Overview

overview

8

Static

static

6

GubukTogel.apk

android-9-x86

8

GubukTogel.apk

android-10-x64

8

GubukTogel.apk

android-11-x64

8

Analysis

  • max time kernel
    102s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    05/09/2026, 06:12

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    GubukTogel.apk
  • Size 7.2MB
  • Sample260905-gyg4csvxcs
  • SHA256 529c8b3b53980d2ffb8de5bc68384e86e6983f543b0e841b6149239b7ddafffd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
collectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 8 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.gubuktogel
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    • Checks memory information
    PID:4783

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OneSignal.db
        • Path /data/data/com.gubuktogel/databases/OneSignal.db
        • Size 52KB
        • SHA256 c776d1acf90c60f95a89ee4db8222acedc8e0b097d5606297aa641a3403821ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneSignal.db-journal
        • Path /data/data/com.gubuktogel/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 9a5274178d878dd405d0738428fd60ceaf17d901af131621344cfa1685e05058
        • MD5 SHA1 SHA512
        Submit Download

        OneSignal.db-journal
        • Path /data/data/com.gubuktogel/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 0a0029a69f5f3fb584c067cd7454972ad0ceaddba830f317fd40d74267d27f64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneSignal.db-journal
        • Path /data/data/com.gubuktogel/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 3f4d08a7e7990b626b762f7b69137170087256aaa1bf2a78ca240be4424aad80
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.gubuktogel/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 a0f64241eeccdd796e0a49cf8d1dad98a437ccc07c9f8550427cb0e34cabe728
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.gubuktogel/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 95a8c54500d9e19a5f3c69052b3ec22db44be9f02a12b286323661c47297c1f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.gubuktogel/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 f2f2dd50f29d83078bbce2ce6df41a4e7aa0846056b7cf4923d676ffa8b6bd0a
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.gubuktogel/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 a73aa9365e6b528c18e5836681cb3e02aca79741d6fe55095cf96b4339149ab8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.gubuktogel/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.gubuktogel/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 323ea469560991dd571731e0cfe80471d60da4a65daaf91f5f8a85feadbb3f77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.gubuktogel/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 73236e4298f742bcf00625e0faeecc7ce54f0223f36ebd72506308999b1a4a31
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.gubuktogel/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 f9e72a71f2752c882242ba2a54af04b2ffabc8ab550ed8367ed14f9ec7e32e14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.gubuktogel/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 90609d7e2bce7f2bf40426a7124e5525f75f2631505afe19b000fa40f84a767b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.gubuktogel/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e893640c030f0248c149fdca69a7d4493b330554665089318ac55083a69cb0af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.gubuktogel/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 9cb200347a3a00bc8afd5f5c9312f7de3618207a5605ef5669b84a0f5cf0bde0
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.gubuktogel/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 799ad0f5a21a761a82e6089bc5e066505009bd0535ff2fbca30eee6355667b44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.gubuktogel/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 5efde3edeaea12e12e0b2738d6f8d51a7ab7e6e18237183ffda8722fd7bc85dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.gubuktogel/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 77775d101c8a6e24eead087b6d4f04acfb36336515995d35df7a6ccf84431bdc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.gubuktogel/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 a806f73ceae410cdbdbef8a0f18bfefd043ace0bdf6b285c08d1100ae82e0180
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.gubuktogel/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d9d702624f7a3dc096d6ec7f66066be3fb93a436a0790818b0b33d0e05fb5055
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation1078286339928966084tmp
        • Path /data/data/com.gubuktogel/files/PersistedInstallation1078286339928966084tmp
        • Size 90B
        • SHA256 228892500ba65b0fe66f0352466dd0624abfd95b32f86e29675841743b141fe9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation2935816250041874760tmp
        • Path /data/data/com.gubuktogel/files/PersistedInstallation2935816250041874760tmp
        • Size 569B
        • SHA256 3587b85a71e439b51238774dfccff0fe0e9db056d6c563833bf934945557162a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation6671326331726389895tmp
        • Path /data/data/com.gubuktogel/files/PersistedInstallation6671326331726389895tmp
        • Size 568B
        • SHA256 dc253eff414258e83f02a1b0b3c7c5cd3c72e791db3cf5fc58893f508969bbfb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation8514192945832534906tmp
        • Path /data/data/com.gubuktogel/files/PersistedInstallation8514192945832534906tmp
        • Size 90B
        • SHA256 1878b776e8d8848bdf3773acffc74f7a35d2379bd76361b2616557cdf4bc6705
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:531074601940:android:0ee56449221db546dc7c41_firebase_fetch.json
        • Path /data/data/com.gubuktogel/files/frc_1:531074601940:android:0ee56449221db546dc7c41_firebase_fetch.json
        • Size 20KB
        • SHA256 80bb5b0b69a7692c4c510296827e6a11796d51c53850bf38f82057ae6b7addca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.gubuktogel/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.gubuktogel/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 25dd352afa27360eceaf9c2355cc074a5b0c209ef4eb4a436e3b3a46808ec56c
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.gubuktogel/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.gubuktogel/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 7a3005482f32845858fc5fc6f77257e83e918db4c168f9ac27d95cc5bb516d7e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.gubuktogel/no_backup/androidx.work.workdb-wal
        • Size 261KB
        • SHA256 b19ae8c0d5b576678d9b43eb9b5ec4d5944978c3e0452d13ebc3e1669e1e9fef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.gubuktogel/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 344ec6a5d2d30532cdb196ea2fc3eed3cd15e9dd128b40216c818ce480b8ec3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        downloaded_file_1788588781234.javascript
        • Path /storage/emulated/0/Download/downloaded_file_1788588781234.javascript
        • Size 292B
        • SHA256 6562024de5c617ffd3855cce07433b559dc9389139e8856929abe008021f56f1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download