Analysis
- max time kernel
11s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/11/2026, 00:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bluff-club-1.0.12.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
bluff-club-1.0.12.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
bluff-club-1.0.12.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target bluff-club-1.0.12.apk
- Size 11.1MB
- Sample261102-agsefadg38
- SHA256 d44ab3015f58bbac42e999208065a557d2d48525410219fec0b42be33e3926cd
- MD5 2d4c49ed1bed2f887fc2c3f1f88c22f3
- SHA1 aae89078e2490317487690d8a7eff0d9520c40f9
- SHA512 78cbdba9daddadc2ab225b1c3d025f859d2d6ad7a199c60dbf64bacc4e36d665f2e76a0109dcda4d1d67a680e3b71d3eaa7f9aa32d56aaa8515cf4d1a49b45d7
- SSDEEP 196608:/2IByaWH7ET5Q59WArDE/HmIO8PSccFG8SExyW+3I3Dfrwou8t:/2APWH7ET58wAs/GKx8SEr+Y3rr5Z
- TLSH T1DBC623F663B6447CF427403F24AFA758EC566F1E283587C9C936B719207BE422F0A694
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener fyi.bluffclub.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone fyi.bluffclub.app - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver fyi.bluffclub.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo fyi.bluffclub.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo fyi.bluffclub.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/fyi.bluffclub.app/files/profileInstalled
- Size 24B
- SHA256 4e44068182dbd4f03c28790cfd0c939e1d2ad3a13c0bd63be5c4a2aaa41521be
- MD5 7449305c37b891ef26c03c0d66d9d10b
- SHA1 23307d9ac7bf5d2c9c81bf331b8c828870b04962
- SHA512 f92d5c1816aabecbff1d6ccb841edd7bdc029ff38853872819662e154e44c0d2ae9ab97e9911dd8912fe06cf3b7123907e223451cca0433d3a3c88d04f8e2b31
- MD5 SHA1 SHA512
- Path /data/data/fyi.bluffclub.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 84a1be947f9a2c89f32a8797addfd18f567a77c883642a8a96992f4466a91253
- MD5 b06638aae5f46c00c3dff38829612c09
- SHA1 cb1fd447d2e0427dbdaf6cc6ff2a06901e0f577e
- SHA512 8b74d8b89bba4665ca9fdd68ddd9c830830b93ce6317a6fcbf37eca466128be616dcd03666c9f9c63026d966f875f0b6a8fbc2570c5bad966018ee8e27f91f09
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/fyi.bluffclub.app/primary.prof
- Size 226B
- SHA256 438b89da5df2ec7e7bb2565c13e56c52cfe601283228073001ae8d511049327c
- MD5 1609e129060ece3566d4ec49e7cc967d
- SHA1 9cf49b6d66f4388e5590d69302919b5e75d8c270
- SHA512 04249eba8f8bbc44d0089eef7391541df2466f4791304e3ce473434b254426e63758e856d2248dece281d2198caa9b244ce8a1fef9f4248500f68afc89bc7021
- TLSH T1A6D0A77AE426980AF9298554C56F72517A66D0F3698439520B18107DF0F3198F128557
- MD5 SHA1 SHA512 TLSH