MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 050537a47b5463e96a9f3e7ba79c607017faceeb668cef8aa1d5e11a19ff4990. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	050537a47b5463e96a9f3e7ba79c607017faceeb668cef8aa1d5e11a19ff4990
SHA3-384 hash:	fa0f0ca635922eb011335652c5ce9e047eac52a57dac488d4c7dfcbb44ff00a9c72e28033a5bb8ba0bec5c12603056cf
SHA1 hash:	366b830464c0d609b94f8f2f460ac37474eabf67
MD5 hash:	4447efc903329f4916656a99161c7725
humanhash:	early-nine-five-pizza
File name:	050537a47b5463e96a9f3e7ba79c607017faceeb668cef8aa1d5e11a19ff4990.apk
Download:	download sample
File size:	87'819'084 bytes
First seen:	2026-04-15 12:55:23 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	786432:Qx8hpRVAgfsVI0mke75jT0ZfR7LzfvfWyYEL9aoW56k1mApPfjO72Qm/fvpJc:jf9R5fyYLT1Y72QsJc
TLSH	T19118E147F6428CA7CDE55470A55ED277B3223D6CC352A213AA44B7287EBB7D44F2A380
TrID	50.0% (.APK) Android Package (27000/1/5) 23.1% (.VYM) VYM Mind Map (12500/1/3) 19.4% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 7.4% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	JAMESWT_WT
Tags:	45-74-4-179 apk

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

225

Origin country :

IT

Vendor Threat Intelligence

ACCE MurmurHash3_128x64

Details

Link:

https://research.acce.ciphertechsolutions.com/results/3c33e563-e2f1-47bd-a1ab-99b1920d869f/

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

base64 crypto evasive fingerprint persistence signed

Link:

https://www.filescan.io/uploads/69df8b36d920e19044fcbb47/reports/17ed7b9a-3f1b-4aad-a327-2b4e93708fd9/overview

Incinerator Dangerous

Result

Link:

https://incinerator.cloud/#/public/report/4447efc903329f4916656a99161c7725/detail

Application Permissions

read phone state and identity (READ_PHONE_STATE)

Allows an application a broad access to external storage in scoped storage (MANAGE_EXTERNAL_STORAGE)

read/modify/delete external storage contents (WRITE_EXTERNAL_STORAGE)

read external storage contents (READ_EXTERNAL_STORAGE)

read contact data (READ_CONTACTS)

write contact data (WRITE_CONTACTS)

read SMS or MMS (READ_SMS)

send SMS messages (SEND_SMS)

display system-level alerts (SYSTEM_ALERT_WINDOW)

record audio (RECORD_AUDIO)

full Internet access (INTERNET)

view Wi-Fi status (ACCESS_WIFI_STATE)

view network status (ACCESS_NETWORK_STATE)

automatically start at boot (RECEIVE_BOOT_COMPLETED)

prevent phone from sleeping (WAKE_LOCK)

control vibrator (VIBRATE)

C2DM permissions (RECEIVE)

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

apk

First seen:

2025-09-26T23:21:00Z UTC

Last seen:

2025-09-27T05:48:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/050537a47b5463e96a9f3e7ba79c607017faceeb668cef8aa1d5e11a19ff4990/results?tab=lookup

Nucleon Malprob Malware

Score:

98%

Verdict:

Malware

File Type:

APK

Link:

https://malprob.io/report/050537a47b5463e96a9f3e7ba79c607017faceeb668cef8aa1d5e11a19ff4990

CERT.PL MWDB

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=auctpjd3krr6s2u7hz52phdaoal7vtxlm2go7cvb2xqrugp7jgia._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

android defense_evasion discovery execution persistence

Link:

https://tria.ge/reports/260415-p647vsht8z/

Behaviour

Schedules tasks to execute at a specified time

Acquires the wake lock

Makes use of the framework's foreground persistence service

Queries information about active data network

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.