0803711244bf3ab0b36a0993d640691be059a8bf407070834bfb427396cbb600
Classification: Malicious
0803711244bf3ab0b36a0993d640691be059a8bf407070834bfb427396cbb600 is a banking trojan (Java archive, 2.6 MB). Linked to Cerberus, Anubis malware.
Detection summary
- 31 antivirus detections (49% detection ratio)
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CERBERUS (S0480) ANUBIS (S0422)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Anubis | Triage | 2026-07-04 13:50:10 | 2026-07-16 15:45:27 | malicious-activity | S0422 Anubis |
| Android:Cerberus | Hybrid-Analysis | 2021-01-27 03:30:07 | 2021-01-27 03:30:07 | S0480 Cerberus |
Tags
cerber ransomware anubis cometbot android banker collection credential_access defense_evasion discovery evasion infostealer persistence stealth trojanSample information
- Filenames
- 0803711244BF3AB0B36A0993D640691BE059A8BF407070834BFB427396CBB600.apk
- File type
- Java archive data (JAR)
- Size
- 2730152 bytes
- MD5
201aa553f5c98b69c975ab2e58704dce- SHA-1
47a77bede86f2227491876a6dc8719fecd2c12fe- SHA-256
0803711244bf3ab0b36a0993d640691be059a8bf407070834bfb427396cbb600- First indexed
- 2021-01-27 03:30:07
- Last updated
- 2026-09-12 23:50:43
Antivirus detections
| Engine | Detection |
|---|---|
| CAT-QuickHeal | Android.Anubis.A547e |
| McAfee | Artemis!201AA553F5C9 |
| Trustlook | Android.PUA.DebugKey |
| Alibaba | TrojanDropper:Android/Banker.b03a5eca |
| K7GW | Trojan ( 0053b5f91 ) |
| Invincea | Andr/Banker-GZA |
| Cyren | Trojan.XVGD-2 |
| SymantecMobileInsight | Other:Android.Reputation.1 |
| Symantec | Trojan.Gen.2 |
| Avast | Android:Cerberus-CF [Bank] |
| Kaspersky | HEUR:Trojan-Dropper.AndroidOS.Hqwar.cf |
| NANO-Antivirus | Trojan.Android.BankBot.huezyc |
| F-Secure | Malware.ANDROID/Dropper.FHDI.Gen |
| DrWeb | Android.BankBot.4358 |
| McAfee-GW-Edition | Artemis |
| Sophos | Andr/Banker-GZA |
| Avast-Mobile | Android:Evo-gen [Trj] |
| Avira | ANDROID/Banker.FGZI.Gen |
| Microsoft | Trojan:Win32/Skeeyah.A!rfn |
| AegisLab | Trojan.AndroidOS.Hqwar.C!c |
| ZoneAlarm | HEUR:Trojan-Dropper.AndroidOS.Hqwar.cf |
| Cynet | Malicious (score: 85) |
| AhnLab-V3 | Trojan/Android.Banker.984784 |
| MAX | malware (ai score=100) |
| Zoner | Trojan.Android.Gen.5726842 |
| ESET-NOD32 | a variant of Android/TrojanDropper.Agent.FSN |
| Ikarus | Trojan-Banker.AndroidOS.Anubis |
| MaxSecure | Android.hqwar.cr |
| Fortinet | Android/Agent.FRJ!tr |
| AVG | Android:Cerberus-CF [Bank] |
| Qihoo-360 | Trojan.Android.Gen |