MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697
SHA3-384 hash:	c9443ce31e1ed185aa976412d305ef1d5f2b9d69360e4a97cf7530edd1b7643c0999f48f6f44e739b36ebb1211b6e772
SHA1 hash:	26cb72ca0d43f4e59b20636d1fc9f78457c005d6
MD5 hash:	86e3a5f53a63adb57ac737ed0c72fd1f
humanhash:	mobile-mississippi-ten-east
File name:	1024.apk
Download:	download sample
File size:	1'762'036 bytes
First seen:	2025-11-25 07:46:55 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	49152:Ui6TMh3MicMlOGKPWoWCm499nibyxo/KruA4:/6TYdcMiDXico/Krun
TLSH	T12585ADDBF718643FD8BB153255BE523267A74D0289836B832944361C2EBB1891F6DFC8
TrID	65.0% (.APK) Android Package (27000/1/5) 25.3% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 9.6% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	juroots
Tags:	apk

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

53

Origin country :

IL

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Trojan-Spy.AndroidOS.Banker.9535.27261.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Tags:

base64 evasive expand lolbin signed

Link:

https://www.filescan.io/uploads/69255f21f6a4ba1793b022d2/reports/a371eb12-dab7-45bf-a0a2-c1f987a12ee6/overview

Incinerator Dangerous

Result

Link:

https://incinerator.cloud/#/public/report/86e3a5f53a63adb57ac737ed0c72fd1f/detail

Application Permissions

read/modify/delete external storage contents (WRITE_EXTERNAL_STORAGE)

read external storage contents (READ_EXTERNAL_STORAGE)

full Internet access (INTERNET)

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Link:

https://labs.inquest.net/dfi/sha256/a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

apk

First seen:

2024-09-30T13:36:00Z UTC

Last seen:

2025-11-27T05:21:00Z UTC

Hits:

~100000

Link:

https://opentip.kaspersky.com/a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697/results?tab=lookup

Nucleon Malprob Malware

Score:

94%

Verdict:

Malware

File Type:

APK

Link:

https://malprob.io/report/a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=usmut2rwypsqc3e6eiip6n6rksggpkr6gfes34dicjqp5zs362lq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

android collection credential_access discovery impact persistence

Link:

https://tria.ge/reports/251125-jm526aan3w/

Behaviour

Checks memory information

Registers a broadcast receiver at runtime (usually for listening for system events)

Queries the mobile country code (MCC)

Obtains sensitive information copied to the device clipboard

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/39e6dbf3-65aa-4b10-b85f-c8d824c7a5bc

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.05

Link:

https://yomi.yoroi.company/submissions/a49949ea36c3e5016c9e2210ff37d1548c67aa3e31492df0681260fee65bf697