MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 47ae095fd9e5143798a70805a23eb294fc072170dac19c1fa112beca186d844a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 7


Intelligence 7 IOCs YARA 1 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 47ae095fd9e5143798a70805a23eb294fc072170dac19c1fa112beca186d844a
SHA3-384 hash: e68a9bb93a070dd19c5baefa1cbf18d2fec0cbca5688ca233bf6a15b559ae108dd3fa60910fbf837fa6f5699579ef464
SHA1 hash: 835c8abf56a7ea6ff7a526ada8dcee2ef533d407
MD5 hash: b8246ab81a904cfe22b49b6f25194336
humanhash: nuts-mexico-delta-london
File name:iMobile lite.apk
Download: download sample
File size:17'888'861 bytes
First seen:2026-03-17 13:12:44 UTC
Last seen:Never
File type: apk
MIME type:application/zip
ssdeep 393216:pqmXci4VbfTE5xpekAK4MMhp9Yf4DZv5/fGTfV4az9e:BcBTT4xpXf47/GQuTt4aRe
TLSH T16407CD23F50969A6CED6A135F5E3579532340D480793A229271FF026FDF21CECA66EC2
TrID 72.4% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3)
27.5% (.ZIP) ZIP compressed archive (4000/1)
Magika apk
Reporter jitesh
Tags:android apk dropper ICICI Bank malware RiskWare trojan

Intelligence

File Origin
# of uploads :
1
# of downloads :
71
Origin country :
IN IN
Vendor Threat Intelligence
No detections
Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
invalid-signature signed
Link:
https://www.filescan.io/uploads/69b95362493cb7d62d0200ec/reports/79a9e8d6-0bc6-4639-ba0b-6698932c7f57/overview
Result
Link:
https://incinerator.cloud/#/public/report/b8246ab81a904cfe22b49b6f25194336/detail
Application Permissions
Allows an application to request installing packages. (REQUEST_INSTALL_PACKAGES)
prevent phone from sleeping (WAKE_LOCK)
automatically start at boot (RECEIVE_BOOT_COMPLETED)
full Internet access (INTERNET)
view network status (ACCESS_NETWORK_STATE)
C2DM permissions (RECEIVE)
Result
Verdict:
UNKNOWN
Link:
https://labs.inquest.net/dfi/sha256/47ae095fd9e5143798a70805a23eb294fc072170dac19c1fa112beca186d844a
Verdict:
Malicious
File Type:
apk
Link:
https://opentip.kaspersky.com/47ae095fd9e5143798a70805a23eb294fc072170dac19c1fa112beca186d844a/results?tab=lookup
Score:
80%
Verdict:
Malware
File Type:
APK
Link:
https://malprob.io/report/47ae095fd9e5143798a70805a23eb294fc072170dac19c1fa112beca186d844a
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/47ae095fd9e5143798a70805a23eb294fc072170dac19c1fa112beca186d844a/
Threat name:
Android.Packed.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-03-17 13:13:26 UTC
File Type:
Binary (Archive)
Extracted files:
939
AV detection:
4 of 23 (17.39%)
Threat level:
  1/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=i6xasx6z4ukdpgfhbac2epvsst6aoilq3lazyh5bck7mugdnqrfa._file
Result
Malware family:
n/a
Score:
  6/10
Tags:
n/a
Link:
https://tria.ge/reports/260317-qf5ldacx9z/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/47ae095fd9e5143798a70805a23eb294fc072170dac19c1fa112beca186d844a

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:telebot_framework
Create hunting rule
Author:vietdx.mb

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

apk 47ae095fd9e5143798a70805a23eb294fc072170dac19c1fa112beca186d844a

(this sample)

  
Delivery method
Distributed via web download

Comments