752a56a97aa4dd82c5684f0f1b0e91318bb2b5f8125331f1292c9186ea29a936

Resubmissions

20/09/2026, 19:03

260920-xqg2dsyt4m8

10/09/2026, 16:17

260910-trgv8sscpg8

10/09/2026, 15:44

260910-s6rhjsdn6y8

10/09/2026, 15:33

260910-sy7jssdm8w8

Analysis

user interaction
yes
max time kernel
899s
max time network
847s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
10/09/2026, 16:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
GoreBox-8-5-4.apk
Size 252.4MB
Sample260910-trgv8sscpg
SHA256 752a56a97aa4dd82c5684f0f1b0e91318bb2b5f8125331f1292c9186ea29a936
MD5 9129c0d441b9849d58b4708ef1b3cb46
SHA1 c63fd3d399a52b5d6c2225a7b4d68becf71460a5
SHA512 bdca8f42dfde54d7230998e6c35e55ba4f2543765eafefc228c4ef6a6cac7a2a56bcb7bd577a7d6088f4fd7ef630fa1b49998ebc4f3be61c97a20fb35b88df8b
SSDEEP 6291456:ToyRCfZ4AaBVlHNBiQVnwKWZmnnlrzMKvP9nZzsf:ToUCSAmxiewKWZmnnWKvVZzA
TLSH
T1E6C81262B7C19E00D7F9C03994A79AB8F8DBCE0195237EEAC912B2F65D367043479721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

collection credential_access defense_evasion discovery impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.F2Games.GBDE

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	com.F2Games.GBDE

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.F2Games.GBDE

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
72	pastebin.com
73	pastebin.com
74	pastebin.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.F2Games.GBDE

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.F2Games.GBDE

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Hides multimedia files using a .nomedia file 1 TTPs
Android's media scanner ignores any directory that contains a .nomedia file. This hides your photos, videos, and audio from the gallery and other apps.
defense_evasion

Conceal Multimedia Files
T1628.003

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.F2Games.GBDE

com.F2Games.GBDE
1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Checks memory information
PID:3313

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Conceal Multimedia Files

T1628.003

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

base.3313.tmp

Path /data/data/com.F2Games.GBDE/cache/oat_primary/x86_64/base.3313.tmp
Size 82KB
SHA256 5ba25c2a1d78eb16387b92e7ee214bbd1ec23e7ba73a0ec853fd8b81ecd180ae
MD5 bfbf8be85fd6a11a05eb4c201ddfd50a
SHA1 037534e221310265010887a2bdacf2f7ee36c1df
SHA512 65181885a3c5cb19464132c9254e1a16c6927fd929216438f168a27df64dd52b8713d3c3fae066478fc6f9656c0c626eb7b4f44f0510c104e23d0798542fd240
SSDEEP 1536:W67R89TrwBNv8xYNszlopVj27MGWimJrbY54IJwR6ln/GF:J7RWTMBNtIKD2QziArgFpnu
TLSH
T19283295FEAA39055C1E7AEF7EB8A12ECE92E8024131D1A009432777E9427B51E710FA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnityAdsStorage-private-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
Size 53B
SHA256 d6166244b8592dbbaa1e6a03f6542fa98854733290b37a9acb140a3684966796
MD5 363b0254d3a329b53d95789003543b5c
SHA1 b2a7916a86f3fc200112d76f33ad3f1ffc5c4873
SHA512 1fb70ee7bb99ce58de3de3376a9a7cfc0a4afaa001a1e1a59c89d8880ba347f0016be305d2ff7fd0d14d16eea4f768eff95ad23a87d52d189a14e37ed55fb701
TLSH
T12890020A2D54095DD9868E5BD160400C5761965041540D1D70CA7544520D61E3441932
MD5 SHA1 SHA512 TLSH

Submit Download

UnityAdsStorage-private-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
Size 93B
SHA256 35225515a6b0b2f3d1e547d68ca1ccfc5d19f7091c8a9dfc6b48f457ebc7c2d7
MD5 a6b57f36657a4b4f4af37731357bba08
SHA1 a8e41912839a2dad4de7a95e7b6625b2755a5f42
SHA512 ccc1c31af63f6a3b91220eca547820f609098b7184daeb2acc8015d7b9b07f0f10a9f1b3bddb0a4e5b8790624ead2210a27c2d70223cbc75d5e5a7338e609b3e
TLSH
T1BAB0120F0D640F2BC1838F4BD26031090A70477003480C0CE88F3004110D05D2402922
MD5 SHA1 SHA512 TLSH

Submit Download

UnityAdsStorage-private-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
Size 2KB
SHA256 23120f6eb53fa88073d7b0241ac7a4bdaf26f413d318d796cf27e10fb955641e
MD5 1b6a81dac6dc501ca60e5a0825e93be3
SHA1 c7bc1de9da12af312fb696c531305a05c2c70131
SHA512 e9a408a285678ecac4514f74f77a10670aa853de4d91908b73e19b3c0d37d4d80395fb2c63f0938dc5f40c654f588fd67703c25474b162422db557d7064b93ac
TLSH
T1C9512CCC722D7FD2AC5FE96E5E79604884A285B42FF8504C349F812BCD6D21CA122A13
MD5 SHA1 SHA512 TLSH

Submit Download

UnityAdsStorage-private-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
Size 2KB
SHA256 807e87948ac12566657d12cdb0bd4d30279cc33450cdf54bf1b5d785a9a43002
MD5 6ae7e8b2568ba6e1b8f84cf7ef692934
SHA1 a9169d15a0bf9d1a8fc829a8ca63d7e417557d23
SHA512 175b326e55649cbfddd8979896364098afc1c19a4a914b4a5f33017c94056cc33bdfcbbc703f7c0d7b62c2a33ba685fe44ab0c42dff76e8cb64ba8ea4e03e72f
TLSH
T150514DCC711C7FF2DCABEE6E1A7A604485E25AB41BF9604C24EFC51BCDAC11C5022513
MD5 SHA1 SHA512 TLSH

Submit Download

UnityAdsStorage-public-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

UnityAdsStorage-public-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
Size 111B
SHA256 7807b0c1f4d2badc30d2df4a86db08b035a721e57e0dcad5b42c1f5de330e1e3
MD5 b4f4afd5875befb40d3878a0d185bc36
SHA1 f71384b0843609f2c01e53b017f5251bf7104e67
SHA512 a27f62f9a6dc6643560446d4bb05cf64b81c56ab9ec3a1b30a426a3e1a89b3867c8607ca21dd35c521f6e9ed7227df7f3593e973a69276ec72f784cb1ae36c29
TLSH
T178B092AA2141767F1885526B7180646821B40A0AF0A38C4100B18E445F60CAC041B25B
MD5 SHA1 SHA512 TLSH

Submit Download

UnityAdsStorage-public-data.json

Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
Size 216B
SHA256 3669a88856f7c83d4607da379dc7949690b62b9efd266c9e977e747967a160b8
MD5 f37af5865f653e59e10f1191f000e3f2
SHA1 f6d1af9d19e0a1dbe2392ba7a861238d80826aa4
SHA512 fa8ebdfa4df0cd14444ba7d87b3b047ef5c88b7505599e30286c186344c4c572e070b99837f5e6a444f846f8452080241b11459fb1a537a1b47a1d0255e6a029
TLSH
T141D0129D208176FF1846562F71C0657471B40E0BB0E6CD8600F18F841F94CBD045F95B
MD5 SHA1 SHA512 TLSH

Submit Download

com.F2Games.GBDE.v2.playerprefs.xml

Path /data/data/com.F2Games.GBDE/shared_prefs/com.F2Games.GBDE.v2.playerprefs.xml
Size 129B
SHA256 9b1958617ed977bb53bcd9f7a16c7bd423e89adf9beb0f60105dfd865d31f141
MD5 6399d119f41e3cb4ecfd9ae569a0731d
SHA1 d166654957e6141d347f00257e195dee8afdc238
SHA512 fb07f7c51bacee3b43db118b7f72a233e8a06dfe6c068dd7dc89595e5ff55b33e8c86d5d821c276d7b2e7d3c76c90ad89fac57518f2ddd7610000c0606cb1f1f
TLSH
T1A9B02BF0D0F46D5259C0080544201A4422753663020838C05C23B4300FA8240026E110
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof.sfzpBj.tmp

Path /data/misc/profiles/cur/0/com.F2Games.GBDE/primary.prof.sfzpBj.tmp
Size 1KB
SHA256 a065764c047eeece1495e577a45407a803b4e664e83c96bf1b03840d8a6959bd
MD5 085a036bd04f183d3dc5dbc980d1cfa9
SHA1 03d04fcfc627a65fd96792f31003852f30c2a0bb
SHA512 0de129e37c976d130fa67f7f6e4c93bdb181fe2f044679fe60bd8386beb4cb55a71cd38962d62b92341106ba6876be12274a1bcaaeb78eec340a2ab310148850
TLSH
T11711DCF815E4B7D2FC444A3150412CC6D133435952CE5CD11FD1D81EC26B75CFAE5464
MD5 SHA1 SHA512 TLSH

Submit Download

UnityAdsTest.txt

Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsTest.txt
Size 4B
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
MD5 SHA1 SHA512

Submit Download

UnityAdsWebApp.html

Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsWebApp.html
Size 2.3MB
SHA256 6be3b179c4a241e3944f8c24402a0f59688dfddd6957930a87878945da5e9a22
MD5 5d97fbf35b2043dadf2769d3b5212aa1
SHA1 7a7e2383ba5fdeb26fcd9ba1b2954d7515fc0090
SHA512 8734ffed2ef4466cd7acfcf310881735974a572e537895545e2520439bc9c014901f7b0219e06dd4beb5f65e2c34a4ff776e985bca7a6151a63e0f3da375cc76
SSDEEP 24576:Gx5s19RtnWo6fco6o/dOyS2uRqnQN37o26Whomy:s5iXtLqQN37F6Whby
TLSH
T1F1B539ADB7A1203D415360E6DE3B500EB236248ED004C7FAFC5DD5C7ABA96595B32B38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnityAdsWebViewConfiguration.json

Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json
Size 500B
SHA256 d9a1468939fc8febef628af284710f79b031096aee9a36e299c6a16a64d181bf
MD5 2fcc2ad9ca07d5b0b2ed2353033443c5
SHA1 af79c930d9fabe5aeeff2462e4fa099238797fa7
SHA512 a7bd9c6719deca290339bf56ae5dd44e5818193706248d8c9a774ea77c4a3f1ed0b53052935e841cc3c7bbd79765553e7c06ff5c3b40b1236e6901939731f187
TLSH
T1ECF09E5422DC7DBBDAFC1FDD5E4511EC5320B4022C04DA9DCAD92F8CA6726F72596820
MD5 SHA1 SHA512 TLSH

Submit Download

socket:[23047]

Path socket:[23047]
Size 48B
SHA256 51a6e6650c4538c86ce15f77b365caaaf64f68d2ef0d8708007bee2fccff65e2
MD5 b4853afb660816e4ab8d8f96aca56847
SHA1 0e5dd8cc58e508c1892b6d273088b68725e37e57
SHA512 ab611393bdca649d9e14690564285289adb6fb0cd1a491038c84f655e8c479ca45ea6cd035570f5e8c87b5827001a3ad5e31f01f1f9ebb4b8bc23fd779ec1e5f
MD5 SHA1 SHA512

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads