com.tsoft.app.iscreenrecorder.apk

Classification: Malicious

com.tsoft.app.iscreenrecorder.apk is a spyware. Detected by 21 antivirus engines. Linked to Ahrat malware. 5 sightings from Triage, last seen 2026-08-21.

Detection summary

  • 21 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: AHRAT (S1095)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Ahrat Triage 2026-05-07 10:59:01 2026-08-21 14:58:19 malicious-activity S1095 AhRat

Tags

ahrat android collection credential_access defense_evasion discovery evasion impact infostealer persistence rat trojan

Sample information

Filenames
com.tsoft.app.iscreenrecorder.apk
SHA-256
2abf26d779ea1afa4dcc7147563907573e07fa9051ae4319cb864bdf752fa054
First indexed
2026-05-07 10:59:01
Last updated
2026-08-21 15:59:34

Antivirus detections

EngineDetection
AhnLab-V3Trojan/Android.AhMyth.1203656
AlibabaBackdoor:Android/Ahmyth.4b98a26d
Avast-MobileAndroid:Evo-gen [Trj]
BitDefenderFalxAndroid.Riskware.SpyAgent.DH
DrWebAndroid.BackDoor.3133
ESET-NOD32Android/Spy.AhRat.A
FortinetAndroid/AhRat.A!tr.spy
GoogleDetected
IkarusTrojan-Spy.AndroidOS.Ahrat
K7GWSpyware ( 005a49da1 )
KasperskyHEUR:Backdoor.AndroidOS.Ahmyth.n
LionicTrojan.AndroidOS.Ahmyth.C!c
McAfeeArtemis!62529195339A
MicrosoftBackdoor:AndroidOS/Multiverze
NANO-AntivirusTrojan.Android.Ahmyth.jwfjby
SophosAndr/AhMyth-A
SymantecTrojan.Gen.MBT
SymantecMobileInsightAdLibrary:Generisk
TrustlookAndroid.Malware.Spyware
ZillyaTrojan.Agent.Android.480284
ZoneAlarmHEUR:Backdoor.AndroidOS.Ahmyth.n