MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d5a6c9bfe8bdf22b54840e90c5e0d7ef2507c7ae4614e52b0de2cced7e685717. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d5a6c9bfe8bdf22b54840e90c5e0d7ef2507c7ae4614e52b0de2cced7e685717
SHA3-384 hash:	a6d67a207dc99a6181bed7f3659897e9d2600d9bee6e525f01a5d24526664df6c36db2fc63e04ab3e0d925352fec296b
SHA1 hash:	842ef080084d5c1082ec259ece633fa8c5431a88
MD5 hash:	7526f82308bde68835827326b625c8f0
humanhash:	michigan-georgia-sweet-neptune
File name:	Gecko158.apk
Download:	download sample
File size:	5'865'754 bytes
First seen:	2025-11-29 10:42:42 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	98304:gPxH3oTwrYkKjofsros5OrsbxYfc0D1BWoz5qPvrEZC0vPqmYZnXrfLR/mpCltk:gJHNKMfyaIbaciAFvrEZpXqmY9XrF/mX
TLSH	T15346F1C6F7D8A92FC8775072C9BE52B151874C028A839F836D18760C69BB5D42F5AFC8
TrID	50.0% (.APK) Android Package (27000/1/5) 23.1% (.VYM) VYM Mind Map (12500/1/3) 19.4% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 7.4% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	juroots
Tags:	apk

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

30

Origin country :

CH

Vendor Threat Intelligence

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Tags:

base64 crypto evasive expand fingerprint lolbin signed

Link:

https://www.filescan.io/uploads/692ace671b65ca0bb9274e05/reports/02fe29b2-bb90-40f4-b172-3912f9c53f7c/overview

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Link:

https://labs.inquest.net/dfi/sha256/d5a6c9bfe8bdf22b54840e90c5e0d7ef2507c7ae4614e52b0de2cced7e685717

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

apk

First seen:

2024-04-08T11:58:00Z UTC

Last seen:

2025-11-13T23:20:00Z UTC

Hits:

~100

Link:

https://opentip.kaspersky.com/d5a6c9bfe8bdf22b54840e90c5e0d7ef2507c7ae4614e52b0de2cced7e685717/results?tab=lookup

Nucleon Malprob Malware

Score:

98%

Verdict:

Malware

File Type:

APK

Link:

https://malprob.io/report/d5a6c9bfe8bdf22b54840e90c5e0d7ef2507c7ae4614e52b0de2cced7e685717

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/d5a6c9bfe8bdf22b54840e90c5e0d7ef2507c7ae4614e52b0de2cced7e685717/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=2wtmtp7ixxzcwveeb2imlygx54sqpr5oiykokkyn4lgo27tik4lq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

android collection credential_access discovery impact persistence

Link:

https://tria.ge/reports/251129-msmdsagk7w/

Behaviour

Checks CPU information

Checks memory information

Registers a broadcast receiver at runtime (usually for listening for system events)

Queries the mobile country code (MCC)

Obtains sensitive information copied to the device clipboard

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.05

Link:

https://yomi.yoroi.company/submissions/d5a6c9bfe8bdf22b54840e90c5e0d7ef2507c7ae4614e52b0de2cced7e685717