752a56a97aa4dd82c5684f0f1b0e91318bb2b5f8125331f1292c9186ea29a936

Resubmissions

20/09/2026, 19:03

260920-xqg2dsyt4m8

10/09/2026, 16:17

260910-trgv8sscpg8

10/09/2026, 15:44

260910-s6rhjsdn6y8

10/09/2026, 15:33

260910-sy7jssdm8w8

Analysis

user interaction
yes
max time kernel
1799s
max time network
1809s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
10/09/2026, 16:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
GoreBox-8-5-4.apk
Size 252.4MB
Sample260910-trgv8sscpg
SHA256 752a56a97aa4dd82c5684f0f1b0e91318bb2b5f8125331f1292c9186ea29a936
MD5 9129c0d441b9849d58b4708ef1b3cb46
SHA1 c63fd3d399a52b5d6c2225a7b4d68becf71460a5
SHA512 bdca8f42dfde54d7230998e6c35e55ba4f2543765eafefc228c4ef6a6cac7a2a56bcb7bd577a7d6088f4fd7ef630fa1b49998ebc4f3be61c97a20fb35b88df8b
SSDEEP 6291456:ToyRCfZ4AaBVlHNBiQVnwKWZmnnlrzMKvP9nZzsf:ToUCSAmxiewKWZmnnWKvVZzA
TLSH
T1E6C81262B7C19E00D7F9C03994A79AB8F8DBCE0195237EEAC912B2F65D367043479721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

collection credential_access defense_evasion discovery impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.F2Games.GBDE

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.F2Games.GBDE

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
26	pastebin.com
27	pastebin.com
28	pastebin.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.F2Games.GBDE

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.F2Games.GBDE

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Enumerates files in the device's shared storage. 1 TTPs 1 IoCs

Queries the system media store to list files across shared storage, letting the app discover what documents and media are present without opening them.

discovery

File and Directory Discovery

T1420

description	ioc	Process
URI accessed for read	content://media/external/file	com.F2Games.GBDE

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.F2Games.GBDE

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.F2Games.GBDE

com.F2Games.GBDE
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Enumerates files in the device's shared storage.
- Checks CPU information
- Checks memory information
PID:4094

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

File and Directory Discovery

T1420

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

.com.google.Chrome.d1WH3q

Path /data/data/com.F2Games.GBDE/app_webview/.com.google.Chrome.d1WH3q
Size 112B
SHA256 195942c8379542c693457e852cbe006d89ebc70bf42aa97d9d32ca68f0fb9b93
MD5 31cfedab74111a17565f6e666eb37e91
SHA1 17b4ef6997c550f54fd79f0b1b001483b8a738d1
SHA512 c8dc1c8e8b0cc7a9cee0a9f45db3078ec997bfadf1527ce1117d980f7beaec73777b5c9a188a5495df234a72078805de88525014ec2f2d5c042ba226a9e2c055
TLSH
T132B012C5FD2A473CFD00430EE6C30C43159D1B244106C95852C6481201FB5CC0723D3D
MD5 SHA1 SHA512 TLSH

Submit Download

Path /data/data/com.F2Games.GBDE/app_webview/Default/Cookies
Size 24KB
SHA256 4c3c464b7eccdfb2e7406c27542d9627e21fe112d9624648c21ccb13088f6c5e
MD5 3d2c175e84fcc5bb0c091681e66143c9
SHA1 19eca81b22e46f728c7fbf5c21a3c0f69273f752
SHA512 338a394484466e389d69fb910faa73c439a82f4e5b75e40f0de8e6cd278fa64112f7d549c825eb356d3ad0e549703f9450dbabd1354691c8849fa39ca47b547e
SSDEEP 12:TL2fFVPKMGkwtwhwydbXGwvfhowcFOaOmzdOtssh+bgc4JphQyxOUwaqJZq0S9zD:TL8FMkwmbXYFpFNYcwhQpUwJQVXH5fB
TLSH
T1B7B2598E2F347651C0F48737F9C34A972F7D602C53633B96AE4464F2DC825ABB5085AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnityAdsStorage-private-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
Size 53B
SHA256 d6166244b8592dbbaa1e6a03f6542fa98854733290b37a9acb140a3684966796
MD5 363b0254d3a329b53d95789003543b5c
SHA1 b2a7916a86f3fc200112d76f33ad3f1ffc5c4873
SHA512 1fb70ee7bb99ce58de3de3376a9a7cfc0a4afaa001a1e1a59c89d8880ba347f0016be305d2ff7fd0d14d16eea4f768eff95ad23a87d52d189a14e37ed55fb701
TLSH
T12890020A2D54095DD9868E5BD160400C5761965041540D1D70CA7544520D61E3441932
MD5 SHA1 SHA512 TLSH

Submit Download

UnityAdsStorage-private-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
Size 93B
SHA256 35225515a6b0b2f3d1e547d68ca1ccfc5d19f7091c8a9dfc6b48f457ebc7c2d7
MD5 a6b57f36657a4b4f4af37731357bba08
SHA1 a8e41912839a2dad4de7a95e7b6625b2755a5f42
SHA512 ccc1c31af63f6a3b91220eca547820f609098b7184daeb2acc8015d7b9b07f0f10a9f1b3bddb0a4e5b8790624ead2210a27c2d70223cbc75d5e5a7338e609b3e
TLSH
T1BAB0120F0D640F2BC1838F4BD26031090A70477003480C0CE88F3004110D05D2402922
MD5 SHA1 SHA512 TLSH

Submit Download

UnityAdsStorage-private-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
Size 1KB
SHA256 25b5dd8729c7174dbfada677519c75faa1ebf27057c997d521f6619cfe2ce6b8
MD5 ced13840ba369bad56af536e8519d0c4
SHA1 3706f652673196435e062a41b647ad50ed520022
SHA512 132cc80652e0ce53d8325be6ae02f4dc4832d750ec77e6194701dee47b1930a0e19cb7e4c878575e914bf95e3d51190c09de3cb6007675c9b7eb3197894dbd54
TLSH
T1CA31E9A71AF41877E168D9888539018CA75206B5500AE68268F97283969551BB2F8EC2
MD5 SHA1 SHA512 TLSH

Submit Download

UnityAdsStorage-private-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
Size 2KB
SHA256 e2ded39f2497a56da8300066db4c0945e844138ce4a7e4281a1c263535437934
MD5 22efe5f6ed8f47b31c4497bc07804a66
SHA1 dd38659ab06b5b985356cf81e3e4f460d9d70fe4
SHA512 d8661d2719f473e9f2c7fa9633e69181cc59c9063cf9de95c847049b22b885f8be3e8ed24187f1cb2e7d3534f0fbcfad1f2d6c4920c128e526856d86f66169b9
TLSH
T191512BC65AF11C77E0BCDB4C9F2A7748D76206B354566AC024F873428EEA51D62A98C3
MD5 SHA1 SHA512 TLSH

Submit Download

UnityAdsStorage-public-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

UnityAdsStorage-public-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
Size 111B
SHA256 b685dffb00503646d908d3ea86ae15e2988b02b709ee5772c6c0bec2f6c9e641
MD5 d3bcc41701e2213b0c2f43e8938f7969
SHA1 97912502b852804d04906824866af3a5c537348b
SHA512 11662d910c31751bf4a24045e9cb4a082a5a00a8d6158341c2bb4ee98cbd1ee00b3a5134b5452ee7cea92bf0d857de258e764ba080e30bcfcacfbdfc0216dc0f
TLSH
T1EDB0122E21C066771401123FF204785031B40FCBA0FCCC4100D1AF445F60CBC101726B
MD5 SHA1 SHA512 TLSH

Submit Download

UnityAdsStorage-public-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
Size 216B
SHA256 de6ec74ba3aa514122e6f79a79d25bcb65388b8a84a5015e9bb7e8240c354a35
MD5 0b9b750b252230b99ed33bf6a323af96
SHA1 35d510f201a41d980ce767f496f4eb4fb2f284ed
SHA512 f5e7a9eac0ad8e38a592b6610d15cb299793118c5a0e250adb8d4c5b73d9b2b96fccdae6a699b9d262daddb4cd4f90587ed80027809fc09465f58feaf69a1b9a
TLSH
T142D0125D20C066B75402563FB148785071B50F8B60ECCCC640E2AF841F94CBC005B35B
MD5 SHA1 SHA512 TLSH

Submit Download

com.F2Games.GBDE.v2.playerprefs.xml

Path /data/data/com.F2Games.GBDE/shared_prefs/com.F2Games.GBDE.v2.playerprefs.xml
Size 129B
SHA256 9b1958617ed977bb53bcd9f7a16c7bd423e89adf9beb0f60105dfd865d31f141
MD5 6399d119f41e3cb4ecfd9ae569a0731d
SHA1 d166654957e6141d347f00257e195dee8afdc238
SHA512 fb07f7c51bacee3b43db118b7f72a233e8a06dfe6c068dd7dc89595e5ff55b33e8c86d5d821c276d7b2e7d3c76c90ad89fac57518f2ddd7610000c0606cb1f1f
TLSH
T1A9B02BF0D0F46D5259C0080544201A4422753663020838C05C23B4300FA8240026E110
MD5 SHA1 SHA512 TLSH

Submit Download

UnityAdsCache-f1946a2f6b521ee4b11512f30eebb79a6f79b54946d2c02e814e68f305fbe84a.mp4 (deleted)

Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsCache-f1946a2f6b521ee4b11512f30eebb79a6f79b54946d2c02e814e68f305fbe84a.mp4 (deleted)
Size 559KB
SHA256 57040d403a5e7a4d355d026125d8f872b1770fd14b425e34b49a21626290bab7
MD5 516105297eb3bde1589d9abb631517aa
SHA1 2414dd5a9dc6f18321e691d760b05d3c5a5e4a6b
SHA512 29916284679ae31789e4f9bb3fb33056fc02c89f0d766c7df6ba71c80249c5e5380a719003cee7db6786792045d635f64402d8b263048eb9a8124a6d5f1eb2d6
SSDEEP 12288:MGxoIiv6X9H6Ahl9OV8WfwjPuSXNhAYy9luGZIUW5EHhlU6R:MwM+1DlSlojrXNhAYyjhZ3KEHzBR
TLSH
T18FC4221E47E299ABEE32937423CB43C3A39AECA2542343C38754667F594B784AF519C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnityAdsTest.txt (deleted)

Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsTest.txt (deleted)
Size 4B
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
MD5 SHA1 SHA512

Submit Download

UnityAdsWebApp.html (deleted)

Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)
Size 2.3MB
SHA256 6be3b179c4a241e3944f8c24402a0f59688dfddd6957930a87878945da5e9a22
MD5 5d97fbf35b2043dadf2769d3b5212aa1
SHA1 7a7e2383ba5fdeb26fcd9ba1b2954d7515fc0090
SHA512 8734ffed2ef4466cd7acfcf310881735974a572e537895545e2520439bc9c014901f7b0219e06dd4beb5f65e2c34a4ff776e985bca7a6151a63e0f3da375cc76
SSDEEP 24576:Gx5s19RtnWo6fco6o/dOyS2uRqnQN37o26Whomy:s5iXtLqQN37F6Whby
TLSH
T1F1B539ADB7A1203D415360E6DE3B500EB236248ED004C7FAFC5DD5C7ABA96595B32B38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnityAdsWebViewConfiguration.json (deleted)

Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json (deleted)
Size 500B
SHA256 d9a1468939fc8febef628af284710f79b031096aee9a36e299c6a16a64d181bf
MD5 2fcc2ad9ca07d5b0b2ed2353033443c5
SHA1 af79c930d9fabe5aeeff2462e4fa099238797fa7
SHA512 a7bd9c6719deca290339bf56ae5dd44e5818193706248d8c9a774ea77c4a3f1ed0b53052935e841cc3c7bbd79765553e7c06ff5c3b40b1236e6901939731f187
TLSH
T1ECF09E5422DC7DBBDAFC1FDD5E4511EC5320B4022C04DA9DCAD92F8CA6726F72596820
MD5 SHA1 SHA512 TLSH

Submit Download

anon_inode:[eventfd]

Path anon_inode:[eventfd]
Size 8B
SHA256 7c9fa136d4413fa6173637e883b6998d32e1d675f88cddff9dcbcf331820f4b8
MD5 33cdeccccebe80329f1fdbee7f5874cb
SHA1 3da89ee273be13437e7ecf760f3fbd4dc0e8d1fe
SHA512 991294f43425a5b80f8a5907ca7cdbb611401282585a58bb415077005428e3b4c0f661fc07ba5c45f627bd8bdcb172389ce2fda461c029b837abc70f0abbea20
MD5 SHA1 SHA512

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads