Analysis
- max time kernel
46s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/05/2026, 12:25
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Kubatoto.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Kubatoto.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Kubatoto.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target Kubatoto.apk
- Size 5.0MB
- Sample260507-pllvsadx6x
- SHA256 84f77b5336f480ab79ca62dc7b806e99fd48888eda9cfa28b751caabb1ead4ed
- MD5 f10e99d1f81104a6390aeb02ef849802
- SHA1 da1519585b30e446dc368ce5d67da028a84d538c
- SHA512 a6ed54b7393a868e40a1e200d06a5e8d6f8cb68f373ab74010dcdc88a6f76557296e07c55d0afcfabd769615fe6e4ecc3d4866e62fff43edfd0ff3565bd79ecb
- SSDEEP 98304:zysvpQdqw9oEJ+No7pDBybPgAmGxSslMZQE5VubCojgzhoTYrnZ8:/vWEw9oEJ+N6BmYA9xblMdtojWp8
- TLSH T10B36F1CBFBD8592FC87B10B2C96E52B152574D068A839F876D48361C68772D81F8DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.kuba.game - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.kuba.game - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.kuba.game - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.kuba.game - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.kuba.game
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.kuba.game/files/profileInstalled
- Size 24B
- SHA256 e6535bc0f9d06ffe1f5cb64e4fa8f90bc10fa14d40106a9fd9e2e2ca9a721bc4
- MD5 d05697a6fbb5b6ef4db617c2adfb7c47
- SHA1 3fc98f47abf489d701ac19cf021544b1dc360a79
- SHA512 9933c18247de3a8228cedf88d646bf6ab3dd5784402089830b5de1a0fc76c92dc88825cfacabb80b1afe48615aca1ec02b042c47a6da9ab4fe773f4e9d2aa3e7
- MD5 SHA1 SHA512
- Path /data/data/com.kuba.game/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 51cbf56e536c1e43fcce77cbf9e1945c389b3df2c83626b668d8d27d35128a7e
- MD5 37d6466a45c5055dbfaa01ce045408b9
- SHA1 056c3c7f6efbcfe378c0ffaa365e5db9ca9ad3a5
- SHA512 6ffdc2334457a7440a85a45db1b404146c7fa287d109b4e92fcf598533edcc692909f09febbc332a73289181767bab34d72647bd2fa6cccf80bae7cb07b556ec
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.kuba.game/primary.prof
- Size 1KB
- SHA256 4d745c45ba52b2ab1562c2b23aedae2229ce4359c2723f7d8a095fc567512937
- MD5 bf837224a2421709406f1216dc6d5e20
- SHA1 85857ebcc1c67e24e661bfea5068796b480683a0
- SHA512 4ea59ba36fc6ac72f0f15aded2453ae5ce6c28826ea44d3af846075abef41a5e56fffaf674ace441eb497051dab93cdcbdc3b09591187c8521eecc257e55f843
- TLSH T15631087A0820294C9CFDC5ECB1CDC9171E22AE865206346F810D639D0AA58737EEEACC
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.kuba.game/primary.prof
- Size 5KB
- SHA256 145f36a0821d97f0fde52ed58d26044c4e1dfd4253fb7bff4ee604279f48ed10
- MD5 ea4565fb45398b66f976a883a23ec644
- SHA1 5a73d7c8e1613ed733006646851adb20dd14120a
- SHA512 513a80bb7a829bf137c7a0c40a51f6658058533d9951809a73b15b6cf3fd807780d9582ac18f81d3c6a8d86f0924d046763fee3deb0adf95284d61f3b4af2689
- SSDEEP 96:hAubZJ3CkqSU4flX+4jHVDsnBOurl2vskYVhS9O9YTw2Spg7iEEn4e2awYV:hAutxCkPU4NbH0rGTYnaDw2SieJ4e3we
- TLSH T16AB19E60A0905E0424BD6A91CEB8FDBACBD47839FC5EE4933C06383609C4B07EDDE568
- MD5 SHA1 SHA512 SSDEEP TLSH