ffe4cfde23a1ef557f7dc56f53b3713d8faa9e47ae6562b61ffa1887e5d2d56e | Triage™

Resubmissions

26/01/2025, 14:16

250126-rk4ejsvlfr7

26/01/2025, 13:58

250126-q9zl8avjel7

Analysis

max time kernel
214s
max time network
306s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
26/01/2025, 14:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
one68_1_1.0.apk
Size 408KB
Sample250126-rk4ejsvlfr
SHA256 ffe4cfde23a1ef557f7dc56f53b3713d8faa9e47ae6562b61ffa1887e5d2d56e
MD5 611fc9c56d89133493ff3724225d3389
SHA1 65ee804a41bce76cc409a8b4ef9c031fbfaf03d6
SHA512 91c8cfb8962ab39c643e6e887b11f1bc6ba79bcdfa44d2bdbad8416d86123924aaa6ce5974be294fbb73693dfe25a78944d23eb22ba23d0d036d39ae84f421bf
SSDEEP 6144:bEyOStCyM8CJDJS6vCCgDEtb4ZqZb7TCVkiPLmVtCmKaLmYituaFcVMO:hVJgDJQDab4IZbHkm2mDLP8cWO
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.goyal.one68

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.goyal.one68

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.goyal.one68

com.goyal.one68
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4519

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads