8fa6eeaf6237dd926024145ceae2cfdd38ba6799c709a0f3ecd11065e5b9ccf4

Analysis

max time kernel
2770492s
max time network
130s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
23-12-2023 20:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8fa6eeaf6237dd926024145ceae2cfdd38ba6799c709a0f3ecd11065e5b9ccf4.apk
Size

17.3MB
MD5

76db333e4c60497aa3b01ad6f081565a
SHA1

6c6952bec2bb27596852f549d8bd5c95d7ce78df
SHA256

8fa6eeaf6237dd926024145ceae2cfdd38ba6799c709a0f3ecd11065e5b9ccf4
SHA512

4221a793d942c377b7af105430718763eeaee48301f30525f4db4af4083fa9794c23f6772567d5c33c91fb69dcf4342ce6f11eabbb68e5d26e2618e5894b699e
SSDEEP

393216:sKmqaLUQCeHteWhdnXCO2CqJLCwlIXkk251wv1mY+F70RH1O/gqu6:sOa4knXD2frlCGTVYIcO/i6

Score

4^/10

Malware Config

Signatures

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.chuxinbuer.brighteyes

com.chuxinbuer.brighteyes
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4247
- /system/bin/sh -c getprop ro.board.platform
  2⤵
  PID:4279
- getprop ro.board.platform
  2⤵
  PID:4279
- /system/bin/sh -c type su
  2⤵
  PID:4306
- logcat -d -v threadtime
  2⤵
  PID:4332
- logcat -d -v threadtime
  2⤵
  PID:4351
- /system/bin/sh -c getprop ro.miui.ui.version.name
  2⤵
  PID:4372
- getprop ro.miui.ui.version.name
  2⤵
  PID:4372
- /system/bin/sh -c getprop ro.build.version.emui
  2⤵
  PID:4403
- getprop ro.build.version.emui
  2⤵
  PID:4403
- /system/bin/sh -c getprop ro.lenovo.series
  2⤵
  PID:4428
- getprop ro.lenovo.series
  2⤵
  PID:4428
- /system/bin/sh -c getprop ro.build.nubia.rom.name
  2⤵
  PID:4452
- getprop ro.build.nubia.rom.name
  2⤵
  PID:4452
- /system/bin/sh -c getprop ro.meizu.product.model
  2⤵
  PID:4477
- getprop ro.meizu.product.model
  2⤵
  PID:4477
- /system/bin/sh -c getprop ro.build.version.opporom
  2⤵
  PID:4502
- getprop ro.build.version.opporom
  2⤵
  PID:4502
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
  2⤵
  PID:4528
- getprop ro.vivo.os.build.display.id
  2⤵
  PID:4528
- /system/bin/sh -c getprop ro.aa.romver
  2⤵
  PID:4552
- getprop ro.aa.romver
  2⤵
  PID:4552
- /system/bin/sh -c getprop ro.lewa.version
  2⤵
  PID:4577
- getprop ro.lewa.version
  2⤵
  PID:4577
- /system/bin/sh -c getprop ro.gn.gnromvernumber
  2⤵
  PID:4603
- getprop ro.gn.gnromvernumber
  2⤵
  PID:4603
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
  2⤵
  PID:4631
- getprop ro.build.tyd.kbstyle_version
  2⤵
  PID:4631
- /system/bin/sh -c getprop ro.build.fingerprint
  2⤵
  PID:4655
- getprop ro.build.fingerprint
  2⤵
  PID:4655
- /system/bin/sh -c getprop ro.build.rom.id
  2⤵
  PID:4680
- getprop ro.build.rom.id
  2⤵
  PID:4680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.chuxinbuer.brighteyes/databases/bugly_db_legu

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.chuxinbuer.brighteyes/databases/bugly_db_legu-journal

Filesize
512B

MD5
6c0e2102b7307dad877b383e38b36ac2

SHA1
169d2f5986d66f6ff818ad5091f16cf52bfbed35

SHA256
537cb8a75c33ce14dd8e396a1cc6ec85004c1fb695f85e461d1a2160ca5a4bbe

SHA512
15fcca722733b72a00dbf606d9a088e9d59cf9765b28a49bca5b748f79cfb918439637706e7c997bd9302bab4557f7864f2e4b2730c0ec64566d64225ffdf3a0

Download Submit
/data/data/com.chuxinbuer.brighteyes/databases/bugly_db_legu-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.chuxinbuer.brighteyes/databases/bugly_db_legu-wal

Filesize
16KB

MD5
ff28d4811ba7cada2e8a310dbbe9e3cc

SHA1
013852181d09a754e45fbcc357690aba15048921

SHA256
0e238943a24862d204b7c261cb1e5e7915d4b42a60fa22c6ca042e1b2e3691e1

SHA512
d87d6d925a483535c2d88864f2759578b27b7f907757e3d844002374cc6bb5bca7ea48fea0639744a3b2ef72a5d104bf7f865d3b1478bbcae615fbd78ad85d2b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads