Analysis

  • user interaction
    yes
  • max time kernel
    47s
  • max time network
    171s
  • platform
    android-14_x64
  • resource
    android-34-x64-arm64-20260325.1-en
  • resource tags

    arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
  • submitted
    10/09/2026, 20:54

General

  • Target
    305faf52-9c41-4dda-9035-d463ced6f4ce.apk
  • Size 636.4MB
  • Sample260910-zpxfssgp3x
  • SHA256 edcb939b3882ae1cd603ec9ecba47dbb4480921fd530a5e8be35185802f44775
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Requests dangerous framework permissions 2 IoCs

Processes

  • com.F2Games.GB2721
    1⤵
    • Loads dropped Dex/Jar
    PID:4631

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        core-oj.jar

        • Path /apex/com.android.art/javalib/core-oj.jar
        • Size 5.3MB
        • SHA256 26f2a49dffe39e31bf24520d07802e1409526c0ebecf6426d447f8fa3101e9a0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrashlytics-main.so

        • Path /data/data/com.F2Games.GB2721/app_lib/libcrashlytics-main.so
        • Size 3.1MB
        • SHA256 912592c3ae9e6b05cc1f623677d20f64b7f7c9f7818ffc6bb86335bf626f0648
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrashsdk.so

        • Path /data/data/com.F2Games.GB2721/app_lib/libcrashsdk.so
        • Size 632KB
        • SHA256 a8a0f925488f09d2321942f05ba8928784b4119d3da1ff55451f96c1ccd54f9c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libucrash-core.so

        • Path /data/data/com.F2Games.GB2721/app_lib/libucrash-core.so
        • Size 95KB
        • SHA256 b9f24142b1fdad8787ef2d72b9498b49bf8b426350ad0d523c05408c09baf8ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libucrash.so

        • Path /data/data/com.F2Games.GB2721/app_lib/libucrash.so
        • Size 50KB
        • SHA256 42c811782903589415dfdaa4933ef52b6d1d4031782f3553e0f63ff6e4115c69
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libumeng-spy.so

        • Path /data/data/com.F2Games.GB2721/app_lib/libumeng-spy.so
        • Size 452KB
        • SHA256 4d36969ba18679da5061f334fef6b0a3de627e0a2ecc94a0215d26c560b25266
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libumonitor.so

        • Path /data/data/com.F2Games.GB2721/app_lib/libumonitor.so
        • Size 241KB
        • SHA256 7cf3fccfd88c49b0ab8d3eadc729eb57d5ad183b0cad68270a2bf078f77ecab0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libAK.so

        • Path /data/data/com.F2Games.GB2721/app_plugin_lib_com.ddmx.window.plugin/libAK.so
        • Size 169KB
        • SHA256 624cff317d7d64cfe76f6b3aa026e822164a69507ed6d45c1859e8c786334737
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libAKCompat.so

        • Path /data/data/com.F2Games.GB2721/app_plugin_lib_com.ddmx.window.plugin/libAKCompat.so
        • Size 172KB
        • SHA256 1dbe1b104804f37033e2d3c274ec4cf28a18dc7dfd8e39ab63e83b8127d90562
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libmod.so

        • Path /data/data/com.F2Games.GB2721/app_plugin_lib_com.ddmx.window.plugin/libmod.so
        • Size 12.0MB
        • SHA256 d06fe933b046cf812ae75b103e9a7a6846646bb1daeb55286ca6ca61761aa202
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpine.so

        • Path /data/data/com.F2Games.GB2721/app_plugin_lib_com.ddmx.window.plugin/libpine.so
        • Size 53KB
        • SHA256 51ec71b1e5bc76ec4b767a783d34d5983299c15212dda775ce834103843ed5f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libshadowhook.so

        • Path /data/data/com.F2Games.GB2721/app_plugin_lib_com.ddmx.window.plugin/libshadowhook.so
        • Size 96KB
        • SHA256 f1644b319ef10f2a509cba650f4cd817fa90c28a8e4ec332d544387a410e9493
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libshadowhook_nothing.so

        • Path /data/data/com.F2Games.GB2721/app_plugin_lib_com.ddmx.window.plugin/libshadowhook_nothing.so
        • Size 1KB
        • SHA256 f2cc6a6f94d7361be915daafff1d25b7b3af34972e7308ac540982cfd608bd32
        • MD5 SHA1 SHA512 TLSH

        hs

        • Path /data/data/com.F2Games.GB2721/cache/hs
        • Size 4.0MB
        • SHA256 b2c5d66205fead3b8f95bda10cc1fa7ec272f11d5f06828bcc47a2bf6dc98210
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base.4631.tmp

        • Path /data/data/com.F2Games.GB2721/cache/oat_primary/x86_64/base.4631.tmp
        • Size 352KB
        • SHA256 0928d0a886845825b5ddea49bb47b5414b076bf942793f420fecb15ae0bafed7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pg

        • Path /data/data/com.F2Games.GB2721/cache/pg
        • Size 3.1MB
        • SHA256 a9f74fa27d04ef28ecb1be36c13eb5c9271c7e2917831b9ed4cbc0ec34d4dee1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        game_module.apk

        • Path /data/data/com.F2Games.GB2721/files/game_module.apk
        • Size 1.9MB
        • SHA256 f16d5a9f9748b844babb09ab440fca94e6aa5be1c5122216f7a6af28e4975f3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        profileInstalled

        • Path /data/data/com.F2Games.GB2721/files/profileInstalled
        • Size 24B
        • SHA256 f5782748c3afa6233d2c14f9820084851fdae3cc5ae1a3c8fdc67295b895846a
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.F2Games.GB2721/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 f8046fb6523b685349e4ceaa5b63d5653f3d4d9bc0291dd9546056bfabd76205
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.F2Games.GB2721/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 754e96f23970c244138736a689aee1b67aa0d34c4249221e50c30fa7cb9f826d
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.F2Games.GB2721/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.F2Games.GB2721/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 aaa728380e60f43e2d92701a988de0e3a1e88ca7eec17991ff1046ec00446916
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.F2Games.GB2721/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 c49763146ad1c4d3d378a178579a582e384d27c3fe5c2466806e98419fa33dcf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.F2Games.GB2721_preferences.xml

        • Path /data/data/com.F2Games.GB2721/shared_prefs/com.F2Games.GB2721_preferences.xml
        • Size 172B
        • SHA256 020f5e9033c26ef2f962accd7ef72c6e1a9033c32c614453156ed7830921bb23
        • MD5 SHA1 SHA512 TLSH

        hs

        • Path /data/user/0/com.F2Games.GB2721/cache/hs
        • Size 3.1MB
        • SHA256 a2a09115316c89d2fecf241f34efc99ed0b4b3fe11dea19386233d1c5872436b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pg

        • Path /data/user/0/com.F2Games.GB2721/cache/pg
        • Size 264KB
        • SHA256 e5cb0a24761877be56d183fc493379c9beb991170838f3ac29b48db7d35c7177
        • MD5 SHA1 SHA512 SSDEEP TLSH