General
- Target GubukTogel.apk
- Size 7.2MB
- Sample260905-gyg4csvxcs
- SHA256 529c8b3b53980d2ffb8de5bc68384e86e6983f543b0e841b6149239b7ddafffd
- MD5 954e4c08030d323f56468a1ca88bb3a8
- SHA1 3968ed98aea52f209e0c336d01e4e80e41017e5d
- SHA512 b072d962851c4d997332025d3e0e9e5b5d2be1fadc349916a697945740e9ed828a3332575afb27f9647958ffe38f6cd5da61f159b13a4e09cf0e7fdd0d4cd7cf
- SSDEEP 196608:ZVH7837chFa3FExCCZVASoSnepBEnMFpNZF:ZVQ37cmFiCCZVA6UBIMFHZF
- TLSH T10C76124EFB6CBD2FC87F40320A9AD23136568D158A9297476A44375CF8776E40F89BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
GubukTogel.apk
Resource
android-x86-arm-20260325-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
GubukTogel.apk
Resource
android-x64-20260325-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
GubukTogel.apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target GubukTogel.apk
- Size 7.2MB
- SHA256 529c8b3b53980d2ffb8de5bc68384e86e6983f543b0e841b6149239b7ddafffd
- MD5 954e4c08030d323f56468a1ca88bb3a8
- SHA1 3968ed98aea52f209e0c336d01e4e80e41017e5d
- SHA512 b072d962851c4d997332025d3e0e9e5b5d2be1fadc349916a697945740e9ed828a3332575afb27f9647958ffe38f6cd5da61f159b13a4e09cf0e7fdd0d4cd7cf
- SSDEEP 196608:ZVH7837chFa3FExCCZVASoSnepBEnMFpNZF:ZVQ37cmFiCCZVA6UBIMFHZF
- TLSH T10C76124EFB6CBD2FC87F40320A9AD23136568D158A9297476A44375CF8776E40F89BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
2System Checks
2