28c11bb998bf8c023a212c6518b4f8219c8583c2e79fc87d76be6fcad51b522f.apk

Classification: Malicious

28c11bb998bf8c023a212c6518b4f8219c8583c2e79fc87d76be6fcad51b522f.apk is a malicious file sample. Linked to Anubis malware. Detected by 30 antivirus engines.

Detection summary

  • 30 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: ANUBIS (S0422)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Flubot Triage 2026-08-13 01:08:01 2026-08-13 01:08:01 malicious-activity
Generic.Malware Abuse.ch 2021-05-05 10:24:17 2021-05-05 10:24:17 malicious-activity
Anubis Abuse.ch 2021-05-05 10:24:17 2021-05-05 10:24:17 malicious-activity S0422 Anubis

Tags

flubot android banker c2 collection credential_access defense_evasion discovery dropper evasion exfiltration impact infostealer loader obfuscated otp overlay persistence rat sms spyware stealer suspicious trojan

Sample information

Filenames
28c11bb998bf8c023a212c6518b4f8219c8583c2e79fc87d76be6fcad51b522f.apk, UPS943.apk
File type
application/java-archive
MD5
92891906b5842b1daac01661731116b9
SHA-1
53ff2b0a928fda3439d188c9b7d2f989f7e93eec
SHA-256
28c11bb998bf8c023a212c6518b4f8219c8583c2e79fc87d76be6fcad51b522f
First indexed
2021-05-05 12:15:04
Last updated
2026-08-13 02:00:12

Antivirus detections

EngineDetection
AhnLab-V3Trojan/Android.Banker.1177328
AlibabaBackdoor:Android/Polph.47e5ea25
Antiy-AVLTrojan/Generic.ASMalwAD.37
Avast-MobileAndroid:Evo-gen [Trj]
AviraANDROID/Hqwar.FJTU.Gen
BitDefenderFalxAndroid.Trojan.Banker.WA
CAT-QuickHealAndroid.ScytheSCF.BZ
CynetMalicious (score: 99)
DrWebAndroid.BankBot.9434
ESET-NOD32a variant of Android/TrojanDropper.Agent.HZA
F-SecureMalware.ANDROID/Hqwar.FJTU.Gen
FortinetAndroid/Bankbot.6439!tr
GoogleDetected
GridinsoftTrojan.U.Banker.oa
IkarusTrojan-Banker.AndroidOS.Hydra
JiangminAdWare.Script.ia
K7GWTrojan ( 0057c0dd1 )
KasperskyHEUR:Backdoor.AndroidOS.Polph.c
LionicTrojan.AndroidOS.Polph.m!c
McAfeeArtemis!6B86E3701D41
MicrosoftTrojanDropper:AndroidOS/Banker.D!MTB
NANO-AntivirusTrojan.Android.Polph.jepwsf
SophosAndr/Banker-GZW
SymantecTrojan.Gen.2
SymantecMobileInsightAppRisk:Generisk
Tencenta.privacy.BankAnubisTrojan
TrustlookAndroid.Malware.Trojan
VaristAndroidOS/Banker.BA.gen!Eldorado
XcitiumMalware@#1ucpksnv464gx
ZoneAlarmHEUR:Backdoor.AndroidOS.Polph.c