MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 019cd4ca5c50bf4e733bc0bee66b5a0c97cf8b0e297d396ccdeabd697ac8d566. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	019cd4ca5c50bf4e733bc0bee66b5a0c97cf8b0e297d396ccdeabd697ac8d566
SHA3-384 hash:	033d33c44e9f9b56abbc0b555fbf8ade8bbd0a4180f49bbdbee474bb60017cc7dd719f15572682dec548b4a69d93f859
SHA1 hash:	660439d398e71d91dbc8cfce2fdb271d18cde3cc
MD5 hash:	2178546a8d0aaa12bb3e63d7f012c0ce
humanhash:	low-victor-tennis-west
File name:	019cd4ca5c50bf4e733bc0bee66b5a0c97cf8b0e297d396ccdeabd697ac8d566.apk
Download:	download sample
Signature	PixRevolution Alert Create hunting rule
File size:	13'456'463 bytes
First seen:	2026-02-02 15:46:20 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	196608:fELhac4NWk2ZzZyzZ/MkQ8MxfdPDuIUJDzi7uYgH8PpYxF+Yleb9mRy9eknMhzE7:fENajNbwk6JPxZjUJXbQeYmRyE47
TLSH	T162D62386BBC89E2ECC7340324F5AA7355609AD27C707C343C978365C78BB6E44E856E9
TrID	49.0% (.APK) Android Package (27000/1/5) 24.5% (.JAR) Java Archive (13500/1/2) 19.0% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 7.2% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	johnk3r
Tags:	109-110-184-242 apk banker PixRevolution signed

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

175

Origin country :

CH

Vendor Threat Intelligence

ACCE Unknown

No detections

Incinerator Dangerous

Result

Link:

https://incinerator.cloud/#/public/report/2178546a8d0aaa12bb3e63d7f012c0ce/detail

Application Permissions

Allows an application to request installing packages. (REQUEST_INSTALL_PACKAGES)

full Internet access (INTERNET)

view network status (ACCESS_NETWORK_STATE)

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

apk

First seen:

2026-01-23T19:12:00Z UTC

Last seen:

2026-01-26T18:45:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/019cd4ca5c50bf4e733bc0bee66b5a0c97cf8b0e297d396ccdeabd697ac8d566/results?tab=lookup

Nucleon Malprob Malware

Score:

70%

Verdict:

Malware

File Type:

APK

Link:

https://malprob.io/report/019cd4ca5c50bf4e733bc0bee66b5a0c97cf8b0e297d396ccdeabd697ac8d566

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/019cd4ca5c50bf4e733bc0bee66b5a0c97cf8b0e297d396ccdeabd697ac8d566/

ReversingLabs TitaniumCloud Android.PUA.Maltiverza

Threat name:

Android.PUA.Maltiverza

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-01-24 11:11:28 UTC

File Type:

Binary (Archive)

Extracted files:

917

AV detection:

6 of 23 (26.09%)

Threat level:

  1/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=agonjss4kc7u44z3yc7om222bsl47cyoff6ts3gn5k6ws6wi2vta._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  8/10

Tags:

android collection credential_access defense_evasion impact persistence

Link:

https://tria.ge/reports/260202-s7vxcsdx6b/

Behaviour

Checks CPU information

Checks memory information

Looks up external IP address via web service

Checks known Qemu files.

Checks known Qemu pipes.

Obtains sensitive information copied to the device clipboard

Checks if the Android device is rooted.

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/019cd4ca5c50bf4e733bc0bee66b5a0c97cf8b0e297d396ccdeabd697ac8d566