MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9b7adffc9107a1222106f1af99cbf7f2c787a7ad2f4d988296a3dfea6cf92d5d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	9b7adffc9107a1222106f1af99cbf7f2c787a7ad2f4d988296a3dfea6cf92d5d
SHA3-384 hash:	0ab9bc109a0091eb10dca925ef934266c924f81dda7dc6d4ce0235f3c80f64b64d5cb30cc90f02b156a859c75dcc2341
SHA1 hash:	01eb4ef1d48eb750c1f977b5deb2df5f60e53b7a
MD5 hash:	3ed3d74cebe891949d0097723b3ed3b1
humanhash:	sweet-cup-delta-uncle
File name:	rajatoto1_1.1.5.apk
Download:	download sample
File size:	4'424'971 bytes
First seen:	2025-11-29 10:43:19 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	98304:UK3UuAiI6LxNvUlsH5vGq0OEFJ0f3+idcDkydlPeT0iNd2ofr9Ur:UctJI6dNp5+q0DFJo3++ydlPeg
TLSH	T13C26F09AF758AB2FC877403349EA923212974D178A939B436844321C7D776F80F9DBC9
TrID	49.0% (.APK) Android Package (27000/1/5) 24.5% (.JAR) Java Archive (13500/1/2) 19.0% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 7.2% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	juroots
Tags:	apk signed

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

32

Origin country :

CH

Vendor Threat Intelligence

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

base64 crypto evasive expand fingerprint lolbin signed

Link:

https://www.filescan.io/uploads/692ace5cd0d5e7288b50582a/reports/82b25e98-5de3-48f8-bfe8-4bebf640138b/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Link:

https://labs.inquest.net/dfi/sha256/9b7adffc9107a1222106f1af99cbf7f2c787a7ad2f4d988296a3dfea6cf92d5d

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

apk

First seen:

2025-11-28T17:30:00Z UTC

Last seen:

2025-11-28T17:57:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/9b7adffc9107a1222106f1af99cbf7f2c787a7ad2f4d988296a3dfea6cf92d5d/results?tab=lookup

Nucleon Malprob Malware

Score:

97%

Verdict:

Malware

File Type:

APK

Link:

https://malprob.io/report/9b7adffc9107a1222106f1af99cbf7f2c787a7ad2f4d988296a3dfea6cf92d5d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/9b7adffc9107a1222106f1af99cbf7f2c787a7ad2f4d988296a3dfea6cf92d5d/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=tn5n77era6qseiig6gxzts7x6ldypj5nf5gzrauwupp6u3hzfvoq._file

Hatching Triage

Gathering data

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/9b7adffc9107a1222106f1af99cbf7f2c787a7ad2f4d988296a3dfea6cf92d5d