MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a812cba48749a1bd14931d235f75f54f52710463eb4cecb1b4ded8d82be93a42. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a812cba48749a1bd14931d235f75f54f52710463eb4cecb1b4ded8d82be93a42
SHA3-384 hash:	be9c0e56e988cafa82509ca74a6811f612e7566a883b5057a46619ac1a1028011bf796eb62a7a30ea77aaffbf2ab3875
SHA1 hash:	ba166c29e606339abe5accc97310eb66a21d8b90
MD5 hash:	de6ac97a12722368a7b944682aa01525
humanhash:	april-cold-sad-spaghetti
File name:	a812cba48749a1bd14931d235f75f54f52710463eb4cecb1b4ded8d82be93a42.apk
Download:	download sample
File size:	1'916'804 bytes
First seen:	2026-08-03 13:13:13 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	49152:fHjfyQEvcI+IMydEaOqVtrr32vDHM0d1PXqjgI7ov6:fDaQPvXyd7trqd16ED6
TLSH	T16895AD85BBE99E2ECC7340364F4A5635150AAE27C343C343D968361C78BB6F44E897E9
TrID	65.0% (.APK) Android Package (27000/1/5) 25.3% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 9.6% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	johnk3r
Tags:	apk PixRevolution

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

225

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Android.Siggen.Susp2.5225.15379.24183.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Android.Siggen.Susp2.5226.23384.14538.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Android.Siggen.Susp2.5226.22976.6888.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Tags:

base64 evasive expand fingerprint lolbin signed

Link:

https://www.filescan.io/uploads/6a709a99993727eca567c3a3/reports/b5f38343-48b8-41be-9276-69a149c97ad7/overview

Incinerator Dangerous

Result

Link:

https://incinerator.cloud/#/public/report/de6ac97a12722368a7b944682aa01525/detail

Application Permissions

Allows an application to request installing packages. (REQUEST_INSTALL_PACKAGES)

full Internet access (INTERNET)

view network status (ACCESS_NETWORK_STATE)

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

apk

First seen:

2026-03-20T15:00:00Z UTC

Last seen:

2026-03-25T02:30:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/a812cba48749a1bd14931d235f75f54f52710463eb4cecb1b4ded8d82be93a42/results?tab=lookup

Nucleon Malprob Malware

Score:

90%

Verdict:

Malware

File Type:

APK

Link:

https://malprob.io/report/a812cba48749a1bd14931d235f75f54f52710463eb4cecb1b4ded8d82be93a42

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/a812cba48749a1bd14931d235f75f54f52710463eb4cecb1b4ded8d82be93a42/

ReversingLabs TitaniumCloud Android.Trojan.Ravartar

Threat name:

Android.Trojan.Ravartar

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-08-03 13:54:32 UTC

File Type:

Binary (Archive)

Extracted files:

856

AV detection:

12 of 38 (31.58%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=vajmxjehjgq32fetdurv65pvj5jhcbdd5ngozmnu33mnqk7jhjba._file

Hatching Triage

Gathering data

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.05

Link:

https://yomi.yoroi.company/submissions/a812cba48749a1bd14931d235f75f54f52710463eb4cecb1b4ded8d82be93a42