MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 77ffe8b7b3efa39fa35daaee1f70f560079c96c680f9d9d85997d658e2b367a9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	77ffe8b7b3efa39fa35daaee1f70f560079c96c680f9d9d85997d658e2b367a9
SHA3-384 hash:	cbbc03c17d430768b60b15cec76bb8d5c189c66fc70ed3f318f1dde06c4188fc633315435094f46b9965abb0e5f6c9f8
SHA1 hash:	1f1768518de92846b15ebcdc4233942dc24af3f9
MD5 hash:	c1bee6cb18a7125995e675c787b95baf
humanhash:	quiet-equal-princess-three
File name:	test.apk
Download:	download sample
Signature	Metasploit Alert Create hunting rule
File size:	10'230 bytes
First seen:	2025-11-29 12:42:15 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	192:ELt7+5NmmTTxRuk1NY1nD/SMhNF3tT+ogccNiqtBfiioSUfo3OAG8p:ELttmTbuiY1nrSkTd6og9N5B6ioSqo+m
TLSH	T1F822AF74E38A11B0F1917EBB816977A9883E36159AB96A4FE4443FD10E73F81071E298
TrID	77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	BlinkzSec
Tags:	apk Metasploit signed

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

42

Origin country :

SK

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Andr.Bckdr-RXK.17683.18760.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Application.GenericKD.4498629.10203.18129.26189.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

crypto evasive fingerprint invalid-signature persistence signed

Link:

https://www.filescan.io/uploads/692aea621b65ca0bb9275cd9/reports/5f377b44-705e-4e4f-ad64-860894f26ab8/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Link:

https://labs.inquest.net/dfi/sha256/77ffe8b7b3efa39fa35daaee1f70f560079c96c680f9d9d85997d658e2b367a9

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

APK

Link:

https://malprob.io/report/77ffe8b7b3efa39fa35daaee1f70f560079c96c680f9d9d85997d658e2b367a9

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/77ffe8b7b3efa39fa35daaee1f70f560079c96c680f9d9d85997d658e2b367a9/

ReversingLabs TitaniumCloud Android.Hacktool.MetaSploit

Threat name:

Android.Hacktool.MetaSploit

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-11-29 12:43:15 UTC

File Type:

Binary (Archive)

Extracted files:

6

AV detection:

17 of 36 (47.22%)

Threat level:

  1/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=o776rn5t56rz7i25vlxb64hvmadzzfwgqd45twczs7lfryvtm6uq._file

Hatching Triage metasploit

Result

Malware family:

metasploit

Alert

Create hunting rule

Score:

  10/10

Tags:

family:metasploit android

Link:

https://tria.ge/reports/251129-px1s3syrgq/

Behaviour

Acquires the wake lock

Malware Config

C2 Extraction:

tcp://249security.com:4444

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.