA11840dec5c068a3d172fe020c1478cc059121c0a6
SHA256bffc013180eb23b234fd6b6a2df80c615e7b5ee322610fe80e7d3ab37c7e918e
SHA51244959f2af0479157088d11c39a7cd73ce8fd8ec6c0125329cd7160c44e80191574bbf3e85bc69fae2e3fbe400f6962cdeb2a22ce45b006e7cefab832a9d830cd
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
48KB
MD5ab4e0b339a0c56aa7ab8cb522b999e1d
SHA1e2efa3adc266e3418db16efafd0528fd7f644821
SHA256336f3e2bbdc09b5e465233dded31e3957fd3c5e2e6a675c02f3fca391aba95d1
SHA51254174bd027165a19d2e122722d9edaefa3046ef4a849ee916d0395810bc4d8f7fe5a7bc081b2e5a748f238e667c044530e3c01a239176d5d60c5fceabf103f7b