0497b6000a7a23e9e9b97472bc2d3799caf49cbbea1627ad4d87ae6e0b7e2a98

Classification: Malicious

0497b6000a7a23e9e9b97472bc2d3799caf49cbbea1627ad4d87ae6e0b7e2a98 is a banking trojan. Detected by 39 antivirus engines. Linked to Riltok malware.

Detection summary

  • 39 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: RILTOK (S0403)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Riltok Triage 2026-05-13 08:34:53 2026-05-13 14:43:14 malicious-activity S0403 Riltok

Tags

riltok android banker collection credential_access defense_evasion discovery evasion execution impact persistence trojan

Sample information

Filenames
0497b6000a7a23e9e9b97472bc2d3799caf49cbbea1627ad4d87ae6e0b7e2a98.apk
SHA-256
0497b6000a7a23e9e9b97472bc2d3799caf49cbbea1627ad4d87ae6e0b7e2a98
First indexed
2026-05-13 08:34:53
Last updated
2026-07-20 00:19:07

Antivirus detections

EngineDetection
AVGAndroid:Banker-ACY [Trj]
AhnLab-V3Trojan/Android.Agent.866722
AlibabaTrojanBanker:Android/Riltok.32dfd36e
Antiy-AVLTrojan[Banker]/Android.Riltok
AvastAndroid:Banker-ACY [Trj]
Avast-MobileAndroid:Evo-gen [Trj]
AviraANDROID/Banker.FNQE.Gen
BitDefenderFalxAndroid.Trojan.Banker.IA
CAT-QuickHealAndroid.Riltok.A
CTXapk.trojan.banker
CynetMalicious (score: 99)
DrWebAndroid.BankBot.374.origin
ESET-NOD32Android/Spy.Banker.AEN trojan
F-SecureMalware.ANDROID/Banker.FNQE.Gen
FortinetAndroid/Generic.Z.8EF560!tr
GoogleDetected
IkarusTrojan-Banker.AndroidOS.Riltok
K7GWTrojan ( 005514041 )
KasperskyHEUR:Trojan-Banker.AndroidOS.Riltok.a
LionicTrojan.AndroidOS.Riltok.C!c
RisingSpyware.Banker/Android!8.45C (CLOUD)
SangforMalware.Android-Script.Save.b8e098e9
SkyhighArtemis!Trojan
SophosAndr/Banker-GXC
SymantecTrojan.Gen.MBT
SymantecMobileInsightSpyware:MobileSpy
Tencenta.privacy.BankRiltok
TrellixENSArtemis!2F07C9B2A671
TrendMicroTROJ_FRS.0NA103FQ19
TrendMicro-HouseCallTROJ_FRS.0NA103FQ19
TrustlookAndroid.Malware.Trojan
VaristAndroidOS/Banker.M
XcitiumMalware@#r9xzgcsw9ihc
ZoneAlarmAndr/Banker-GXC
AviraANDROID/Evo.AG1339984.Gen
F-SecureMalware.ANDROID/Evo.AG1339984.Gen
McAfeeDti!0497B6000A7A
NANO-AntivirusTrojan.Android.BankBot.feaqzm
huorongTrojan/Generic!2F88643F0D71C6F2