Resubmissions

01/05/2026, 20:33

260501-zb95qsdt218

01/05/2026, 20:29

260501-y9mxesds5t8

01/05/2026, 17:17

260501-vt25mad19q8

Analysis

  • user interaction
    yes
  • max time kernel
    88s
  • max time network
    153s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260325-enlocale:en-usos:android-13-x64system
  • submitted
    01/05/2026, 20:33

General

  • Target
    Pornhub v6.17.0 (PREMIUM).apk
  • Size 7.7MB
  • Sample260501-zb95qsdt21
  • SHA256 df4f4e2ee115d679002f9fdd40303a912406d63ca9ff822c613169cb4ccbb75c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • fun.gamergarden.blumos
    1⤵
    • Checks if the Android device is rooted.
    • Obtains sensitive information copied to the device clipboard
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Checks CPU information
    • Checks memory information
    PID:4414

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        primary.prof

        • Path /data/misc/profiles/cur/0/fun.gamergarden.blumos/primary.prof
        • Size 1KB
        • SHA256 3ed795ac95246831cab07ba311ba347f6518dc2f763c2c13d008d93c7097aaf3
        • MD5 SHA1 SHA512 TLSH

        com.google.android.datatransport.events

        • Path /data/user/0/fun.gamergarden.blumos/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 61e07408f3b29968dd3330b85b1a1d0f968cca844cda2a87244e0c03a6c55486
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/user/0/fun.gamergarden.blumos/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 327240e5ff11523f661459031aa08067f24d9f7b01f872f914fd7bf40b4f70f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/user/0/fun.gamergarden.blumos/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 f7a46077ee0b382b5dbdfe99c0a7dc54eab69a244da89593f0cf1ec86996a63f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/user/0/fun.gamergarden.blumos/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 6dd311d5d8df8e14f122fc2e00f0ca2dd67e42d05f5652554c530b877589de9f
        • MD5 SHA1 SHA512

        google_app_measurement_local.db

        • Path /data/user/0/fun.gamergarden.blumos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/fun.gamergarden.blumos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7b666e2e5b2cd1e707a09de0a9d80c6d19cdc2a28195e9e7920a5d0830269886
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/fun.gamergarden.blumos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1f9ce65ae9748de9647d43e90baa5270e0969d47dc6cc7801bdc4739167c6e25
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/fun.gamergarden.blumos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 aabddd45afc6a088247239066be6838ff2856b7dde092706fdb4fb335ca7ad86
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/fun.gamergarden.blumos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 3c47686f74a6905a4eb9829191381f1260221652b1ca85186a6be98dc6a3b25f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/fun.gamergarden.blumos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 f371cdfbd14c7d83370b7934faf395f14c76de4254a1f14fcc25e2170bb8ea30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/fun.gamergarden.blumos/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 02568d79dfac34896cb8f66bc4261567cbd4d699f92df15bcf9baf3b2262ae9c
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/user/0/fun.gamergarden.blumos/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 1e7697bff58eff33b6d7590c407f950650a1fbae08480f7a9ba5e18207f0c02f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/fun.gamergarden.blumos/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 7586903c2beb08d0c81cce7b70d57648d54e34508db2abfb1c78ba1145267ebf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/fun.gamergarden.blumos/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 3702b3fac6f704efa0420eb9fef3ea031c211e6117f43a962e12ddd4e7b84572
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/fun.gamergarden.blumos/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 bebede3e385f0b0413fcd207d82cf110c3802adfe9632772aaa871e5e37f1df7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/fun.gamergarden.blumos/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 6a55e9da38bed6f22aa3c0450b4fc110fa21898d9361d974121371612654bf95
        • MD5 SHA1 SHA512 SSDEEP TLSH

        report

        • Path /data/user/0/fun.gamergarden.blumos/files/.com.google.firebase.crashlytics.files.v2:fun.gamergarden.blumos/open-sessions/69F50E38034F0001113E75DA1B663588/report
        • Size 800B
        • SHA256 176ec4fbd6a7935b3567c34c99b2ebcb1cdbf49835a22faf98a8fd92d2667a6d
        • MD5 SHA1 SHA512 TLSH

        userlog

        • Path /data/user/0/fun.gamergarden.blumos/files/.com.google.firebase.crashlytics.files.v2:fun.gamergarden.blumos/open-sessions/69F50E38034F0001113E75DA1B663588/userlog
        • Size 802B
        • SHA256 ae5ed8b1d8abe492748555f333dbbc75e461387bc2d63910c0431802d6d1e930
        • MD5 SHA1 SHA512 TLSH

        userlog.tmp

        • Path /data/user/0/fun.gamergarden.blumos/files/.com.google.firebase.crashlytics.files.v2:fun.gamergarden.blumos/open-sessions/69F50E38034F0001113E75DA1B663588/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        PersistedInstallation7540950950919311563tmp

        • Path /data/user/0/fun.gamergarden.blumos/files/PersistedInstallation7540950950919311563tmp
        • Size 90B
        • SHA256 c77bbcabec42e67f36eb806acd057583b510ff20c409719d0ddb06293f5acb0a
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation830263460293527126tmp

        • Path /data/user/0/fun.gamergarden.blumos/files/PersistedInstallation830263460293527126tmp
        • Size 566B
        • SHA256 1b99692abe0ad85800f4557e60965948abed5303869045369854a59c2fa7702c
        • MD5 SHA1 SHA512 TLSH

        UnityAdsStorage-private-data.json

        • Path /data/user/0/fun.gamergarden.blumos/files/UnityAdsStorage-private-data.json
        • Size 57B
        • SHA256 13d650ad91ecf41bb246dd405f8b93cd4ace9f896dd281d287a902edafdfb531
        • MD5 SHA1 SHA512 TLSH

        UnityAdsStorage-private-data.json

        • Path /data/user/0/fun.gamergarden.blumos/files/UnityAdsStorage-private-data.json
        • Size 561B
        • SHA256 4712329669660ce07bd21884ee54a04453e39740b9a52ea024577234cc505968
        • MD5 SHA1 SHA512 TLSH

        UnityAdsStorage-private-data.json

        • Path /data/user/0/fun.gamergarden.blumos/files/UnityAdsStorage-private-data.json
        • Size 695B
        • SHA256 42b01058e4e0d3b08932ee1fd0ef7afd33257c155be0d42a35ececf260daddc3
        • MD5 SHA1 SHA512 TLSH

        UnityAdsStorage-private-data.json

        • Path /data/user/0/fun.gamergarden.blumos/files/UnityAdsStorage-private-data.json
        • Size 887B
        • SHA256 4b3902b38f621deb3fced3fe1656089c0ddcfd2ecacdd0172709ad3a7f6eb1fe
        • MD5 SHA1 SHA512 TLSH

        UnityAdsStorage-public-data.json

        • Path /data/user/0/fun.gamergarden.blumos/files/UnityAdsStorage-public-data.json
        • Size 2B
        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
        • MD5 SHA1 SHA512

        base.apk

        • Path /data/user/0/fun.gamergarden.blumos/files/base.apk
        • Size 4.5MB
        • SHA256 0b67e9e472078eae6b145baf57458a4e2ae5169070fd23c5913e8f6465258045
        • MD5 SHA1 SHA512 SSDEEP TLSH

        firebase_session_settings.preferences_pb.tmp

        • Path /data/user/0/fun.gamergarden.blumos/files/datastore/firebase_session_settings.preferences_pb.tmp
        • Size 33B
        • SHA256 af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
        • MD5 SHA1 SHA512

        firebase_session_settings.preferences_pb.tmp

        • Path /data/user/0/fun.gamergarden.blumos/files/datastore/firebase_session_settings.preferences_pb.tmp
        • Size 75B
        • SHA256 ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab
        • MD5 SHA1 SHA512 TLSH

        firebase_session_settings.preferences_pb.tmp

        • Path /data/user/0/fun.gamergarden.blumos/files/datastore/firebase_session_settings.preferences_pb.tmp
        • Size 121B
        • SHA256 a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d
        • MD5 SHA1 SHA512 TLSH

        firebase_session_settings.preferences_pb.tmp

        • Path /data/user/0/fun.gamergarden.blumos/files/datastore/firebase_session_settings.preferences_pb.tmp
        • Size 163B
        • SHA256 ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
        • MD5 SHA1 SHA512 TLSH

        firebase_session_settings.preferences_pb.tmp

        • Path /data/user/0/fun.gamergarden.blumos/files/datastore/firebase_session_settings.preferences_pb.tmp
        • Size 212B
        • SHA256 6760481ed07a91f5605054c5b79c42e3317f1727da506c61ea54b80521e9e6d6
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/user/0/fun.gamergarden.blumos/files/profileInstalled
        • Size 24B
        • SHA256 49c00a82d25e2f679e47a7452ed0a3ea7d1e178d43c718d6e03a921a15762130
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/user/0/fun.gamergarden.blumos/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 18261ed0610f40c34ed05d821991556957ced8c0d0d777e31d4a9dd416953605
        • MD5 SHA1 SHA512

        UnityAdsTest.txt (deleted)

        • Path /storage/emulated/0/Android/data/fun.gamergarden.blumos/cache/UnityAdsCache/UnityAdsTest.txt (deleted)
        • Size 4B
        • SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
        • MD5 SHA1 SHA512

        UnityAdsWebApp.html (deleted)

        • Path /storage/emulated/0/Android/data/fun.gamergarden.blumos/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)
        • Size 2.3MB
        • SHA256 0bd86378b2d281efb866648c514043a7d6548ddd43e1a0156e5e0fff8258becc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityAdsWebViewConfiguration.json (deleted)

        • Path /storage/emulated/0/Android/data/fun.gamergarden.blumos/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json (deleted)
        • Size 669B
        • SHA256 8618ae8e5f58d45c8bec228f9bdc611bcac52c6a58cc537a7641d1541de486e7
        • MD5 SHA1 SHA512 TLSH