MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cb7744fe6345dd0e4f15f1acdde23ecb6d484b3c8a6ce8792628a6a1453eefa4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	cb7744fe6345dd0e4f15f1acdde23ecb6d484b3c8a6ce8792628a6a1453eefa4
SHA3-384 hash:	651ebb663fe221e8f948e5c2e43ed6d54f1d21515577b79ea2bdd8bd73874a52d91324d7996a6316ee7c472313844354
SHA1 hash:	7b52441aeb89988a642349327b66a52e541d5df6
MD5 hash:	eb63a912c5765addf3d30a1db8d01252
humanhash:	whiskey-sodium-charlie-echo
File name:	app(1).apk
Download:	download sample
File size:	6'352'237 bytes
First seen:	2026-07-03 03:07:36 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	98304:AaaCVfzs5U+48Sn0QVojNjwGfDiWpm/oOLjchdYq9+cjTTRYjE08zfhSEk6n:Aa5ad4L05MqDVoAnsq99yg5Sin
TLSH	T1FE56E18BE745565AC4F982B90C3736251D477D214BA3828BDB2C3E3C687B1F48E979C8
Magika	apk
Reporter	BastianHein
Tags:	apk mparivahan

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

157

Origin country :

CL

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

bankingtrojan dropper expand fingerprint lolbin persistence signed

Link:

https://www.filescan.io/uploads/6a4727bb1ae48e59ca433eea/reports/b0215650-bb0b-4418-90b4-7be625f9046c/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

apk

First seen:

2026-07-03T00:37:00Z UTC

Last seen:

2026-07-04T21:50:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/cb7744fe6345dd0e4f15f1acdde23ecb6d484b3c8a6ce8792628a6a1453eefa4/results?tab=lookup

Nucleon Malprob Malware

Score:

74%

Verdict:

Malware

File Type:

APK

Link:

https://malprob.io/report/cb7744fe6345dd0e4f15f1acdde23ecb6d484b3c8a6ce8792628a6a1453eefa4

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/cb7744fe6345dd0e4f15f1acdde23ecb6d484b3c8a6ce8792628a6a1453eefa4/

ReversingLabs TitaniumCloud Win32.Trojan.Ravartar

Threat name:

Win32.Trojan.Ravartar

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-07-03 03:09:35 UTC

File Type:

Binary (Archive)

Extracted files:

1139

AV detection:

4 of 24 (16.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=zn3uj7tdixoq4tyv6gwn3yr6znwuqsz4rjwoq6jgfctkcrj656sa._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

android

Link:

https://tria.ge/reports/260703-dm79maax9y/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

0.80

Link:

https://yomi.yoroi.company/submissions/cb7744fe6345dd0e4f15f1acdde23ecb6d484b3c8a6ce8792628a6a1453eefa4