MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1f2a3a4d615ed1c0a067e01797ba7c18d19a07cc3bc00cf52aba3a7699142aca. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	1f2a3a4d615ed1c0a067e01797ba7c18d19a07cc3bc00cf52aba3a7699142aca
SHA3-384 hash:	df370a1fc7108934db16dc412168a14d10acf0fc56bd6dbb0005243a45d3451c9073c1a74db889cd6ef72f4a1f1c62f5
SHA1 hash:	f065f3ac7b4ccd97a718939f18ef1569df2842da
MD5 hash:	ba32b8c1d61fe8f25c488d5c1d2368e4
humanhash:	juliet-lima-mango-pluto
File name:	FltPlan+Go_5.0.21_APKPure.xapk
Download:	download sample
File size:	115'543'111 bytes
First seen:	2026-09-09 08:30:15 UTC
Last seen:	Never
File type:	xapk
MIME type:	application/zip
ssdeep	786432:W5B4J60TQVqFhB7WnK+cCn4+lcyCSDD49AOmDXbPJD9zTSCKCujSIfDm4/J8p4uX:y0IWi0gTQJ04hJc1wa
TLSH	T1A148DF16E6414C33D5AE133539F743917B325C8AA2838756284DF1BD7FB32C8AB8A395
TrID	77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	heids
Tags:	xapk

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

25

Origin country :

AU

Vendor Threat Intelligence

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/1f2a3a4d615ed1c0a067e01797ba7c18d19a07cc3bc00cf52aba3a7699142aca

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

zip

Link:

https://opentip.kaspersky.com/1f2a3a4d615ed1c0a067e01797ba7c18d19a07cc3bc00cf52aba3a7699142aca/results?tab=lookup

Nucleon Malprob Malware

Score:

72%

Verdict:

Malware

File Type:

ARCHIVE

Link:

https://malprob.io/report/1f2a3a4d615ed1c0a067e01797ba7c18d19a07cc3bc00cf52aba3a7699142aca

CERT.PL MWDB

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=d4vdutlbl3i4bidh4alzpot4ddizub6mhpaaz5jkxi5hngiuflfa._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  8/10

Tags:

android defense_evasion discovery

Link:

https://tria.ge/reports/260909-kjddeavte1/

Behaviour

Checks memory information

Checks the presence of a debugger

Acquires the wake lock

Queries information about active data network

Checks if the Android device is rooted.

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.