🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7b5bd315bdc932d437020233ad39dca18a2a5fe70b2fc6035eb738df2a1266f4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA 2 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7b5bd315bdc932d437020233ad39dca18a2a5fe70b2fc6035eb738df2a1266f4
SHA3-384 hash: dfe1d014d5c6ce325e90a3b984d8d5b73076177196aceba640d4c7b6725b6983c848959c8166a825b72d78ece61a7472
SHA1 hash: f779fbc23003691351c255f4b8aba908610b08d9
MD5 hash: cd8de567437eeb3bb53059673704c854
humanhash: lactose-victor-wolfram-one
File name:Security-Verification.apk
Download: download sample
File size:12'267'227 bytes
First seen:2026-10-26 13:10:31 UTC
Last seen:Never
File type: apk
MIME type:application/zip
ssdeep 196608:yW0DgnVCuyZqPUzGz/Z06wNu8ykfcSRxgR3QfKzS9Ax1mPdQv5clkFylZPXXXK+0:j0Dgsuy6v/Z06IupuggfjE1mPdS5qDXi
TLSH T14BC612A7FBC4A97AC4F2C33208765721694B9C248B6392C79914727C78F76D05E89ECC
Magika apk
Reporter jitesh
Tags:android apk dropper malware RiskWare Tiktok trojan

Intelligence

File Origin
# of uploads :
1
# of downloads :
137
Origin country :
CA CA
Vendor Threat Intelligence
No detections
Verdict:
Unknown
Threat level:
  2.5/10
Confidence:
100%
Tags:
expand lolbin
Link:
https://www.filescan.io/uploads/6adf517116be2fb7a177e7f2/reports/bd509810-987c-429e-9680-b704d3cb565a/overview
Verdict:
Malicious
File Type:
apk
First seen:
2026-10-26T12:01:00Z UTC
Last seen:
2026-10-27T19:22:00Z UTC
Hits:
~10
Link:
https://opentip.kaspersky.com/7b5bd315bdc932d437020233ad39dca18a2a5fe70b2fc6035eb738df2a1266f4/results?tab=lookup
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7b5bd315bdc932d437020233ad39dca18a2a5fe70b2fc6035eb738df2a1266f4/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=pnn5gfn5zezninycaiz22oo4ugfcux7hbmx4ma26w44n6kqsm32a._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
android
Link:
https://tria.ge/reports/261026-qe2s4afs2j/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/7b5bd315bdc932d437020233ad39dca18a2a5fe70b2fc6035eb738df2a1266f4

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:ANDROID_Sample_Unique_5be608a5
Create hunting rule
Author:Marjoriefort
Description:Specimen unique (soumission Bazaar) - strings distinctifs propres au sample
Reference:5be608a563a02c94dbf3b1812b3aa0685a6f8228b5dc74c773cc3c912adef7ba.apk
Rule name:telebot_framework
Create hunting rule
Author:vietdx.mb

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

apk 7b5bd315bdc932d437020233ad39dca18a2a5fe70b2fc6035eb738df2a1266f4

(this sample)

  
Delivery method
Distributed via web download

Comments