752a56a97aa4dd82c5684f0f1b0e91318bb2b5f8125331f1292c9186ea29a936

Resubmissions

20/09/2026, 19:03

260920-xqg2dsyt4m8

10/09/2026, 16:17

260910-trgv8sscpg8

10/09/2026, 15:44

260910-s6rhjsdn6y8

10/09/2026, 15:33

260910-sy7jssdm8w8

Analysis

user interaction
yes
max time kernel
899s
max time network
905s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
10/09/2026, 16:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
GoreBox-8-5-4.apk
Size 252.4MB
Sample260910-trgv8sscpg
SHA256 752a56a97aa4dd82c5684f0f1b0e91318bb2b5f8125331f1292c9186ea29a936
MD5 9129c0d441b9849d58b4708ef1b3cb46
SHA1 c63fd3d399a52b5d6c2225a7b4d68becf71460a5
SHA512 bdca8f42dfde54d7230998e6c35e55ba4f2543765eafefc228c4ef6a6cac7a2a56bcb7bd577a7d6088f4fd7ef630fa1b49998ebc4f3be61c97a20fb35b88df8b
SSDEEP 6291456:ToyRCfZ4AaBVlHNBiQVnwKWZmnnlrzMKvP9nZzsf:ToUCSAmxiewKWZmnnWKvVZzA
TLSH
T1E6C81262B7C19E00D7F9C03994A79AB8F8DBCE0195237EEAC912B2F65D367043479721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

collection credential_access defense_evasion discovery impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.F2Games.GBDE

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.F2Games.GBDE

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
50	pastebin.com
51	pastebin.com
52	pastebin.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.F2Games.GBDE

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.F2Games.GBDE

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.F2Games.GBDE

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.F2Games.GBDE

com.F2Games.GBDE
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Checks CPU information
- Checks memory information
PID:4863

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

UnityAdsStorage-private-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
Size 53B
SHA256 d6166244b8592dbbaa1e6a03f6542fa98854733290b37a9acb140a3684966796
MD5 363b0254d3a329b53d95789003543b5c
SHA1 b2a7916a86f3fc200112d76f33ad3f1ffc5c4873
SHA512 1fb70ee7bb99ce58de3de3376a9a7cfc0a4afaa001a1e1a59c89d8880ba347f0016be305d2ff7fd0d14d16eea4f768eff95ad23a87d52d189a14e37ed55fb701
TLSH
T12890020A2D54095DD9868E5BD160400C5761965041540D1D70CA7544520D61E3441932
MD5 SHA1 SHA512 TLSH

Submit Download

UnityAdsStorage-private-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
Size 93B
SHA256 35225515a6b0b2f3d1e547d68ca1ccfc5d19f7091c8a9dfc6b48f457ebc7c2d7
MD5 a6b57f36657a4b4f4af37731357bba08
SHA1 a8e41912839a2dad4de7a95e7b6625b2755a5f42
SHA512 ccc1c31af63f6a3b91220eca547820f609098b7184daeb2acc8015d7b9b07f0f10a9f1b3bddb0a4e5b8790624ead2210a27c2d70223cbc75d5e5a7338e609b3e
TLSH
T1BAB0120F0D640F2BC1838F4BD26031090A70477003480C0CE88F3004110D05D2402922
MD5 SHA1 SHA512 TLSH

Submit Download

UnityAdsStorage-private-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
Size 3KB
SHA256 39db2434faa0dfd1783cc9ef2c28ba55a2ace348d38bd8c4b360183d27a76e57
MD5 5f06e8484f0e177cb682df816c0e18e6
SHA1 94451ef0dbbf3314ede0109e2dcbe5f82a28c972
SHA512 a672460d389a108c82c4bbe971345b39a435246a935728fc139456c521d629d40eb5b6e68d2988d94664f668ead911a6e50fa103630c22b0e5c79e3ecf6f7f32
TLSH
T148616B94C2099C331CA4C3A7FA9B44BE9EEE03D016F9938D314929B4D36D64CD764442
MD5 SHA1 SHA512 TLSH

Submit Download

UnityAdsStorage-private-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
Size 4KB
SHA256 b821e81c1e2eb0913ef68e0feb65bce3b38eb43cd7440bdc60b4480c8ef23fb2
MD5 e05f59081ee0ec348e7ae5ac06c41c3c
SHA1 bec3aeda75cf5ff11c141090c1d6e7da3032b303
SHA512 51fcc1b9b51de9d7f4aaad509d4c58dd64ecbc82fd7913ea43a6741e01766e20b92fdfa479979da82ed38b514161a59713a893e79a5eec8d7b117682a17be704
SSDEEP 96:IwlUxGt1WMz9TJGIvpamBonKN2gfT4u7kejSMdUM9X8NECuH:FhJvLipgcMThU0
TLSH
T1C3915C80C305AC330C94D34EFB8B697D9FFE13E016E49688A0CD29D8C7AAD1CD61D442
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnityAdsStorage-public-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

UnityAdsStorage-public-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
Size 111B
SHA256 2745ce389e61b6d9fcfa7bc9094af57aa4903a1712a70104a9e66a67bf1d3d82
MD5 c3e51fedc59fec0bc541b3fb15149d96
SHA1 b9c8a4d3bc40e549c3f07fea58ba85c4d7956c72
SHA512 067ce93a51c754fef8d9146636c6075c1920e7a8d05da6ecef432e25611841f698ef2a244d0c31d51132c12be6e67fabf0eb8c3c6db2246457f307b8da067fc1
TLSH
T136B0122E234066772445D20F7241A4D033F40E2BB0F0CC4904D18F445FE4CBC003714B
MD5 SHA1 SHA512 TLSH

Submit Download

UnityAdsStorage-public-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
Size 216B
SHA256 dea9de293f7c26d545c71f0d276c9f690953363d38fb9166b42a5a537ecaa5a1
MD5 1730c8fae3f632c72345435d7a2d9365
SHA1 8478c19b206fa1948db623a5565f37ce5bbbf88e
SHA512 a0ed1fbc2cda2b7e062d467e7799015cad2f8ee7cc2de769b4ddcd07df0bde45f371dc1afa2a2e4b64af5fc7bcb384fbf7b057bd63568d58e10cff0718f59811
TLSH
T193D0125E228066B71006DA0F7240B4D073B50F2B70F4CD8A04E18F482F94CBC046B18B
MD5 SHA1 SHA512 TLSH

Submit Download

goldfish_pipe

Path /dev/goldfish_pipe
Size 76B
SHA256 6a8691ca50b44d6cec5e829f6760fdc9ae4817a43a5b2628137b0229a4e15150
MD5 b98d02290544f6cc3aaa2411783837c1
SHA1 77fb59ff6be3ae8cd2371cae25f93a6593189ef6
SHA512 fd20647133ed1e7062db18855c46823b619253e7910e2f16ad1d8b5acbe293814240cb5c31b411d038e0b01687dc13a5ee87ed163e6f7aaa81d33267f8c2f797
TLSH
T13CA0027AC08C022AC20C217087A81E80B6E2606412A099A1923F70238607B02066C604
MD5 SHA1 SHA512 TLSH

Submit Download

timerslack_ns

Path /proc/4940/timerslack_ns
Size 8B
SHA256 2ddb67b8a8c259ffaff61a5abdd38f5b5d6f1c6e2af4344c85b17b77af2451cc
MD5 d46bf94e9eb1d22281a71504685082ac
SHA1 e4e0629aef7425ba63e897bc471f8625de44edd3
SHA512 68a1a1fd4de784e3a2e0e956d0a63ac4ca540ef90e7fd9a2ddc92cf68e52e29792db64f6615054a6e5460467f0b7abe055c899136d98ce6ebab3d580bc55ec86
MD5 SHA1 SHA512

Submit Download

UnityAdsCache-ee6b0ac61d7b300e56b66ecb0d92f52d760a735c13729b69b815d9d056445fad.mp4 (deleted)

Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsCache-ee6b0ac61d7b300e56b66ecb0d92f52d760a735c13729b69b815d9d056445fad.mp4 (deleted)
Size 2.5MB
SHA256 3210c035adff4057545c10f3a717781ad0b93f6e220293b793ba756af7f11acc
MD5 265f2f48ffa5937c329c156abe0e3632
SHA1 bff99998b8872d9a313f26f749a58be6686b86f2
SHA512 9e64f9ec38cb690ba75eceefa32b02726f7d7f8ba69f4f7f37156227e7b836a7e8e6a66d4b880a406e30a3174cc1aa66d621af336b9e99528b5a173904791e00
SSDEEP 49152:RQHc8UhE2aOPQ3y9Q+ySdNqXTIrvPaIcMkB+lVVgZ/6njfhe0d8oILih0W:RQHc8UhvocfdNoTIbPJcJB+jnrhe0Uo9
TLSH
T1AFC5125AB3E966B7FC7427B744FB63526928FE1002E107D73A4D23358C30AD96E478A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnityAdsTest.txt (deleted)

Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsTest.txt (deleted)
Size 4B
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
MD5 SHA1 SHA512

Submit Download

UnityAdsWebApp.html (deleted)

Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)
Size 2.3MB
SHA256 6be3b179c4a241e3944f8c24402a0f59688dfddd6957930a87878945da5e9a22
MD5 5d97fbf35b2043dadf2769d3b5212aa1
SHA1 7a7e2383ba5fdeb26fcd9ba1b2954d7515fc0090
SHA512 8734ffed2ef4466cd7acfcf310881735974a572e537895545e2520439bc9c014901f7b0219e06dd4beb5f65e2c34a4ff776e985bca7a6151a63e0f3da375cc76
SSDEEP 24576:Gx5s19RtnWo6fco6o/dOyS2uRqnQN37o26Whomy:s5iXtLqQN37F6Whby
TLSH
T1F1B539ADB7A1203D415360E6DE3B500EB236248ED004C7FAFC5DD5C7ABA96595B32B38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnityAdsWebViewConfiguration.json (deleted)

Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json (deleted)
Size 500B
SHA256 d9a1468939fc8febef628af284710f79b031096aee9a36e299c6a16a64d181bf
MD5 2fcc2ad9ca07d5b0b2ed2353033443c5
SHA1 af79c930d9fabe5aeeff2462e4fa099238797fa7
SHA512 a7bd9c6719deca290339bf56ae5dd44e5818193706248d8c9a774ea77c4a3f1ed0b53052935e841cc3c7bbd79765553e7c06ff5c3b40b1236e6901939731f187
TLSH
T1ECF09E5422DC7DBBDAFC1FDD5E4511EC5320B4022C04DA9DCAD92F8CA6726F72596820
MD5 SHA1 SHA512 TLSH

Submit Download

anon_inode:[eventfd]

Path anon_inode:[eventfd]
Size 8B
SHA256 7c9fa136d4413fa6173637e883b6998d32e1d675f88cddff9dcbcf331820f4b8
MD5 33cdeccccebe80329f1fdbee7f5874cb
SHA1 3da89ee273be13437e7ecf760f3fbd4dc0e8d1fe
SHA512 991294f43425a5b80f8a5907ca7cdbb611401282585a58bb415077005428e3b4c0f661fc07ba5c45f627bd8bdcb172389ce2fda461c029b837abc70f0abbea20
MD5 SHA1 SHA512

Submit Download

socket:[76867]

Path socket:[76867]
Size 48B
SHA256 51a6e6650c4538c86ce15f77b365caaaf64f68d2ef0d8708007bee2fccff65e2
MD5 b4853afb660816e4ab8d8f96aca56847
SHA1 0e5dd8cc58e508c1892b6d273088b68725e37e57
SHA512 ab611393bdca649d9e14690564285289adb6fb0cd1a491038c84f655e8c479ca45ea6cd035570f5e8c87b5827001a3ad5e31f01f1f9ebb4b8bc23fd779ec1e5f
MD5 SHA1 SHA512

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads