MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 050d91cde706f7c981f90878dbd50d92038caeedd38852a10e018e57f188e79b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 050d91cde706f7c981f90878dbd50d92038caeedd38852a10e018e57f188e79b
SHA3-384 hash: d2c7ad12f0f3f9823f5a1b31ff2a86380a94475ca5aaa6a46fc015ca31b248392a2b33361b6c8d37c4e115fa6cdc03fb
SHA1 hash: d771c66d3ef174c2e2fbea3d9586e85b7d6e53d6
MD5 hash: a117934f6606d41e31b30b908534be69
humanhash: minnesota-network-indigo-stairway
File name:05.apk
Download: download sample
File size:13'616'364 bytes
First seen:2026-06-16 12:44:12 UTC
Last seen:Never
File type: apk
MIME type:application/zip
ssdeep 393216:U64rrYPnErB0BEtt66TV/M/TAqJCww+i2slkoRX:Z4rdrCBWtvlM/TvC2m
TLSH T16ED62333EF85B16FC9F2823349AA8C258D517E404783D90795A5717C087BBECDB1AAD8
TrID 65.0% (.APK) Android Package (27000/1/5)
25.3% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3)
9.6% (.ZIP) ZIP compressed archive (4000/1)
Magika apk
Reporter 0x746f6d6669
Tags:apk

Intelligence

File Origin
# of uploads :
1
# of downloads :
151
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
fingerprint invalid-signature signed
Link:
https://www.filescan.io/uploads/6a31452d1f652d68658396ad/reports/707a4f52-0505-45ad-83f0-21ca4badfda1/overview
Result
Link:
https://incinerator.cloud/#/public/report/a117934f6606d41e31b30b908534be69/detail
Application Permissions
make application always run (PERSISTENT_ACTIVITY)
fine (GPS) location (ACCESS_FINE_LOCATION)
access location in background (ACCESS_BACKGROUND_LOCATION)
directly call phone numbers (CALL_PHONE)
record audio (RECORD_AUDIO)
send SMS messages (SEND_SMS)
receive SMS (RECEIVE_SMS)
read contact data (READ_CONTACTS)
read SMS or MMS (READ_SMS)
coarse (network-based) location (ACCESS_COARSE_LOCATION)
write contact data (WRITE_CONTACTS)
list accounts (GET_ACCOUNTS)
read calendar events (READ_CALENDAR)
read phone state and identity (READ_PHONE_STATE)
take pictures and videos (CAMERA)
read user-defined dictionary (READ_USER_DICTIONARY)
full Internet access (INTERNET)
control Near-Field Communication (NFC)
view Wi-Fi status (ACCESS_WIFI_STATE)
change your audio settings (MODIFY_AUDIO_SETTINGS)
view network status (ACCESS_NETWORK_STATE)
prevent phone from sleeping (WAKE_LOCK)
allow use of fingerprint (USE_FINGERPRINT)
automatically start at boot (RECEIVE_BOOT_COMPLETED)
Verdict:
Malicious
File Type:
apk
First seen:
2026-06-09T19:22:00Z UTC
Last seen:
2026-06-17T00:11:00Z UTC
Hits:
~10
Link:
https://opentip.kaspersky.com/050d91cde706f7c981f90878dbd50d92038caeedd38852a10e018e57f188e79b/results?tab=lookup
Score:
100%
Verdict:
Malware
File Type:
APK
Link:
https://malprob.io/report/050d91cde706f7c981f90878dbd50d92038caeedd38852a10e018e57f188e79b
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/050d91cde706f7c981f90878dbd50d92038caeedd38852a10e018e57f188e79b/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=augzdtpha334tapzbb4nxvinsibyzlxn2oeffiioaghfp4mi46nq._file
Result
Malware family:
n/a
Score:
  6/10
Tags:
n/a
Link:
https://tria.ge/reports/260616-pyqphabw9m/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/050d91cde706f7c981f90878dbd50d92038caeedd38852a10e018e57f188e79b

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments