ffe4cfde23a1ef557f7dc56f53b3713d8faa9e47ae6562b61ffa1887e5d2d56e

Resubmissions

26-01-2025 14:16

250126-rk4ejsvlfr 7

26-01-2025 13:58

250126-q9zl8avjel 7

Analysis

max time kernel
95s
max time network
156s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
26-01-2025 13:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

one68_1_1.0.apk
Size

408KB
MD5

611fc9c56d89133493ff3724225d3389
SHA1

65ee804a41bce76cc409a8b4ef9c031fbfaf03d6
SHA256

ffe4cfde23a1ef557f7dc56f53b3713d8faa9e47ae6562b61ffa1887e5d2d56e
SHA512

91c8cfb8962ab39c643e6e887b11f1bc6ba79bcdfa44d2bdbad8416d86123924aaa6ce5974be294fbb73693dfe25a78944d23eb22ba23d0d036d39ae84f421bf
SSDEEP

6144:bEyOStCyM8CJDJS6vCCgDEtb4ZqZb7TCVkiPLmVtCmKaLmYituaFcVMO:hVJgDJQDab4IZbHkm2mDLP8cWO

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.goyal.one68

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.goyal.one68

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.goyal.one68

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.goyal.one68

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.goyal.one68

com.goyal.one68
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5060