MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 b2225250a1fcff06750f32d3abb999ffe26fbd21abc7b87ff0e91f8e0449652c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 4
| SHA256 hash: | b2225250a1fcff06750f32d3abb999ffe26fbd21abc7b87ff0e91f8e0449652c |
|---|---|
| SHA3-384 hash: | 61ed70107f3d763278b82629a081224c3367707dfb432083eaaba1bcd74d6fa3ebcbcfdd4cfe5170e093e2a5441e1cc3 |
| SHA1 hash: | 3b8383c31c97e7d5f768064599a721e2335f6600 |
| MD5 hash: | 19e8b8935b7b065b6c3830a3cd82342d |
| humanhash: | early-violet-robert-mirror |
| File name: | rubizh-1.2.83.apk |
| Download: | download sample |
| File size: | 66'781'865 bytes |
| First seen: | 2026-06-08 14:12:22 UTC |
| Last seen: | Never |
| File type: | apk |
| MIME type: | application/zip |
| ssdeep | 393216:qep+bWipjIs9oP810s/d/AaYT8v5Y2BqKIq0iFcyGeg/R4tGeKH6oqnGk:62U10sfv5Y2BtZTzg/R4pKJLk |
| TLSH | T1CFE7D047E0AD8635D4DAE278BB2E0562A234385C46E2D55BB90C9210BFDF5F01BE27F1 |
| TrID | 26.9% (.SPE) SPSS Extension (30000/1/7) 24.2% (.APK) Android Package (27000/1/5) 12.1% (.JAR) Java Archive (13500/1/2) 11.2% (.VYM) VYM Mind Map (12500/1/3) 9.4% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) |
| Magika | apk |
| Reporter | Anonymous |
| Tags: | apk |
Intelligence
File Origin
# of uploads :
1
# of downloads :
155
Origin country :
UAVendor Threat Intelligence
Verdict:
Unknown
Threat level:
2.5/10
Confidence:
100%
Tags:
anti-debug base64 crypto evasive expand lolbin signed
Result
Application Permissions
read external storage contents (READ_EXTERNAL_STORAGE)
full Internet access (INTERNET)
view network status (ACCESS_NETWORK_STATE)
allow use of fingerprint (USE_FINGERPRINT)
prevent phone from sleeping (WAKE_LOCK)
control vibrator (VIBRATE)
Verdict:
Unknown
File Type:
apk
Score:
11%
Verdict:
Benign
File Type:
APK
Gathering data
Detection(s):
Suspicious file
Result
Malware family:
n/a
Score:
7/10
Tags:
android evasion
Behaviour
Checks CPU information
Loads dropped Dex/Jar
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
apk b2225250a1fcff06750f32d3abb999ffe26fbd21abc7b87ff0e91f8e0449652c
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.