MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 96bcbfd6a3f4ad3b535a43c544a6cbb5b19cacde672cb06fe8d234c09d3a2085. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	96bcbfd6a3f4ad3b535a43c544a6cbb5b19cacde672cb06fe8d234c09d3a2085
SHA3-384 hash:	66309ed2e151e15113f2c88e618f7cce02fe60cdbc199ff624a2ffd3de445960a57622050f7c1ec14c6cf174833fc90d
SHA1 hash:	4dda380c0f376624be50e857eb05abea0aa68e27
MD5 hash:	c14826db2f39bbef3b4886b8cb4a8720
humanhash:	mango-beer-snake-social
File name:	CFETEITServicio.apk.1
Download:	download sample
File size:	6'674'959 bytes
First seen:	2026-10-16 17:22:50 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	98304:Y6rUSkJEcdjKcIWe8M3Af+offdLbx3kgP4Cn3gg9KFB18a4sWx7DsjRo:Y6rUvJzBKcE3Qd3x3tPByma4bPsjy
TLSH	T1EF66F1A2E74D9D1BD8F7B5380D8623A19024AC4C3708459B5641B32CBF73ED76E217EA
TrID	72.4% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 27.5% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	bt0dotninja
Tags:	apk exe

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

75

Origin country :

MX

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Tags:

anti-debug base64 crypto evasive fingerprint signed

Link:

https://www.filescan.io/uploads/6ad27c0cc49973c23696b06a/reports/3477d7d7-2185-4618-a97e-b2fa4b7f8f80/overview

Incinerator Dangerous

Result

Link:

https://incinerator.cloud/#/public/report/c14826db2f39bbef3b4886b8cb4a8720/detail

Application Permissions

Allows an application to request installing packages. (REQUEST_INSTALL_PACKAGES)

full Internet access (INTERNET)

view network status (ACCESS_NETWORK_STATE)

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

apk

First seen:

2026-10-16T15:42:00Z UTC

Last seen:

2026-10-18T01:58:00Z UTC

Hits:

~100

Link:

https://opentip.kaspersky.com/96bcbfd6a3f4ad3b535a43c544a6cbb5b19cacde672cb06fe8d234c09d3a2085/results?tab=lookup

Nucleon Malprob Malware

Score:

93%

Verdict:

Malware

File Type:

APK

Link:

https://malprob.io/report/96bcbfd6a3f4ad3b535a43c544a6cbb5b19cacde672cb06fe8d234c09d3a2085

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/96bcbfd6a3f4ad3b535a43c544a6cbb5b19cacde672cb06fe8d234c09d3a2085/

ReversingLabs TitaniumCloud Android.Infostealer.Banbra

Threat name:

Android.Infostealer.Banbra

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-10-16 19:33:38 UTC

File Type:

Binary (Archive)

Extracted files:

437

AV detection:

9 of 38 (23.68%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=s26l7vvd6swtwu22ipcujjwlwwyzzlg6m4wla37i2i2mbhj2eccq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

n/a

Link:

https://tria.ge/reports/261016-x9s8rsct3y/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI AndroRAT

Threat name:

AndroRAT

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/96bcbfd6a3f4ad3b535a43c544a6cbb5b19cacde672cb06fe8d234c09d3a2085