Analysis
- max time kernel
18s - max time network
150s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
02/11/2026, 00:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bluff-club-1.0.12.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
bluff-club-1.0.12.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
bluff-club-1.0.12.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target bluff-club-1.0.12.apk
- Size 11.1MB
- Sample261102-af5ndadf72
- SHA256 d44ab3015f58bbac42e999208065a557d2d48525410219fec0b42be33e3926cd
- MD5 2d4c49ed1bed2f887fc2c3f1f88c22f3
- SHA1 aae89078e2490317487690d8a7eff0d9520c40f9
- SHA512 78cbdba9daddadc2ab225b1c3d025f859d2d6ad7a199c60dbf64bacc4e36d665f2e76a0109dcda4d1d67a680e3b71d3eaa7f9aa32d56aaa8515cf4d1a49b45d7
- SSDEEP 196608:/2IByaWH7ET5Q59WArDE/HmIO8PSccFG8SExyW+3I3Dfrwou8t:/2APWH7ET58wAs/GKx8SEr+Y3rr5Z
- TLSH T1DBC623F663B6447CF427403F24AFA758EC566F1E283587C9C936B719207BE422F0A694
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener fyi.bluffclub.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo fyi.bluffclub.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo fyi.bluffclub.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/fyi.bluffclub.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 f8c8af45a9d2df398c7562933a5bf822e5c4a6933a9fd1ca5e64c7ed6220492b
- MD5 9405f9d0f23b223c3eca1b2ff9aa7913
- SHA1 d2e882c5f24a04e8213b7ef285aef35ba6127c04
- SHA512 6f2456cfe9d611ef9a1767bfca53d2cbfdc64ac727fd4ff117cd1309ebed74830bec2686eb750bdd25b8f58fcf133f7e72f305babdc54e34e3e98d8458100045
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/fyi.bluffclub.app/primary.prof
- Size 226B
- SHA256 438b89da5df2ec7e7bb2565c13e56c52cfe601283228073001ae8d511049327c
- MD5 1609e129060ece3566d4ec49e7cc967d
- SHA1 9cf49b6d66f4388e5590d69302919b5e75d8c270
- SHA512 04249eba8f8bbc44d0089eef7391541df2466f4791304e3ce473434b254426e63758e856d2248dece281d2198caa9b244ce8a1fef9f4248500f68afc89bc7021
- TLSH T1A6D0A77AE426980AF9298554C56F72517A66D0F3698439520B18107DF0F3198F128557
- MD5 SHA1 SHA512 TLSH