Resubmissions
20/09/2026, 19:03
260920-xqg2dsyt4m810/09/2026, 16:17
260910-trgv8sscpg810/09/2026, 15:44
260910-s6rhjsdn6y810/09/2026, 15:33
260910-sy7jssdm8w8Analysis
- max time kernel
305s - max time network
731s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
10/09/2026, 16:17
Static task
static1
Behavioral task
behavioral1
Sample
GoreBox-8-5-4.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral2
Sample
GoreBox-8-5-4.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
GoreBox-8-5-4.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral4
Sample
GoreBox-8-5-4.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
GoreBox-8-5-4.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
GoreBox-8-5-4.apk
Resource
android-x86-arm-20260325-en
General
- Target GoreBox-8-5-4.apk
- Size 252.4MB
- Sample260910-trgv8sscpg
- SHA256 752a56a97aa4dd82c5684f0f1b0e91318bb2b5f8125331f1292c9186ea29a936
- MD5 9129c0d441b9849d58b4708ef1b3cb46
- SHA1 c63fd3d399a52b5d6c2225a7b4d68becf71460a5
- SHA512 bdca8f42dfde54d7230998e6c35e55ba4f2543765eafefc228c4ef6a6cac7a2a56bcb7bd577a7d6088f4fd7ef630fa1b49998ebc4f3be61c97a20fb35b88df8b
- SSDEEP 6291456:ToyRCfZ4AaBVlHNBiQVnwKWZmnnlrzMKvP9nZzsf:ToUCSAmxiewKWZmnnWKvVZzA
- TLSH T1E6C81262B7C19E00D7F9C03994A79AB8F8DBCE0195237EEAC912B2F65D367043479721
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /system/app/Superuser.apk com.F2Games.GBDE - Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
description ioc Process Accessed system property key: ro.hardware com.F2Games.GBDE - Checks Qemu related system properties. 1 TTPs 2 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
description ioc Process Accessed system property key: qemu.hw.mainkeys com.F2Games.GBDE Accessed system property key: vendor.qemu.dev.bootcomplete com.F2Games.GBDE - Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 29 pastebin.com 30 pastebin.com 28 pastebin.com - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.F2Games.GBDE - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.F2Games.GBDE - Reads information about phone network operator. 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.F2Games.GBDE - Hides multimedia files using a .nomedia file 1 TTPs
Android's media scanner ignores any directory that contains a .nomedia file. This hides your photos, videos, and audio from the gallery and other apps.
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.F2Games.GBDE - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.F2Games.GBDE
Processes
-
com.F2Games.GBDE1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4213
Network
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
- Size 53B
- SHA256 d6166244b8592dbbaa1e6a03f6542fa98854733290b37a9acb140a3684966796
- MD5 363b0254d3a329b53d95789003543b5c
- SHA1 b2a7916a86f3fc200112d76f33ad3f1ffc5c4873
- SHA512 1fb70ee7bb99ce58de3de3376a9a7cfc0a4afaa001a1e1a59c89d8880ba347f0016be305d2ff7fd0d14d16eea4f768eff95ad23a87d52d189a14e37ed55fb701
- TLSH T12890020A2D54095DD9868E5BD160400C5761965041540D1D70CA7544520D61E3441932
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
- Size 93B
- SHA256 35225515a6b0b2f3d1e547d68ca1ccfc5d19f7091c8a9dfc6b48f457ebc7c2d7
- MD5 a6b57f36657a4b4f4af37731357bba08
- SHA1 a8e41912839a2dad4de7a95e7b6625b2755a5f42
- SHA512 ccc1c31af63f6a3b91220eca547820f609098b7184daeb2acc8015d7b9b07f0f10a9f1b3bddb0a4e5b8790624ead2210a27c2d70223cbc75d5e5a7338e609b3e
- TLSH T1BAB0120F0D640F2BC1838F4BD26031090A70477003480C0CE88F3004110D05D2402922
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
- Size 2KB
- SHA256 2a577c58330cf199523552f7f9b5894be718cad4e2bb7feb9a805ccd8433ca36
- MD5 7fca6d02f1aa081443fd267e0b509181
- SHA1 507f4799ea54d221c620664baab7d5b6a8cf438d
- SHA512 72496ec94050a99eee87d4c16796e15cf637d628fe47f1ccbcb554b76f8c09ffa12d0d0545f85c11ae564324b4fd5875cc2d8c058dd88171d5912c391d90830d
- TLSH T1F24116BC69C82C9B11BE7C55F5EE7C54347E2FB30D41318037B4AA5A0E3982E38C812A
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-private-data.json
- Size 2KB
- SHA256 b8950ac2be586fab8d9618687066e48970260a73e2e83ab130a42ff751e91279
- MD5 52aefef7fafc263f8cebe27f8ff5c10d
- SHA1 f02b7a79d9e3a337f694b7d2b8802c51ba5c42e6
- SHA512 21640ab34c812afacb37bba5295e8dbe35d902757da0f66feb4ee0b5a459a2357ae1a9e061f1fe814f09a355e91a06fc3f6fa5f67ce20708ff29fd3ea0a52ff0
- TLSH T1955129BC98C56DA701BEBD49B5AF7C413A7A2F730980358026F85E490F3681C24D811A
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
- Size 111B
- SHA256 98e94c2746e947f7187049059772d0ade5ac0c7eedc6a4514a7208b9089c1b50
- MD5 5c01fe4eb32271a80bda4a6755387696
- SHA1 6dfe8e8d361032147397f59b7786f3664a058c4d
- SHA512 2fc99944f4d9ff13f0144ffcd2b5bd1bbcf68d844df6e961f47dbfc82cae2d9361b3f86ce7adf15dc10c0117ef06088c96579d7b1f212bd960f3795e50c44514
- TLSH T1AAB092362548667B5801528A7340644821B80B0AA0B98C8900B18E855E65CBC002B14B
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.F2Games.GBDE/files/UnityAdsStorage-public-data.json
- Size 216B
- SHA256 20a92e473c368c3f9f4437697761a2eca20f709fc750f16efe229ac6f35f6741
- MD5 d747d1a4d348ff37d5efb613b865aac8
- SHA1 6dfcffdc243a9b3a462a23836fb302d9c742b96e
- SHA512 a4d0c892210fe373d87bbf9c9308965b46e48ab150c29a8e41216501f4d25737130c78626f2a8b793c0d800e0aac21956159d27b13815e38257e96e53b471e01
- TLSH T15CD0C96524846ABF1402568DA3406444B1BC0F0BA0FCDD8A50B18FC55E61CBD047F15B
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsTest.txt
- Size 4B
- SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
- MD5 098f6bcd4621d373cade4e832627b4f6
- SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
- SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsWebApp.html
- Size 2.3MB
- SHA256 6be3b179c4a241e3944f8c24402a0f59688dfddd6957930a87878945da5e9a22
- MD5 5d97fbf35b2043dadf2769d3b5212aa1
- SHA1 7a7e2383ba5fdeb26fcd9ba1b2954d7515fc0090
- SHA512 8734ffed2ef4466cd7acfcf310881735974a572e537895545e2520439bc9c014901f7b0219e06dd4beb5f65e2c34a4ff776e985bca7a6151a63e0f3da375cc76
- SSDEEP 24576:Gx5s19RtnWo6fco6o/dOyS2uRqnQN37o26Whomy:s5iXtLqQN37F6Whby
- TLSH T1F1B539ADB7A1203D415360E6DE3B500EB236248ED004C7FAFC5DD5C7ABA96595B32B38
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json
- Size 500B
- SHA256 d9a1468939fc8febef628af284710f79b031096aee9a36e299c6a16a64d181bf
- MD5 2fcc2ad9ca07d5b0b2ed2353033443c5
- SHA1 af79c930d9fabe5aeeff2462e4fa099238797fa7
- SHA512 a7bd9c6719deca290339bf56ae5dd44e5818193706248d8c9a774ea77c4a3f1ed0b53052935e841cc3c7bbd79765553e7c06ff5c3b40b1236e6901939731f187
- TLSH T1ECF09E5422DC7DBBDAFC1FDD5E4511EC5320B4022C04DA9DCAD92F8CA6726F72596820
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905711800000.72faeee6/c
- Size 1B
- SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- MD5 c4ca4238a0b923820dcc509a6f75849b
- SHA1 356a192b7913b04c54574d18c28d46e6395428ab
- SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905711800000.72faeee6/e
- Size 553B
- SHA256 c14f1fed8623f28fa2908f7d1bf5b8233957fb9f92e59571eaef343827bf23eb
- MD5 c6ca8252274872ff9086085baf573d8d
- SHA1 db5fd5857be53d4b5c013b4ac28e8839df7188d2
- SHA512 89470df042591ac914eec03fc31144ee57e7f51ca3f64cb36e1de3d559779547fd8a0f2dfba3a5947bcf0c2a1a32a8acc20c76de9758a720a81dd6c3d069f7b4
- TLSH T10DF020171787AA3BEAEA8817E4961182BBB464A4B137DEBEC0F0935E020DF4512D3433
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905711800000.72faeee6/g
- Size 1B
- SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
- MD5 c81e728d9d4c2f636f067f89cc14862c
- SHA1 da4b9237bacccdf19c0760cab7aec4a8359010b0
- SHA512 40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905711800000.72faeee6/s
- Size 432B
- SHA256 4643368635a93c0767eed27a428a57a03138fe84416218c4e4b2d7945d9be991
- MD5 d68158c3d6f449031878bda574c91058
- SHA1 20bbace0582aaec874ae0cdf0a8bf8f44d319b27
- SHA512 27f88c19488fcec4b039ed83244a9d4f26e04f78784af5ed98236134ca6747e854185df8bff588999692875a5f87a2c18a9bf808499dfb98e72760d4714eb449
- TLSH T1C9E023175746953B9ADEC443F49210826BB07054B233C8BE90F0534E110DF4517C3433
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905711800001.72faeee6/e
- Size 575B
- SHA256 3249b199f96752069704db56b331bae538e61b8fc507db7d2fa3b2aab89dd57d
- MD5 dbc7312f81224db9643e169d9ec2f27b
- SHA1 a4defefdfb57322822014fcfbcbc983149b44a2d
- SHA512 75e7ddb98e22229895b3ff4465e19d83a0a3416b5edb925e319f20fb4b1ea891423d7e6336a51a42c4e703758b7dcfd9e212819dcc68e21b8d3d749f982ce360
- TLSH T132F0411307859B3B96F9881BA481194267B06090B23BDCBE50F0830C422EF851683423
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905711800002.72faeee6/e
- Size 1KB
- SHA256 92c6d4ceeee56f76c0f3ee8381627614bb4b0b6c80e8c76b3eb34a6be922b03e
- MD5 bc654b067bd8bae01185defe43c0d835
- SHA1 60f1c0e2436965efbccab478ffe39df4306564bd
- SHA512 e16c379d4a17e5e2e8e409879c43164affd9dfc0e2465c4c267299966417d8636332bad162ce361aca4698ef892725c371e3a8f5fe3c79ec034d3a6fc5d333b6
- TLSH T13D3172B7DB669C7F2EB6C08AA9C36C8397E05050E656DEAFB4D0030C649CA001397023
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905711800002.72faeee6/e
- Size 1KB
- SHA256 8f9f612e2a693b89e14bff5465bacd246e5a326ac1394fd830e597fe3d926419
- MD5 bfe68df89102e5d8812631b11cc6276f
- SHA1 c0db76ac8227c3f605b52c9b4c9ba33a6c64ee58
- SHA512 3fa37aac0560c1dc10fae1c1a3e2ebeaa53cbe82b056385463f378337b333738771ac0a7e2c153d8fe860dac10edf36bb8cc1061435c04967375d61ae3102042
- TLSH T1F1316577DB569C7F2EBAC49A69C36C8397E45050E655DEBFB4D0070C549C6401397023
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/ArchivedEvents/178905713300003.72faeee6/e
- Size 566B
- SHA256 d41af1414404a33de49a90dd391dd5713d8241617d34f4d66d1dc70141b5522e
- MD5 41f76de19b2bbfd4d3492402984d69b1
- SHA1 359b6a207967961095cb859c61a15c4b1cdb0653
- SHA512 b2adf3c9822db1bdf4e6fc7378b4aa482bb7488569c51e2d3f37958f53ce448b99266770505e245556a9147f7a4c03dfa7a12965e98411c24dbaed1ce9ea1042
- TLSH T17BF0EB1B17469A3BBAEA898BE88611826BB06064B12BDDBD84F0930E010DF8526D3133
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/config
- Size 293B
- SHA256 83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96
- MD5 8673a8ac0b06a9d056d08d62f857ba4b
- SHA1 a351bea1932270bafbe468584058fef20dcfc31e
- SHA512 edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f
- TLSH T1CBE0C2EB680035B9D9F5C3D9E92C3A6343784E370397F8156B58182C85BB2780791D27
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/Unity/c6311228-a41d-4ef9-827c-d5d6a6091e10/Analytics/values
- Size 133B
- SHA256 f650855b28726ea2db38284534d560ff2e27cbf5a2c14633da7baa557fdb08d2
- MD5 b53e30a352e7e92e59095ade91abcec8
- SHA1 d5853963c9b993435e6f1e12deafde4488d47fa0
- SHA512 22338f4a099dc0afa817600d7201c840df25c6fa544b891cd2c951c66af8d52b2459d9165f4a7f3f7ad75ae5d073339fddd569e223df082ba031e7629147b74c
- TLSH T1F0C02BE1C920D5771870893DA1C2AD0306DF0082CD0C2C0035680C4C84310128014657
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/il2cpp/Metadata/global-metadata.dat
- Size 6.0MB
- SHA256 7e78000ca9049a6afa028f3c23d5bbb9256bea70a3a196605088b405499bea90
- MD5 e363f82a7c17f5036b16873c13ca6749
- SHA1 79ec255cf5f432497b00149a1b5f385bcae49769
- SHA512 a893e6c76d00f0f88a3c16dc425310c0cdf6bac6417d94699d2e0a353e3bcdf1e8db546a0d82201697299dbd65b0160a3f2e021b3de0e832cc1f9734efc3c5b1
- SSDEEP 49152:t3RZJJDyeeIrrWynsU6BAHNeKz86EgVUbFOxVbLmLhiFdoT6OlGPab8:wIrtzdw+FMlyX
- TLSH T17856D522FAB0DA66C50562768D69CFC152309D499E42A30BB718FB7F74B32D85E03BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/il2cpp/Resources/mscorlib.dll-resources.dat
- Size 329KB
- SHA256 c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
- MD5 21d06dbc8af6432b2b49536ed30609af
- SHA1 11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d
- SHA512 2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e
- SSDEEP 3072:c5j+evAPQ48RhHkXKSmLZsumnWpevI1kMqXkD3by+BEL:crvS8rHXSmJmnjvXkSr
- TLSH T1F7746CD8B5728E76FE57A9BCE85E928D43D9C1E2C182523B3D75C2E04D52386181EE3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Android/data/com.F2Games.GBDE/files/il2cpp/unity.ver
- Size 36B
- SHA256 308d45f6413e833c540ddea9ed3432cb59f7681089ce5f750c99c886a995c7c4
- MD5 7414b40ba4d4ebc709481fb0fe2bde1d
- SHA1 3e900326e8f7adb7c2962f5456122e11b58dc732
- SHA512 b8a8ced42617bdd70c274e5acc3d63be97722fa622b5db7a0ef5c9233fa984d7484f2209d394c195f5990b5a00d3457288df9bc1e583c71e104421f6df6bf658
- MD5 SHA1 SHA512