MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1a13890c7e2d50a24c68efc7d735492191257785cbedf76c678ba8c26c749a5d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

138

Origin country :

JP

Vendor Threat Intelligence

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Tags:

base64 crypto evasive expand fingerprint lolbin signed

Link:

https://www.filescan.io/uploads/690d68bffad650b0c9979101/reports/3433337d-408f-46ef-b5ae-895aaaa7e7c0/overview

Incinerator Dangerous

Result

Link:

https://incinerator.cloud/#/public/report/530346c3e81d8b9802883bfb119cc5c2/detail

Application Permissions

record audio (RECORD_AUDIO)

full Internet access (INTERNET)

view network status (ACCESS_NETWORK_STATE)

prevent phone from sleeping (WAKE_LOCK)

change network connectivity (CHANGE_NETWORK_STATE)

C2DM permissions (RECEIVE)

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

apk

Link:

https://opentip.kaspersky.com/1a13890c7e2d50a24c68efc7d735492191257785cbedf76c678ba8c26c749a5d/results?tab=lookup

Nucleon Malprob Susipicious

Score:

68%

Verdict:

Susipicious

File Type:

APK

Link:

https://malprob.io/report/1a13890c7e2d50a24c68efc7d735492191257785cbedf76c678ba8c26c749a5d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/1a13890c7e2d50a24c68efc7d735492191257785cbedf76c678ba8c26c749a5d/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=dijysdd6fviketdi57d5onkjegisk54fzpw7o3dhroume3dutjoq._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  8/10

Tags:

android collection credential_access defense_evasion discovery evasion impact persistence

Link:

https://tria.ge/reports/251107-d4xt8azmem/

Behaviour

Checks CPU information

Checks memory information

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks the presence of a debugger

Acquires the wake lock

Queries information about active data network

Queries the mobile country code (MCC)

Loads dropped Dex/Jar

Obtains sensitive information copied to the device clipboard

Queries information about running processes on the device

Checks if the Android device is rooted.

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/4f70a84b-45e5-4616-bb97-b1d405860b36

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.