20fd6d2c4058ff01add0e8e260540d98fc6af8c7a6db8c6b1038497bdedd028d

Classification: Malicious

20fd6d2c4058ff01add0e8e260540d98fc6af8c7a6db8c6b1038497bdedd028d is a malicious file sample. Linked to Dark Caracal activity.

Detection summary

  • 32 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: DARK CARACAL (G0070)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Darkcaracal Triage 2026-05-21 07:02:31 2026-05-21 09:20:04 malicious-activity G0070 Dark Caracal

Tags

darkcaracal android collection discovery infostealer persistence rat spyware trojan

Sample information

Filenames
20fd6d2c4058ff01add0e8e260540d98fc6af8c7a6db8c6b1038497bdedd028d
SHA-256
20fd6d2c4058ff01add0e8e260540d98fc6af8c7a6db8c6b1038497bdedd028d
First indexed
2026-05-21 07:02:31
Last updated
2026-05-21 10:53:34

Antivirus detections

EngineDetection
AVGAndroid:SpyAgent-ZO [Trj]
AhnLab-V3Trojan/Android.SpyAgent.496809
AlibabaTrojanSpy:Android/DarkCaracal.ee8a8e6b
Antiy-AVLTrojan[Spy]/Android.Trupto
AvastAndroid:SpyAgent-ZO [Trj]
Avast-MobileAndroid:SpyAgent-ZO [Trj]
AviraPUA/Stalk.HEUR.MobiSpy.SRET.Gen
BitDefenderFalxAndroid.Trojan.DarkCaracal.A
CAT-QuickHealAndroid.DarkCaracal.GEN35335
CynetMalicious (score: 99)
DrWebAndroid.Spy.422.origin
ESET-NOD32a variant of Android/Spy.Agent.ALD
F-SecurePotentialRisk.PUA/Stalk.HEUR.MobiSpy.SRET.Gen
FortinetAndroid/Agent.ALD!tr
GoogleDetected
IkarusTrojan.AndroidOS.Dingwe
K7GWSpyware ( 0052996c1 )
KasperskyHEUR:Trojan-Spy.AndroidOS.DarkCaracal.a
LionicTrojan.AndroidOS.Generic.C!c
MAXmalware (ai score=100)
McAfeeArtemis!CDA2BBCF9414
McAfee-GW-EditionArtemis!Trojan
MicrosoftTrojanSpy:AndroidOS/Trupto
NANO-AntivirusTrojan.Android.Mlw.exdwgn
SangforMalware.Android-Script.Save.7086062b
SophosAndr/Spy-AOI
SymantecTrojan.Gen.6
SymantecMobileInsightSpyware:MobileSpy
Tencenta.privacy.dingwe
TrustlookAndroid.Malware.Spyware
XcitiumMalware@#1ewzkwl09655k
ZoneAlarmHEUR:Trojan-Spy.AndroidOS.DarkCaracal.a