exodus_sample1.apk
Classification: Malicious
exodus_sample1.apk is a spyware (application/zip). Detected by 29 antivirus engines. Linked to Exodus malware. 3 sightings, last seen 2026-09-16.
Detection summary
- 29 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: EXODUS (S0405)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Exodus | Triage | 2026-05-09 04:01:51 | 2026-09-16 00:33:55 | malicious-activity | S0405 Exodus |
| Generic.Malware | MalwareBazaar Abuse.ch | 2025-03-24 00:43:24 | 2025-03-24 00:43:24 | malicious-activity |
Tags
exodus android banker collection defense_evasion discovery impact persistence spywareSample information
- Filenames
- 0f5f1409b1ebbee4aa837d20479732e11399d37f05b47b5359dc53a4001314e5.apk, exodus_sample1.apk
- File type
- application/zip
- MD5
ff57638f26c1fde808c55814f40cb568- SHA-1
be826a02b50ef0c26b7fd132c2886ba21b927be2- SHA-256
0f5f1409b1ebbee4aa837d20479732e11399d37f05b47b5359dc53a4001314e5- First indexed
- 2025-03-24 02:31:53
- Last updated
- 2026-09-17 13:04:32
Antivirus detections
| Engine | Detection |
|---|---|
| AhnLab-V3 | Trojan/Android.SpyAgent.879796 |
| Alibaba | TrojanSpy:Android/Agent.35836c70 |
| Avast-Mobile | Android:Evo-gen [Trj] |
| BitDefenderFalx | Android.Trojan.Taropeore.A |
| CAT-QuickHeal | Android.Agent.GEN31346 |
| CTX | apk.trojan.exod |
| DrWeb | Android.Spy.545.origin |
| ESET-NOD32 | Android/Spy.Agent.AVH |
| Fortinet | Android/Spy.AGENT.AVH |
| Detected | |
| Ikarus | Trojan-Spy.AndroidOS.Exodus |
| K7GW | Spyware ( 0054b64b1 ) |
| Kaspersky | Trojan-Spy.AndroidOS.Exod.b |
| Kingsoft | Android.Troj.Unknown.a |
| Lionic | Trojan.AndroidOS.Exod.C!c |
| McAfee | Artemis!10BE62FA3CD1 |
| Microsoft | Trojan:Win32/Casdet!rfn |
| NANO-Antivirus | Trojan.Android.Mlw.fpkcxs |
| Sophos | Andr/Exodus-A |
| Symantec | Trojan.Gen.2 |
| SymantecMobileInsight | Other:Android.Reputation.1 |
| Tencent | a.privacy.ExodusSpy |
| TrendMicro | TROJ_FRS.0NA103D119 |
| TrendMicro-HouseCall | TROJ_FRS.0NA103D119 |
| Trustlook | Android.Malware.Spyware |
| Varist | AndroidOS/ABRisk.NRKK-6 |
| Xcitium | Malware@#30uwzp7pk0o63 |
| ZoneAlarm | Andr/Exodus-A |
| alibabacloud | Trojan[spy]:Android/Casdet.Gen |