MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d5b948179c8cc33e4cbeebe0369c7dca452d968646a588d730341c3879d64880. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d5b948179c8cc33e4cbeebe0369c7dca452d968646a588d730341c3879d64880
SHA3-384 hash:	23f1406545373f09c5f74eef5ab8b525b2456700518b480d527c9e1ef3deaf50e520a5515c2ee2c1f3726605802d2df4
SHA1 hash:	c11ac64e929538bf4de9c493cfc76ad0aa395ee4
MD5 hash:	ff2b978d9e0f1f82ae81c423b4e5012c
humanhash:	thirteen-two-shade-five
File name:	ClaroRed5G (1).apk
Download:	download sample
File size:	8'023'361 bytes
First seen:	2026-08-06 14:48:29 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	196608:z/azDJaeoZo8QJP5RQV3fc1A/oM7SK3ZozlBFlF7u3fFM:DSkeoZNo50c1A17Cl1FMfFM
TLSH	T1D68633B2A3371C28F1E693349CD5350119568C618A57678F78DDB13C1A737888BEEEB8
TrID	87.0% (.APK) Android Package (27000/1/5) 12.9% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	arcvault
Tags:	apk

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

210

Origin country :

ES

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

invalid-signature signed

Link:

https://www.filescan.io/uploads/6a749ec63f11fbae33a6a624/reports/8ad23080-64e7-457d-9dc0-5952c381288c/overview

Incinerator Dangerous

Result

Link:

https://incinerator.cloud/#/public/report/ff2b978d9e0f1f82ae81c423b4e5012c/detail

Application Permissions

Allows an application to request installing packages. (REQUEST_INSTALL_PACKAGES)

full Internet access (INTERNET)

view network status (ACCESS_NETWORK_STATE)

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

apk

First seen:

2026-08-05T19:05:00Z UTC

Last seen:

2026-08-07T07:32:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/d5b948179c8cc33e4cbeebe0369c7dca452d968646a588d730341c3879d64880/results?tab=lookup

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/d5b948179c8cc33e4cbeebe0369c7dca452d968646a588d730341c3879d64880/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=2w4uqf44rtbt4tf65pqdnhd5zjcs3fugi2syrvzqgqodq6owjcaa._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

n/a

Link:

https://tria.ge/reports/260806-r6r9eadn6x/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/d5b948179c8cc33e4cbeebe0369c7dca452d968646a588d730341c3879d64880