MainOS.apk

Classification: Malicious

MainOS.apk is a malicious file sample. Linked to Androrat malware. Reported by 1 threat source, last seen 2026-05-16. Detected by 25 antivirus engines.

Detection summary

  • 25 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: ANDRORAT (S0292)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Androrat Triage 2026-05-16 09:36:25 2026-05-16 09:36:25 malicious-activity S0292 AndroRAT

Tags

androrat android evasion infostealer rat stealth trojan

Sample information

Filenames
MainOS.apk
SHA-256
10f80889cc43a10d4620ee71e109043f079aed0f2aebc7a283b002cd50e11b71
First indexed
2026-05-16 09:36:25
Last updated
2026-05-16 09:36:25

Antivirus detections

EngineDetection
AhnLab-V3Trojan/Android.SpyAgent.989141
AlibabaTrojanSpy:Android/SpyAgent.cab703bd
Avast-MobileAndroid:Evo-gen [Trj]
AviraANDROID/SpyAgent.FKWC.Gen
BitDefenderFalxAndroid.Trojan.SpyAgent.GL
CAT-QuickHealAndroid.Agent.GEN37832
CTXapk.trojan.spyagent
CynetMalicious (score: 99)
DrWebAndroid.Spy.1131.origin
ESET-NOD32Android/Spy.Agent.BEL trojan
F-SecureMalware.ANDROID/SpyAgent.FKWC.Gen
GoogleDetected
IkarusTrojan-Spy.AndroidOS.Agent
K7GWTrojan ( 0058ee3a1 )
KingsoftAndroid.Troj.Spy.BEL
LionicTrojan.AndroidOS.SpyAgent.C!c
SkyhighArtemis!Trojan
SophosAndr/Xgen-BMC
SymantecTrojan.Gen.NPE
SymantecMobileInsightTrojan:Malapp
Tencenta.privacy.InfoStealer
TrellixENSArtemis!678DEDC8D504
TrustlookAndroid.Malware.Spyware
VaristAndroidOS/Agent.GUL.gen!Eldorado
ZoneAlarmAndr/Xgen-BMC