Analysis
- max time kernel
46s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/11/2026, 00:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bluff-club-1.0.12.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
bluff-club-1.0.12.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
bluff-club-1.0.12.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target bluff-club-1.0.12.apk
- Size 11.1MB
- Sample261102-af5ndadf72
- SHA256 d44ab3015f58bbac42e999208065a557d2d48525410219fec0b42be33e3926cd
- MD5 2d4c49ed1bed2f887fc2c3f1f88c22f3
- SHA1 aae89078e2490317487690d8a7eff0d9520c40f9
- SHA512 78cbdba9daddadc2ab225b1c3d025f859d2d6ad7a199c60dbf64bacc4e36d665f2e76a0109dcda4d1d67a680e3b71d3eaa7f9aa32d56aaa8515cf4d1a49b45d7
- SSDEEP 196608:/2IByaWH7ET5Q59WArDE/HmIO8PSccFG8SExyW+3I3Dfrwou8t:/2APWH7ET58wAs/GKx8SEr+Y3rr5Z
- TLSH T1DBC623F663B6447CF427403F24AFA758EC566F1E283587C9C936B719207BE422F0A694
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener fyi.bluffclub.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone fyi.bluffclub.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver fyi.bluffclub.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo fyi.bluffclub.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo fyi.bluffclub.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/fyi.bluffclub.app/files/profileInstalled
- Size 24B
- SHA256 7b9d624c82dbad928c594c8d77e010493f1f4693752d95bcfd957435fbfdc211
- MD5 8df3200b5e0a89967e29c34097e5b28d
- SHA1 5b565e6f6f17dd4cad8d0c3e4ca92463dffb5638
- SHA512 e480308e738699ab19568a4c49013b2f98d4eab83c1faf3700fd93683cbfaf6ae92cb880c7289b0c5a52af29169fc92568d2aa56869570f6f8cf309b9a7578e8
- MD5 SHA1 SHA512
- Path /data/data/fyi.bluffclub.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 f54863778de86a98cae6127eac5892c4691b3afc96a220acc3eab49d13ca6f34
- MD5 54648d7335b79dc4a0fec36fbbe286cc
- SHA1 380249d10b2af4bd2789f6f25370fbfc077fe9e1
- SHA512 db80fa76f76fdb37fd1d973a2d733634aa90872ecc1843a5b467005879122886e7d63338f8346bf8bce2ac004f4f9abaccae5c5de9e1020688df18cc20ca1c44
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/fyi.bluffclub.app/primary.prof
- Size 226B
- SHA256 438b89da5df2ec7e7bb2565c13e56c52cfe601283228073001ae8d511049327c
- MD5 1609e129060ece3566d4ec49e7cc967d
- SHA1 9cf49b6d66f4388e5590d69302919b5e75d8c270
- SHA512 04249eba8f8bbc44d0089eef7391541df2466f4791304e3ce473434b254426e63758e856d2248dece281d2198caa9b244ce8a1fef9f4248500f68afc89bc7021
- TLSH T1A6D0A77AE426980AF9298554C56F72517A66D0F3698439520B18107DF0F3198F128557
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/fyi.bluffclub.app/primary.prof
- Size 483B
- SHA256 7939923b8fcda0c2a2622b41cd7b124be9a511467c5939f2f65787755c2cf272
- MD5 5e54701bcb9597b7dd64fa6633d0508a
- SHA1 b5ff07842ca1a34814944696d38e64b8d511f528
- SHA512 3a97d3d19b3c18cce632367ef102d2fb84fa8db3cce2ab9881475c35ff2405e879be6e00a0ab9caddc961e807a6257622dcb6c6fb57bee4b8ef824ee54e7e819
- TLSH T172F054D92C480EE6924530DD8DD387534005B02E589A92D5A433332A48478CF800DA8F
- MD5 SHA1 SHA512 TLSH