MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 54286bb0cef07a9bbb49d8d1ab57e9ad4a560d7cf538a38972c2fa6294ea16af. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	54286bb0cef07a9bbb49d8d1ab57e9ad4a560d7cf538a38972c2fa6294ea16af
SHA3-384 hash:	5431a0af2540bfaf8b126ad1684be8f6106b8e59d58400d21ab81370e0debf57c8f2e1cb1c7ca1340c371a3999265c8e
SHA1 hash:	cdc374c08520125d87d31454af285b0cec46e977
MD5 hash:	df3cea4a2cce3595bd10f0dca776482c
humanhash:	leopard-fifteen-mike-violet
File name:	iMobile Lite(2).apk
Download:	download sample
File size:	15'080'981 bytes
First seen:	2025-10-31 09:11:55 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	393216:s54ylkFP4eY1ynmKY/LSrEXZ8W3baTiSQzKwom:sGYwGlKYjCEWAaGZ
TLSH	T175E63352F789B823C8FB93328675CB61C08A8C158B07D7532AA47B3D19B7BD09B51BC5
TrID	72.4% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 27.5% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	mohit
Tags:	android apk Bank ICICI malware

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

97

Origin country :

IN

Vendor Threat Intelligence

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

invalid-signature signed

Link:

https://www.filescan.io/uploads/69047e7a21d55ed90d435dc1/reports/6c60094f-2c5e-4ff4-a64a-c25c41940013/overview

Incinerator Dangerous

Result

Link:

https://incinerator.cloud/#/public/report/df3cea4a2cce3595bd10f0dca776482c/detail

Application Permissions

read Browser's history and bookmarks (READ_HISTORY_BOOKMARKS)

write Browser's history and bookmarks (WRITE_HISTORY_BOOKMARKS)

Allows an application to request installing packages. (REQUEST_INSTALL_PACKAGES)

prevent phone from sleeping (WAKE_LOCK)

automatically start at boot (RECEIVE_BOOT_COMPLETED)

full Internet access (INTERNET)

view network status (ACCESS_NETWORK_STATE)

C2DM permissions (RECEIVE)

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

apk

First seen:

2025-10-31T08:27:00Z UTC

Last seen:

2025-10-31T16:00:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/54286bb0cef07a9bbb49d8d1ab57e9ad4a560d7cf538a38972c2fa6294ea16af/results?tab=lookup

Nucleon Malprob Susipicious

Score:

49%

Verdict:

Susipicious

File Type:

APK

Link:

https://malprob.io/report/54286bb0cef07a9bbb49d8d1ab57e9ad4a560d7cf538a38972c2fa6294ea16af

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/54286bb0cef07a9bbb49d8d1ab57e9ad4a560d7cf538a38972c2fa6294ea16af/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=kqugxmgo6b5jxo2j3di2wv7jvvffmdl46u4khclsyl5gffhkc2xq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

android

Link:

https://tria.ge/reports/251031-k8zb6sgj2v/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/54286bb0cef07a9bbb49d8d1ab57e9ad4a560d7cf538a38972c2fa6294ea16af