BMGF V2[.]0 Release[.]apk

Resubmissions

07/11/2026, 13:06

261107-qb76psdt6j

07/11/2026, 13:02

261107-p9zfsax18j6

Sharing

Copy URL Twitter E-mail

General

Target
BMGF V2.0 Release.apk
Size 619.8MB
Sample261107-p9zfsax18j
SHA256 9c8a9b735007b8173e083dc66dd2deb93194723fd028cf92f889babf82faae6a
MD5 fc591d10b02b5313e913c0f63a661306
SHA1 bf1b539126eee64459d23190823a0d45f03d69a1
SHA512 fd13fb130102778fd441aaa8a669353fb2dacd4a6a17bd1b0c5e63018930e8b532b81a2570a0db6215b585c208235c625486c35b536a11bbc0aa60335e7e0283
SSDEEP 12582912:2wseHeye7te6SnKfVwEtzhe+w5eu9yOleiVzNePbJfjcLe/aWCeNsyKtGZ7cws1L:9seHeyeBeLnKfVwEtzhe+me0leuzNeVw
TLSH
T11769F114BA5AAC1EC032663241674F91EA3EEC958A3445FB733F792D1FF6B0C15225E2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
BMGF V2.0 Release.apk

File Explorer

BMGF V2.0 Release.apk

.apk 619.8MB

BMGF V2.0 Release.apk

SHA256 9c8a9b735007b8173e083dc66dd2deb93194723fd028cf92f889babf82faae6a
MD5 fc591d10b02b5313e913c0f63a661306
SHA1 bf1b539126eee64459d23190823a0d45f03d69a1
SHA512 fd13fb130102778fd441aaa8a669353fb2dacd4a6a17bd1b0c5e63018930e8b532b81a2570a0db6215b585c208235c625486c35b536a11bbc0aa60335e7e0283
SSDEEP 12582912:2wseHeye7te6SnKfVwEtzhe+w5eu9yOleiVzNePbJfjcLe/aWCeNsyKtGZ7cws1L:9seHeyeBeLnKfVwEtzhe+me0leuzNeVw
TLSH
T11769F114BA5AAC1EC032663241674F91EA3EEC958A3445FB733F792D1FF6B0C15225E2
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

940ef9f1784de58c290e707e79febd09cd540c009c285f0a33eb242511b21cff

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=BHT,OU=BHT,O=BHT,L=BHT,ST=BHT,C=BHT

com.sandboxol.blockymods

com.sandboxol.center.view.dialog.RechargeDialog

com.sandboxol.center.view.dialog.PayFeedbackDialog

com.sandboxol.blockymods.view.dialog.OverallSituationDialog

com.facebook.FacebookActivity

com.facebook.CustomTabActivity

android.intent.action.VIEW android.intent.action.VIEW

com.alibaba.sdk.android.feedback.windvane.CustomHybirdActivity

com.sandboxol.blockymods.view.fragment.more.TestMonthlyActivity

com.sandboxol.blockymods.view.activity.flash.SplashActivity

android.intent.action.MAIN

com.sandboxol.blockymods.view.activity.host.HostActivity

android.intent.action.VIEW android.intent.action.VIEW

com.sandboxol.center.view.activity.TemplateActivity

com.sandboxol.center.view.activity.NoToolbarTemplateActivity

com.sandboxol.center.view.activity.SingleTemplateActivity

com.sandboxol.gamedetail.view.GameDetailTemplateActivity

com.sandboxol.center.view.activity.MTTemplateActivity

com.sandboxol.center.view.activity.TemplateNewActivity

com.sandboxol.common.base.app.mvvm.MvvmNoToolbarTemplateActivity

com.sandboxol.webcelebrity.view.chat.WebCelebrityConversationActivity

com.sandboxol.blockymods.view.dialog.UpdateAppDialog

com.sandboxol.blockymods.view.dialog.UploadResAndEnterGameDialog

com.sandboxol.blockymods.view.dialog.bigpushevent.BigPushEventEnterGameDialog

com.sandboxol.center.view.dialog.VipGcubeGiftOneButtonDialog

com.sandboxol.blockymods.view.dialog.InvitePlayGameTips

com.sandboxol.center.view.dialog.TopLoadingDialog

com.sandboxol.blockymods.view.dialog.NetworkFailedDialogActivity

com.sandboxol.center.view.dialog.ShieldingOpengl2DialogActivity

com.sandboxol.center.view.dialog.BlockedDeviceDialog

com.sandboxol.blockymods.view.activity.friends.FriendInfoActivity

com.sandboxol.blockymods.view.activity.persondetails.PersonDetailsActivity

com.sandboxol.blockymods.view.activity.searchfriend.SearchFriendActivity

com.sandboxol.center.view.activity.SimpleWebActivity

com.sandboxol.blockymods.view.activity.tribesearch.TribeSearchActivity

com.sandboxol.center.view.dialog.AdsGameRewardDialog

com.sandboxol.blockymods.view.activity.friendmatch.FriendMatchActivity

com.sandboxol.blockymods.view.dialog.partyfriend.PartyFriendInfoDialog

com.sandboxol.wheellucky.activity.wheel.WheelActivity

com.sandboxol.blockymods.wheel

com.sandboxol.jackpot.view.activity.JackpotActivity

com.sandboxol.blockymods.jackpot

com.sandboxol.videosubmit.view.activity.VideoSubmitActivity

com.sandboxol.blockymods.videosubmit

com.sandboxol.center.view.activity.webview.WebViewActivity

android.intent.action.VIEW

com.sandboxol.blockymods.view.activity.pidProxy.PidProxyActivity

com.sandboxol.transparent.proxy

com.sandboxol.imchat.ui.acitivity.ConversationActivity

android.intent.action.VIEW

com.sandboxol.imchat.ui.acitivity.ConversationPartyActivity

android.intent.action.VIEW

com.sandboxol.login.view.activity.makerole.MakeRoleActivity

com.sandboxol.blockymods.view.activity.thirdproxy.ThirdProxyActivity

com.sandboxol.center.view.dialog.PasswordSettingDialog

com.sandboxol.halloween.view.activity.main.EventMainActivity

com.sandboxol.blockymods.view.fragment.searchgame.SearchGameActivity

com.yalantis.ucrop.UCropActivity

com.sandboxol.blockymods.view.fragment.verification.VerificationFragment

com.sandboxol.blockymods.view.fragment.inbox.MessageActivity

com.sandboxol.center.view.dialog.verificationcode.ChangePasswordDialog

com.sandboxol.gamedetail.view.DemoActivity

com.sandboxol.common.utils.ProcessPhoenix

com.github.moduth.blockcanary.ui.DisplayActivity

com.sandboxol.oversea.view.TempGooglePayActivity

com.sandboxol.login.view.activity.login.LoginActivity

com.sandboxol.blockmango.BlockManEchoesActivity

com.sandboxol.blockmango.VerticalEchoesActivity

com.sandboxol.blockmango.GameVideoActivity

com.sandboxol.blockmango.webvideo.WebVideoActivity

com.sandboxol.recharge.dialog.rechargeshop.RechargeShopDialog

com.sandboxol.decorate.view.activity.preview.DressPreviewDialog

com.sandboxol.googlepay.view.fragment.recharge.RechargeActivity

com.sandboxol.goldencube.view.GoldenCubeTaskDialog

com.sandboxol.goldencube.view.activity.ChooseJerseyActivity

com.sandboxol.vip.view.dialog.subscribe.SubscribeBottomGameActivity

com.sandboxol.newvip.view.home.VipHomeActivity

com.sandboxol.newvip.view.activity.effect.VipDressActivity

com.sandboxol.newvip.view.tokendraw.TokenDrawActivity

com.sandboxol.newvip.view.dressdraw.DressDrawActivity

com.sandboxol.newvip.view.incrementdraw.IncrementDrawActivity

com.sandboxol.newvip.view.goldenegg.BreakGoldenEggActivity

com.sandboxol.gift.view.limited.DoubleGcubeActivity

com.sandboxol.themedecorate.view.activity.ThemeDecorateActivity

com.sandboxol.webcelebrity.square.ui.CreatePostActivity

com.sandboxol.webcelebrity.square.ui.detail.PostDetailActivity

com.sandboxol.webcelebrity.square.widget.floateditor.FloatEditorActivity

com.sandboxol.webcelebrity.square.ui.SearchUserActivity

com.sandboxol.webcelebrity.activity.group.GroupCelebrityActivity

com.sandboxol.webcelebrity.myspace.ui.MySpaceActivity

com.sandboxol.webcelebrity.myspace.ui.income.GiftShowListActivity

com.sandboxol.webcelebrity.myspace.ui.list.MyListInfoActivity

com.sandboxol.community.view.CommunityWelfareActivity

com.net.ad.activity.NetVideoActivity

com.net.ad.activity.NetInterstitialActivity

me.iwf.photopicker.PhotoPickerActivity

me.iwf.photopicker.PhotoPagerActivity

com.google.android.gms.ads.AdActivity

com.google.android.gms.ads.OutOfContextTestingActivity

com.twitter.sdk.android.tweetui.PlayerActivity

com.twitter.sdk.android.tweetui.GalleryActivity

io.rong.imkit.conversationlist.RongConversationListActivity

io.rong.imkit.conversation.RongConversationActivity

io.rong.imkit.subconversationlist.RongSubConversationListActivity

io.rong.imkit.feature.mention.MentionMemberSelectActivity

io.rong.imkit.activity.RongWebviewActivity

io.rong.imkit.activity.FilePreviewActivity

io.rong.imkit.activity.PicturePagerActivity

io.rong.imkit.activity.ForwardSelectConversationActivity

io.rong.imkit.activity.CombineWebViewActivity

io.rong.imkit.activity.WebFilePreviewActivity

io.rong.imkit.activity.CombinePicturePagerActivity

io.rong.imkit.activity.GIFPreviewActivity

io.rong.imkit.picture.PictureSelectorActivity

io.rong.imkit.picture.PictureSelectorCameraEmptyActivity

io.rong.imkit.picture.PicturePreviewActivity

io.rong.imkit.picture.PictureVideoPlayActivity

com.yandex.mobile.ads.common.AdActivity

com.amazonaws.mobile.auth.userpools.ForceChangePasswordActivity

com.amazonaws.mobile.auth.userpools.ForgotPasswordActivity

com.amazonaws.mobile.auth.userpools.SignUpActivity

com.amazonaws.mobile.auth.userpools.MFAActivity

com.amazonaws.mobile.auth.userpools.SignUpConfirmActivity

com.amazonaws.mobile.auth.ui.SignInActivity

com.facebook.CustomTabMainActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.alibaba.sdk.android.feedback.impl.ErrorPageActivity

com.facebook.ads.AudienceNetworkActivity

com.amazonaws.mobileconnectors.cognitoauth.activities.CustomTabsManagerActivity

com.unity3d.services.ads.adunit.AdUnitActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.twitter.sdk.android.tweetcomposer.ComposerActivity

com.twitter.sdk.android.core.identity.OAuthActivity

com.android.billingclient.api.ProxyBillingActivity

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageLink2Activity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialExpressActivity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

com.bytedance.sdk.openadsdk.activity.TTWebsiteActivity

com.bytedance.sdk.openadsdk.activity.TTAppOpenAdActivity

com.tp.adx.sdk.ui.InnerWebViewActivity

com.tp.adx.sdk.ui.InnerActivity

com.just.agentweb.ActionActivity

com.tradplus.crosspro.ui.CPAdActivity

com.tradplus.crosspro.ui.ApkConfirmDialogActivity

com.mbridge.msdk.reward.player.MBRewardVideoActivity

sg.bigo.ads.ad.splash.AdSplashActivity

sg.bigo.ads.ad.splash.LandscapeAdSplashActivity

sg.bigo.ads.api.AdActivity

sg.bigo.ads.core.mraid.MraidVideoActivity

com.ironsource.sdk.controller.ControllerActivity

com.ironsource.sdk.controller.InterstitialActivity

com.ironsource.sdk.controller.OpenUrlActivity

com.ironsource.mediationsdk.testSuite.TestSuiteActivity

com.tradplus.ads.base.TradplusGDPRAuthActivity

com.mbridge.msdk.activity.MBCommonActivity

com.mbridge.msdk.out.LoadingActivity

io.rong.push.notification.RongBridgeActivity

android.intent.action.VIEW io.rong.push.notification.RongBridgeActivity

com.sandboxol.blocky.service.McProcessChangeDataService

com.sandboxol.blocky.service.GameService

com.sandboxol.blocky.service.GameRunningService

com.sandboxol.imchat.server.SandboxFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.hbisoft.hbrecorder.ScreenRecordService

com.sandboxol.center.download.service.DownloadService

com.sandboxol.blockymods.download.service.DownloadService

com.sandboxol.messager.MessengerService

com.google.firebase.components.ComponentDiscoveryService

com.bytedance.boost_multidex.OptimizeService

com.google.android.gms.ads.AdService

com.yandex.metrica.MetricaService

com.yandex.metrica.IMetricaService

com.yandex.metrica.ConfigurationService

com.yandex.metrica.configuration.ACTION_INIT

com.yandex.metrica.ConfigurationJobService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.twitter.sdk.android.tweetcomposer.TweetUploadService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

androidx.room.MultiInstanceInvalidationService

com.bytedance.sdk.openadsdk.multipro.aidl.BinderPoolService

io.rong.imlib.ipc.RongService

io.rong.push.rongpush.PushService

com.sandboxol.blockymods.receiver.RongCloudPushMessageReceiver

io.rong.push.intent.MESSAGE_ARRIVED io.rong.push.intent.MI_MESSAGE_ARRIVED io.rong.push.intent.MESSAGE_CLICKED io.rong.push.intent.MI_MESSAGE_CLICKED

com.sandboxol.oversea.utils.TwitterResultReceiver

com.twitter.sdk.android.tweetcomposer.UPLOAD_SUCCESS com.twitter.sdk.android.tweetcomposer.UPLOAD_FAILURE com.twitter.sdk.android.tweetcomposer.TWEET_COMPOSE_CANCEL

com.hbisoft.hbrecorder.NotificationReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

cn.thinkingdata.analytics.utils.broadcast.TDReceiver

io.rong.imlib.ConnectChangeReceiver

io.rong.imlib.HeartbeatReceiver

io.rong.push.rongpush.PushReceiver

Android Permissions

BMGF V2.0 Release.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

com.android.vending.BILLING

android.permission.WAKE_LOCK

android.permission.UPDATE_D

com.sandboxol.blockymods.sp

android.permission.VIBRATE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.RECORD_AUDIO

android.permission.FOREGROUND_SERVICE

android.permission.WRITE_SETTINGS

android.permission.MODIFY_AUDIO_SETTINGS

com.google.android.gms.permission.AD_ID

android.permission.CAMERA

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_TOPICS

android.permission.CHANGE_WIFI_STATE

com.google.android.c2dm.permission.RECEIVE

android.permission.POST_NOTIFICATIONS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.sandboxol.blockymods.permission.RONG_ACCESS_RECEIVER