Resubmissions
10/09/2026, 16:17
260910-trgv8sscpg810/09/2026, 15:44
260910-s6rhjsdn6y810/09/2026, 15:33
260910-sy7jssdm8w8Analysis
- max time kernel
46s - max time network
153s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
10/09/2026, 15:33
Static task
static1
Behavioral task
behavioral1
Sample
GoreBox-8-5-4.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral2
Sample
GoreBox-8-5-4.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
GoreBox-8-5-4.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral4
Sample
GoreBox-8-5-4.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
GoreBox-8-5-4.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
GoreBox-8-5-4.apk
Resource
android-x86-arm-20260325-en
General
- Target GoreBox-8-5-4.apk
- Size 252.4MB
- Sample260910-sy7jssdm8w
- SHA256 752a56a97aa4dd82c5684f0f1b0e91318bb2b5f8125331f1292c9186ea29a936
- MD5 9129c0d441b9849d58b4708ef1b3cb46
- SHA1 c63fd3d399a52b5d6c2225a7b4d68becf71460a5
- SHA512 bdca8f42dfde54d7230998e6c35e55ba4f2543765eafefc228c4ef6a6cac7a2a56bcb7bd577a7d6088f4fd7ef630fa1b49998ebc4f3be61c97a20fb35b88df8b
- SSDEEP 6291456:ToyRCfZ4AaBVlHNBiQVnwKWZmnnlrzMKvP9nZzsf:ToUCSAmxiewKWZmnnWKvVZzA
- TLSH T1E6C81262B7C19E00D7F9C03994A79AB8F8DBCE0195237EEAC912B2F65D367043479721
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /system/app/Superuser.apk com.F2Games.GBDE - Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
description ioc Process Accessed system property key: ro.hardware com.F2Games.GBDE - Checks Qemu related system properties. 1 TTPs 1 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
description ioc Process Accessed system property key: qemu.hw.mainkeys com.F2Games.GBDE - Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 28 pastebin.com 29 pastebin.com 30 pastebin.com - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.F2Games.GBDE - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.F2Games.GBDE - Reads information about phone network operator. 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.F2Games.GBDE - Hides multimedia files using a .nomedia file 1 TTPs
Android's media scanner ignores any directory that contains a .nomedia file. This hides your photos, videos, and audio from the gallery and other apps.
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.F2Games.GBDE - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.F2Games.GBDE
Processes
-
com.F2Games.GBDE1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4320
Network
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
- Size 53B
- SHA256 d6166244b8592dbbaa1e6a03f6542fa98854733290b37a9acb140a3684966796
- MD5 363b0254d3a329b53d95789003543b5c
- SHA1 b2a7916a86f3fc200112d76f33ad3f1ffc5c4873
- SHA512 1fb70ee7bb99ce58de3de3376a9a7cfc0a4afaa001a1e1a59c89d8880ba347f0016be305d2ff7fd0d14d16eea4f768eff95ad23a87d52d189a14e37ed55fb701
- TLSH T12890020A2D54095DD9868E5BD160400C5761965041540D1D70CA7544520D61E3441932
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
- Size 93B
- SHA256 35225515a6b0b2f3d1e547d68ca1ccfc5d19f7091c8a9dfc6b48f457ebc7c2d7
- MD5 a6b57f36657a4b4f4af37731357bba08
- SHA1 a8e41912839a2dad4de7a95e7b6625b2755a5f42
- SHA512 ccc1c31af63f6a3b91220eca547820f609098b7184daeb2acc8015d7b9b07f0f10a9f1b3bddb0a4e5b8790624ead2210a27c2d70223cbc75d5e5a7338e609b3e
- TLSH T1BAB0120F0D640F2BC1838F4BD26031090A70477003480C0CE88F3004110D05D2402922
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
- Size 2KB
- SHA256 47282676d8fcfcc242a59652e36e3a3ca5bd563356ce33cdf3e1c11d66fa2ea6
- MD5 4c8d5f553f3aed6c0016facd0c40cd44
- SHA1 dc72619d20e1a3315c148b58a0453ce2bd3d6f54
- SHA512 740a64e2de635db0aac72fc2db24d42c87a94f00798d4af61a6e1107ff0ce5d6ad69f0ef904fa1b70fdb2630cb3cadf215f6d0c987bf4d5f915b6f84053e5c83
- TLSH T168414E6A2FDD07B7A045D95270D4610506136575CA5F7C6E207EB59031A63A8340B5F1
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
- Size 2KB
- SHA256 8655e1d7ca1f5e31d29661116f1d7aca5c9bbe85164e34c65c5734747ec10d7e
- MD5 c1c0bf4cc9765e8fb3ab9a23f9ec70de
- SHA1 c7fdb619cb80aef38c7e641df601d78a8458feae
- SHA512 5c0404071c7cddd4159a461e0499feb4480e644d90db79d8d0464721a7ea324072e808a39a0d47e9cedc98ca7c2c5d32404db21637b6d3244d7a85694721883a
- TLSH T13E515E6D1ECA0BB3D045DF06709472061B63A6768A9B7C5E10FEB580327676C301B9E2
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
- Size 111B
- SHA256 ff44c6209d2cb1a6d8991cde08a1d3e9b400f9881e1b6959da84a5d776fabc27
- MD5 5060bb7124837c666a1e495b947a097f
- SHA1 38bfc53017c24668bb7c844433fe063edc595555
- SHA512 5e34fe5db714a3aee24a7f121dd38d9426eeaa2e164f1549e1b2fefd0ce1ab12c6f71741ca4853edc8781a09a896987bd1351299444e96ce1bc14f73845a3659
- TLSH T11DB0122625C076B31C0312B27302BCC131364E0BB4F0CC41A0D28FC55D60CFD4417943
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
- Size 216B
- SHA256 acf89831b61077142b7f69564941808e7a2656c27c2e4ecfbc34330cdaf474ea
- MD5 cb374c70c821402b2553840ae6e79d3e
- SHA1 54fdaa9bee0527a066d5d1e7fe217145e4f50c95
- SHA512 46f317273cd0b01e7f0b92f1879a3a67fdc2196d069514785d83aeb2939df87da2fb813d4e612253f2db2ffefea9ee073aff425571d627431a5172759e1f334d
- TLSH T171D0C95528806AF3180356A562417CC271366E0B60E4CD8690A28FC51D50CEDC46BD43
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsTest.txt
- Size 4B
- SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
- MD5 098f6bcd4621d373cade4e832627b4f6
- SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
- SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsWebApp.html
- Size 2.3MB
- SHA256 6be3b179c4a241e3944f8c24402a0f59688dfddd6957930a87878945da5e9a22
- MD5 5d97fbf35b2043dadf2769d3b5212aa1
- SHA1 7a7e2383ba5fdeb26fcd9ba1b2954d7515fc0090
- SHA512 8734ffed2ef4466cd7acfcf310881735974a572e537895545e2520439bc9c014901f7b0219e06dd4beb5f65e2c34a4ff776e985bca7a6151a63e0f3da375cc76
- SSDEEP 24576:Gx5s19RtnWo6fco6o/dOyS2uRqnQN37o26Whomy:s5iXtLqQN37F6Whby
- TLSH T1F1B539ADB7A1203D415360E6DE3B500EB236248ED004C7FAFC5DD5C7ABA96595B32B38
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json
- Size 500B
- SHA256 d9a1468939fc8febef628af284710f79b031096aee9a36e299c6a16a64d181bf
- MD5 2fcc2ad9ca07d5b0b2ed2353033443c5
- SHA1 af79c930d9fabe5aeeff2462e4fa099238797fa7
- SHA512 a7bd9c6719deca290339bf56ae5dd44e5818193706248d8c9a774ea77c4a3f1ed0b53052935e841cc3c7bbd79765553e7c06ff5c3b40b1236e6901939731f187
- TLSH T1ECF09E5422DC7DBBDAFC1FDD5E4511EC5320B4022C04DA9DCAD92F8CA6726F72596820
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905445100000.8dd895dd/c
- Size 1B
- SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- MD5 c4ca4238a0b923820dcc509a6f75849b
- SHA1 356a192b7913b04c54574d18c28d46e6395428ab
- SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905445100000.8dd895dd/e
- Size 553B
- SHA256 13214232e9b79e8e183eeec931dd945c92d14f4e0339acc0c818dd08927de29d
- MD5 c82aaff3288cadaef767dcedbd42cff2
- SHA1 17a2e74fc3fe618bdfa7694c45197808ef4c2315
- SHA512 5c9d71e72c70443e4bef261472a3c1d4ebc32a35154f0c569fe84870d492970fabd609ea382b06129b4af8dc5599c8857bc8bca24a927a9c3a1a220ed5556453
- TLSH T14FF0266173966C3BABFBD453A8771502EBB410D07127CD7D85B083090328749669353B
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905445100000.8dd895dd/g
- Size 1B
- SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
- MD5 c81e728d9d4c2f636f067f89cc14862c
- SHA1 da4b9237bacccdf19c0760cab7aec4a8359010b0
- SHA512 40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905445100000.8dd895dd/s
- Size 432B
- SHA256 daef573870ecea763466e057beb35322a69ae2b225a38b47883421b97404fa10
- MD5 3937b8233df2c99ff59cc25858e1d719
- SHA1 445c75481c55aacc0cebe274aa738cd7072f0366
- SHA512 190df857081d70a11df3797ddb4c3a5c2d45fc5b5fea57ac59c5d2c4e832c41d3f07daf1badd120391f063881311d5111aba8f0d3040995c1081e5959ba64989
- TLSH T135E05C6273966C2A5BBB9053A4321516EAA460906227CC7D55B0431E136474A6A9213B
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905445100001.8dd895dd/e
- Size 575B
- SHA256 985fd3fc717226dc28b0d24f66ab8018fddaeb2c0bab9484fc7eda4038e1489d
- MD5 1df2193d9c04211281bf5258bfef85b1
- SHA1 40857719d3b7158a6a40554a86f458c1865bc756
- SHA512 08c1706914fd559e3a66ec1ecd5dab933aca1f7983f59473b8b1c860b3617ca24c66dc081a36ede3eb84072533e53b31af6640f0ef64c22c8d748f4568743dba
- TLSH T1D3F041A273A56C3F56FB9427A8221903ABB010D0B22BCC3D29F0830903387496A9303B
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905445100002.8dd895dd/e
- Size 1KB
- SHA256 301d77c76e2f41d774c70a6b240f4bc34e6c5d4e0fde9c56c2a4b5a477bba147
- MD5 361995b6af39cf43301add34716266ee
- SHA1 b8f9ae320993148286f12f7eb93907bc9b87231e
- SHA512 55c69952b39e71116a67d051f40a9a244e723a6f933720f62fd22805f399b19b3e6d88b3d3e93faa948d0311cbe7bf3b5d3fd6230824d224881fa0feebfe31df
- TLSH T1B33174B6EB666C3E2FB7D0867DC35C039BD450909656CEAEB990070C64986005357027
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905445100002.8dd895dd/e
- Size 1KB
- SHA256 abe6856e13f668e541e5aeba4d27929ca6d0828b1d5905969f14d75920e558b4
- MD5 d399bd3522365d73fca3c05e2f82350f
- SHA1 3415c762cfb17e965e4196079f8f3b4502210ee6
- SHA512 01e772173644321754a2a6bb103e4d0e01870f82a41ccb87368c3a846ca49c5d86bfc0d075c8a36f5ba1fe13547382df2ad4daf5f96eaee73d051389183ae919
- TLSH T1283165B6EB656C3F2FBBD09A7DC36C0397E45090D25ADEAEB9D0070C6498640635B027
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905446600003.8dd895dd/e
- Size 566B
- SHA256 5319c25aa6fe983f22db5c1ae0319d04c531be9b36a12c78bbeb11a9ca433e2e
- MD5 a0ddf27159231fc2859ceba75ad91ba8
- SHA1 68fdde5445808c1e859296e90e35bde6666ca752
- SHA512 68058b8b34ca3612bd9393ab6dad3b91575bd7c2be5eba7056477dda8ab560feffdaaae170b4f436f029a67b7fc3212f1b257ec16aa39c97de7a5dc6213e6055
- TLSH T159F0E19673952C2A6BFBD587A8671107AFB050A0B11BCC7C85B0431E02187496B93137
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/config
- Size 293B
- SHA256 83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96
- MD5 8673a8ac0b06a9d056d08d62f857ba4b
- SHA1 a351bea1932270bafbe468584058fef20dcfc31e
- SHA512 edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f
- TLSH T1CBE0C2EB680035B9D9F5C3D9E92C3A6343784E370397F8156B58182C85BB2780791D27
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/values
- Size 133B
- SHA256 f650855b28726ea2db38284534d560ff2e27cbf5a2c14633da7baa557fdb08d2
- MD5 b53e30a352e7e92e59095ade91abcec8
- SHA1 d5853963c9b993435e6f1e12deafde4488d47fa0
- SHA512 22338f4a099dc0afa817600d7201c840df25c6fa544b891cd2c951c66af8d52b2459d9165f4a7f3f7ad75ae5d073339fddd569e223df082ba031e7629147b74c
- TLSH T1F0C02BE1C920D5771870893DA1C2AD0306DF0082CD0C2C0035680C4C84310128014657
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/il2cpp/Metadata/global-metadata.dat
- Size 6.0MB
- SHA256 7e78000ca9049a6afa028f3c23d5bbb9256bea70a3a196605088b405499bea90
- MD5 e363f82a7c17f5036b16873c13ca6749
- SHA1 79ec255cf5f432497b00149a1b5f385bcae49769
- SHA512 a893e6c76d00f0f88a3c16dc425310c0cdf6bac6417d94699d2e0a353e3bcdf1e8db546a0d82201697299dbd65b0160a3f2e021b3de0e832cc1f9734efc3c5b1
- SSDEEP 49152:t3RZJJDyeeIrrWynsU6BAHNeKz86EgVUbFOxVbLmLhiFdoT6OlGPab8:wIrtzdw+FMlyX
- TLSH T17856D522FAB0DA66C50562768D69CFC152309D499E42A30BB718FB7F74B32D85E03BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/il2cpp/Resources/mscorlib.dll-resources.dat
- Size 329KB
- SHA256 c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
- MD5 21d06dbc8af6432b2b49536ed30609af
- SHA1 11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d
- SHA512 2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e
- SSDEEP 3072:c5j+evAPQ48RhHkXKSmLZsumnWpevI1kMqXkD3by+BEL:crvS8rHXSmJmnjvXkSr
- TLSH T1F7746CD8B5728E76FE57A9BCE85E928D43D9C1E2C182523B3D75C2E04D52386181EE3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/il2cpp/unity.ver
- Size 36B
- SHA256 308d45f6413e833c540ddea9ed3432cb59f7681089ce5f750c99c886a995c7c4
- MD5 7414b40ba4d4ebc709481fb0fe2bde1d
- SHA1 3e900326e8f7adb7c2962f5456122e11b58dc732
- SHA512 b8a8ced42617bdd70c274e5acc3d63be97722fa622b5db7a0ef5c9233fa984d7484f2209d394c195f5990b5a00d3457288df9bc1e583c71e104421f6df6bf658
- MD5 SHA1 SHA512