MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4de47d8a15aae4aa5333c99cca6908a81e9a3e0a0157882a278a6ccaa756980c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4de47d8a15aae4aa5333c99cca6908a81e9a3e0a0157882a278a6ccaa756980c
SHA3-384 hash:	7fea730e5ddde684839c31dfa19c31c5267d8647e5a5bd7cd6334a53990a19c289dcf6e98ca21894418d39ccc3cbace5
SHA1 hash:	cfcd17d2aa4ae8506065738dd93c9f38e01d9833
MD5 hash:	715781bb6ca48ca1372b7615fdb5d039
humanhash:	pip-early-fillet-jupiter
File name:	sapu4d_1.0.0.apk
Download:	download sample
File size:	4'858'390 bytes
First seen:	2025-11-19 07:16:04 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	98304:34FP2pbk342TQsuj/yZOPX47qj4TeFdB26ccEUUify2SEgLCr4lR:34poWUsujKZuI7qMTk2JrNoy2oR
TLSH	T1B326F19BF708A92FC87B14F246AE523152574D178A83DB436C44361C68B76D83F9EBC8
TrID	65.0% (.APK) Android Package (27000/1/5) 25.3% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 9.6% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	juroots
Tags:	apk

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

57

Origin country :

IL

Vendor Threat Intelligence

Incinerator Legit

Result

Link:

https://incinerator.cloud/#/public/report/715781bb6ca48ca1372b7615fdb5d039/detail

Application Permissions

full Internet access (INTERNET)

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Link:

https://labs.inquest.net/dfi/sha256/4de47d8a15aae4aa5333c99cca6908a81e9a3e0a0157882a278a6ccaa756980c

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

apk

First seen:

2024-03-11T03:09:00Z UTC

Last seen:

2025-11-19T14:20:00Z UTC

Hits:

~100

Link:

https://opentip.kaspersky.com/4de47d8a15aae4aa5333c99cca6908a81e9a3e0a0157882a278a6ccaa756980c/results?tab=lookup

Nucleon Malprob Malware

Score:

98%

Verdict:

Malware

File Type:

APK

Link:

https://malprob.io/report/4de47d8a15aae4aa5333c99cca6908a81e9a3e0a0157882a278a6ccaa756980c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4de47d8a15aae4aa5333c99cca6908a81e9a3e0a0157882a278a6ccaa756980c/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=jxsh3cqvvlskuuztzgomu2iivapjupqkaflyqkrhrjwmvj2wtaga._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

android collection credential_access discovery impact persistence

Link:

https://tria.ge/reports/251119-h6datawnfv/

Behaviour

Checks CPU information

Checks memory information

Registers a broadcast receiver at runtime (usually for listening for system events)

Queries the mobile country code (MCC)

Obtains sensitive information copied to the device clipboard

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/a689ac88-e427-4039-af17-91eefd669a78

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.