MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2fa0f3893ca8fff0ba2c2e30d0ba35712ec5dffa27ebe1b87b4a26cb4f7d0aa4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2fa0f3893ca8fff0ba2c2e30d0ba35712ec5dffa27ebe1b87b4a26cb4f7d0aa4
SHA3-384 hash:	70ebacac0d385eff2a22637c4b7e9c21827b8dce31af43b70d2763229ea157767de5b6f2b992dc506d447f3a1ada90ce
SHA1 hash:	f385cce7a961903aaca32e61f8a1fc51202cbe8f
MD5 hash:	b716c8323f355f6af9076469dcc92bd1
humanhash:	jupiter-oranges-hawaii-equal
File name:	com.softkv.profd.puzzle.apk
Download:	download sample
Signature	Joker Alert Create hunting rule
File size:	109'450'696 bytes
First seen:	2026-10-15 16:39:54 UTC
Last seen:	Never
File type:	apk
MIME type:	application/vnd.android.package-archive
ssdeep	3145728:3tscypAPtm2DyqbsU5o2iSfy4ReThPxHv1:ddyYtmEyqQ8iSfy4uhH
TLSH	T1B0383317F318A80DD579697968AA10F2C9270F52C253EBBF24918671AE23B904F51FF3
TrID	65.0% (.APK) Android Package (27000/1/5) 25.3% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 9.6% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	Akitoshi
Tags:	apk dropper joker

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

66

Origin country :

RO

Vendor Threat Intelligence

Incinerator Dangerous

Result

Link:

https://incinerator.cloud/#/public/report/b716c8323f355f6af9076469dcc92bd1/detail

Application Permissions

read phone state and identity (READ_PHONE_STATE)

read/modify/delete external storage contents (WRITE_EXTERNAL_STORAGE)

full Internet access (INTERNET)

view network status (ACCESS_NETWORK_STATE)

view Wi-Fi status (ACCESS_WIFI_STATE)

control vibrator (VIBRATE)

change network connectivity (CHANGE_NETWORK_STATE)

automatically start at boot (RECEIVE_BOOT_COMPLETED)

prevent phone from sleeping (WAKE_LOCK)

Nucleon Malprob Susipicious

Score:

30%

Verdict:

Susipicious

File Type:

APK

Link:

https://malprob.io/report/2fa0f3893ca8fff0ba2c2e30d0ba35712ec5dffa27ebe1b87b4a26cb4f7d0aa4

CERT.PL MWDB

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=f6qphcj4vd77bormfyynborvoexmlx72e7v6dod3jitmwt35bksa._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

android

Link:

https://tria.ge/reports/261015-xawvlszydx/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.