Resubmissions

01/05/2026, 20:33

260501-zb95qsdt218

01/05/2026, 20:29

260501-y9mxesds5t8

01/05/2026, 17:17

260501-vt25mad19q8

Analysis

  • user interaction
    yes
  • max time kernel
    24s
  • max time network
    152s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260325-enlocale:en-usos:android-13-x64system
  • submitted
    01/05/2026, 20:33

General

  • Target
    qfysz.apk
  • Size 4.5MB
  • Sample260501-zb95qsdt21
  • SHA256 0b67e9e472078eae6b145baf57458a4e2ae5169070fd23c5913e8f6465258045
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • fun.gamergarden.blumos
    1⤵
    • Checks if the Android device is rooted.
    • Obtains sensitive information copied to the device clipboard
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Checks CPU information
    • Checks memory information
    PID:4430

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1050b6b480deb926a3e60eb42daa2b7612bc3f155a0b5adc689c79f991ca2111.0.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/1050b6b480deb926a3e60eb42daa2b7612bc3f155a0b5adc689c79f991ca2111.0.tmp
        • Size 640B
        • SHA256 ae07593d44ceaed92cc983f52b5d40d4feaa08acaf2c10f1714ff6779b819bb5
        • MD5 SHA1 SHA512 TLSH

        1050b6b480deb926a3e60eb42daa2b7612bc3f155a0b5adc689c79f991ca2111.1.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/1050b6b480deb926a3e60eb42daa2b7612bc3f155a0b5adc689c79f991ca2111.1.tmp
        • Size 79KB
        • SHA256 f6324fbe7c30ba68b4c355a6a2b5b80a798fee66de496a35adf9ec4880c5baa6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        1c973f0e94af4fa58b6d84bac0ac3ddcab3783a3464dfb59ecf3c3d295de6992.0.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/1c973f0e94af4fa58b6d84bac0ac3ddcab3783a3464dfb59ecf3c3d295de6992.0.tmp
        • Size 640B
        • SHA256 38c51afaa50502729a907ab500dd97cf4f37afeb79d546a2ad407460c1174cac
        • MD5 SHA1 SHA512 TLSH

        1c973f0e94af4fa58b6d84bac0ac3ddcab3783a3464dfb59ecf3c3d295de6992.1.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/1c973f0e94af4fa58b6d84bac0ac3ddcab3783a3464dfb59ecf3c3d295de6992.1.tmp
        • Size 76KB
        • SHA256 25f10ed18da86d5a5686408fc1b5626fa52e64f1494d3aa811630ff62f8acb63
        • MD5 SHA1 SHA512 SSDEEP TLSH

        250cd79b9d4c3a4bbaede6bb88cb39b943f4c34aeeb393d4731bd0bdec0f3b16.0.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/250cd79b9d4c3a4bbaede6bb88cb39b943f4c34aeeb393d4731bd0bdec0f3b16.0.tmp
        • Size 642B
        • SHA256 4032b9ea13ada0699df698de48d780419661a79e1656a18915345ae719892506
        • MD5 SHA1 SHA512 TLSH

        250cd79b9d4c3a4bbaede6bb88cb39b943f4c34aeeb393d4731bd0bdec0f3b16.1.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/250cd79b9d4c3a4bbaede6bb88cb39b943f4c34aeeb393d4731bd0bdec0f3b16.1.tmp
        • Size 117KB
        • SHA256 7c092bcacdcae44d3af31c459fc07431268a9cea74f42630e701dec6d18d41f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        26d9cd3e6ef8e314e138ae52fd3292d3a8850abbedc56c223875b2460a63c403.0.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/26d9cd3e6ef8e314e138ae52fd3292d3a8850abbedc56c223875b2460a63c403.0.tmp
        • Size 640B
        • SHA256 b538e39bc1209b0ee1a6c4f3e6fe603292c5a53d851ae1bd28019f86c6a81026
        • MD5 SHA1 SHA512 TLSH

        26d9cd3e6ef8e314e138ae52fd3292d3a8850abbedc56c223875b2460a63c403.1.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/26d9cd3e6ef8e314e138ae52fd3292d3a8850abbedc56c223875b2460a63c403.1.tmp
        • Size 88KB
        • SHA256 65d4d78c37699a7e8199f6f7abec9287477420ed4198cba48e1645717607cd18
        • MD5 SHA1 SHA512 SSDEEP TLSH

        9773ffb16a7ec80f239dbdfa4cec01335df300e60741a65121fab33d0a084737.0.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/9773ffb16a7ec80f239dbdfa4cec01335df300e60741a65121fab33d0a084737.0.tmp
        • Size 640B
        • SHA256 de2ba8cd8cb5211de36a87e250953841f47a1c68ab57df20b69338b63174beba
        • MD5 SHA1 SHA512 TLSH

        9773ffb16a7ec80f239dbdfa4cec01335df300e60741a65121fab33d0a084737.1.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/9773ffb16a7ec80f239dbdfa4cec01335df300e60741a65121fab33d0a084737.1.tmp
        • Size 65KB
        • SHA256 2346d27f45e1901b3fac564d765d44270bcd0d87156574c83a75fd7f3b528c0b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        b34b74d78ce34b43fc3b5c190e878d7ef2d1cf104ebf9993516478c97dc01fca.0.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/b34b74d78ce34b43fc3b5c190e878d7ef2d1cf104ebf9993516478c97dc01fca.0.tmp
        • Size 640B
        • SHA256 abfe2e52ea74b3b1ab4e514c5861ba76854cad6bcc95eb59c69cc8ee43c161bc
        • MD5 SHA1 SHA512 TLSH

        b34b74d78ce34b43fc3b5c190e878d7ef2d1cf104ebf9993516478c97dc01fca.1.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/b34b74d78ce34b43fc3b5c190e878d7ef2d1cf104ebf9993516478c97dc01fca.1.tmp
        • Size 66KB
        • SHA256 081237030fb8d1c14a372bd4502459d2665ec4ccc8db6d36768f34a6c5ff13a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de029478cf27d143e7cc9de2dfe6b27117970b2800fa46763bf623c8c83f229d.0.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/de029478cf27d143e7cc9de2dfe6b27117970b2800fa46763bf623c8c83f229d.0.tmp
        • Size 642B
        • SHA256 5b4a33a3ec08d3b5dbcdc052459b8f1da7167d516af0c98012d688f5661f895f
        • MD5 SHA1 SHA512 TLSH

        de029478cf27d143e7cc9de2dfe6b27117970b2800fa46763bf623c8c83f229d.1.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/de029478cf27d143e7cc9de2dfe6b27117970b2800fa46763bf623c8c83f229d.1.tmp
        • Size 126KB
        • SHA256 afb0dfd0199ef8630effccae3dbdb2a7f3a31d90ee88709e985d6053f9e7cc0f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ecc548eb864dfc9386953390f42f1d3209b99fcaeedddcf2a986b327c6c0dfcd.0.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/ecc548eb864dfc9386953390f42f1d3209b99fcaeedddcf2a986b327c6c0dfcd.0.tmp
        • Size 640B
        • SHA256 acc3ba1ab1a9099b7889fe9df506a81e62da0047a41e05a983561d472633b2a8
        • MD5 SHA1 SHA512 TLSH

        ecc548eb864dfc9386953390f42f1d3209b99fcaeedddcf2a986b327c6c0dfcd.1.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/ecc548eb864dfc9386953390f42f1d3209b99fcaeedddcf2a986b327c6c0dfcd.1.tmp
        • Size 88KB
        • SHA256 200a75e584a7b4746bee30c831e45f9d23cd0dad0314f562c3a4c29648d6f251
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/journal
        • Size 1KB
        • SHA256 0c3b4f06efc3cb075ee69588948ceb85e7f8394cc64bd734088e5752e674ed9e
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/fun.gamergarden.blumos/cache/image_cache/journal.tmp
        • Size 31B
        • SHA256 8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events

        • Path /data/data/fun.gamergarden.blumos/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 736a52745004ff96809e6d445aca934b921f310e7738896bc86b9962682f4041
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/fun.gamergarden.blumos/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 eedb24f3fd2b784d453ec7cd678221db9e35a078f0f74d69b9c2d927589e67db
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/fun.gamergarden.blumos/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 e7b7a05568223883fff9fdfd4d565f6df6e049109bd7ec9afc5d0746113aa784
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/fun.gamergarden.blumos/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 7b3aed7b6397a1f7e286b85c5d9e5868c938a81a8db8ff2ec61be1df241c18cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/fun.gamergarden.blumos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/fun.gamergarden.blumos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b6666453789dd6b91578d74321062dda1055debd75a4b2b55fcc8556cbbb85d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/fun.gamergarden.blumos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1637e8408dc79c7b9611563f708705ce9a5f4ffebf8160ef1b1774030ebb9e90
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/fun.gamergarden.blumos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9777df1033120a59f40f9091392501abdc568a9bec2c58b545448f3ad35faa81
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/fun.gamergarden.blumos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1811b6289547fb3a64ecbc9e2aa4cf57a8d21deec524f6e0642b688701624f03
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/fun.gamergarden.blumos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 f1836fc5235d7d2ef14f6577f476c9c41ca5db389d20ccbed14939dd00cd90b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/fun.gamergarden.blumos/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 3e43e0a7f057ab24e5f0be0a6d39fa24950562795007e83a852363e7a2243143
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/fun.gamergarden.blumos/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 5ca348b3c96869c5928d1876485253b5145d9513c98f5506c55a7824cb8dd9b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/fun.gamergarden.blumos/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 44e8e716b185218a8d0be5c7c7a440fd4412a46dfb4486ff0dcbe8cab45b5112
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/fun.gamergarden.blumos/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 80ab7ccad15830b6999a1ecbe5352d12e0a777fa08f7fc7ae52455d099bed7b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/fun.gamergarden.blumos/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 01412f21f2b64d841658a8f2613875aa5c12a36c5d4980c8c708005244a8a452
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/fun.gamergarden.blumos/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 294d45347eec7da1d19c5852383dfac135fe35d5146e1e65bff9a58908b1a8c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.crashlytics.settings.json

        • Path /data/data/fun.gamergarden.blumos/files/.com.google.firebase.crashlytics.files.v2:fun.gamergarden.blumos/com.crashlytics.settings.json
        • Size 771B
        • SHA256 45ca871041892a6933dbfb09ab22cc42d2ad00489bac1f1ed8ebf1dcd180d04a
        • MD5 SHA1 SHA512 TLSH

        report

        • Path /data/data/fun.gamergarden.blumos/files/.com.google.firebase.crashlytics.files.v2:fun.gamergarden.blumos/open-sessions/69F50E38012E0001114E425B26FBD1A6/report
        • Size 794B
        • SHA256 eb175532845c4c6df234f5cdcb0373945e91de03c26e8250e771340685921663
        • MD5 SHA1 SHA512 TLSH

        userlog

        • Path /data/data/fun.gamergarden.blumos/files/.com.google.firebase.crashlytics.files.v2:fun.gamergarden.blumos/open-sessions/69F50E38012E0001114E425B26FBD1A6/userlog
        • Size 339B
        • SHA256 33565235254a348512fb6ae885d773cfb7ccf4251e130c786d1ea9a0adf5d35f
        • MD5 SHA1 SHA512 TLSH

        userlog.tmp

        • Path /data/data/fun.gamergarden.blumos/files/.com.google.firebase.crashlytics.files.v2:fun.gamergarden.blumos/open-sessions/69F50E38012E0001114E425B26FBD1A6/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        PersistedInstallation3790760955492308774tmp

        • Path /data/data/fun.gamergarden.blumos/files/PersistedInstallation3790760955492308774tmp
        • Size 570B
        • SHA256 aa6bb5200f8891d92b24a055f10c9f871af8569a1332d32fa9f825bdbc1191b3
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation4183239218516845791tmp

        • Path /data/data/fun.gamergarden.blumos/files/PersistedInstallation4183239218516845791tmp
        • Size 90B
        • SHA256 397a5c771050bb4ba8f96f66ef52584f30bfc15c6373001fdea36522a70d8170
        • MD5 SHA1 SHA512 TLSH

        UnityAdsStorage-private-data.json

        • Path /data/data/fun.gamergarden.blumos/files/UnityAdsStorage-private-data.json
        • Size 57B
        • SHA256 6a9794df4a5c0fe9f27ca3f5f53d0fa5b86d79f8ddbb7e8c4dd347f47179119a
        • MD5 SHA1 SHA512 TLSH

        UnityAdsStorage-private-data.json

        • Path /data/data/fun.gamergarden.blumos/files/UnityAdsStorage-private-data.json
        • Size 665B
        • SHA256 837bfedc36d94a2b263a1cebab19258b73588502327e64f09024daec0a1d8466
        • MD5 SHA1 SHA512 TLSH

        UnityAdsStorage-private-data.json

        • Path /data/data/fun.gamergarden.blumos/files/UnityAdsStorage-private-data.json
        • Size 799B
        • SHA256 64c49f83f8a603989b9baf1e50c6bf9bc81dc996524f82a42a17f58a9540ff09
        • MD5 SHA1 SHA512 TLSH

        UnityAdsStorage-private-data.json

        • Path /data/data/fun.gamergarden.blumos/files/UnityAdsStorage-private-data.json
        • Size 1KB
        • SHA256 23968c79ba05d2b7ed1b8b273f73ec19211ff279217940ff5cdb12f1afc8c570
        • MD5 SHA1 SHA512 TLSH

        UnityAdsStorage-public-data.json

        • Path /data/data/fun.gamergarden.blumos/files/UnityAdsStorage-public-data.json
        • Size 2B
        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
        • MD5 SHA1 SHA512

        firebase_session_settings.preferences_pb.tmp

        • Path /data/data/fun.gamergarden.blumos/files/datastore/firebase_session_settings.preferences_pb.tmp
        • Size 33B
        • SHA256 af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
        • MD5 SHA1 SHA512

        firebase_session_settings.preferences_pb.tmp

        • Path /data/data/fun.gamergarden.blumos/files/datastore/firebase_session_settings.preferences_pb.tmp
        • Size 75B
        • SHA256 ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab
        • MD5 SHA1 SHA512 TLSH

        firebase_session_settings.preferences_pb.tmp

        • Path /data/data/fun.gamergarden.blumos/files/datastore/firebase_session_settings.preferences_pb.tmp
        • Size 121B
        • SHA256 a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d
        • MD5 SHA1 SHA512 TLSH

        firebase_session_settings.preferences_pb.tmp

        • Path /data/data/fun.gamergarden.blumos/files/datastore/firebase_session_settings.preferences_pb.tmp
        • Size 163B
        • SHA256 ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
        • MD5 SHA1 SHA512 TLSH

        firebase_session_settings.preferences_pb.tmp

        • Path /data/data/fun.gamergarden.blumos/files/datastore/firebase_session_settings.preferences_pb.tmp
        • Size 212B
        • SHA256 2687b7fcbe4774ec7a231d26840a802d140e77b9f6dda4bfce04ec5518d90b95
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/fun.gamergarden.blumos/files/profileInstalled
        • Size 24B
        • SHA256 4f22ccbd958c9aa8b6417b32c8b0c8ccba29733ebbda1727231e148c88ec9d43
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/fun.gamergarden.blumos/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 5c2f08e340800e1c210dd12e9660003349efc1fcbc622dcc46d82b4a475fd53e
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/fun.gamergarden.blumos/primary.prof
        • Size 1KB
        • SHA256 3ed795ac95246831cab07ba311ba347f6518dc2f763c2c13d008d93c7097aaf3
        • MD5 SHA1 SHA512 TLSH

        UnityAdsTest.txt (deleted)

        • Path /storage/emulated/0/Android/data/fun.gamergarden.blumos/cache/UnityAdsCache/UnityAdsTest.txt (deleted)
        • Size 4B
        • SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
        • MD5 SHA1 SHA512

        UnityAdsWebApp.html (deleted)

        • Path /storage/emulated/0/Android/data/fun.gamergarden.blumos/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)
        • Size 2.3MB
        • SHA256 0bd86378b2d281efb866648c514043a7d6548ddd43e1a0156e5e0fff8258becc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UnityAdsWebViewConfiguration.json (deleted)

        • Path /storage/emulated/0/Android/data/fun.gamergarden.blumos/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json (deleted)
        • Size 669B
        • SHA256 8618ae8e5f58d45c8bec228f9bdc611bcac52c6a58cc537a7641d1541de486e7
        • MD5 SHA1 SHA512 TLSH