2b26c52922e8d4f07e948f13970025d62c0d96bd0fe6802d0567fd2c73b94392

Classification: Malicious

2b26c52922e8d4f07e948f13970025d62c0d96bd0fe6802d0567fd2c73b94392 is a dropper (application/zip). Detected by 14 antivirus engines. Linked to Flubot malware.

Detection summary

  • 14 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: FLUBOT (S1067)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Flubot Triage 2026-08-13 01:14:21 2026-08-13 01:14:21 malicious-activity S1067 FluBot
Generic.Malware Abuse.ch 2021-09-03 11:29:30 2021-09-03 11:29:30 malicious-activity

Tags

flubot android antivm banker collection credential_access defense_evasion discovery evasion exfiltration infostealer otp overlay persistence rat sms spyware stealer trojan

Sample information

Filenames
2b26c52922e8d4f07e948f13970025d62c0d96bd0fe6802d0567fd2c73b94392.apk
File type
application/zip
MD5
ac773cd2c075d4ad82659d9eaa369155
SHA-1
6bc377e4a3e6e95ca74928837e3cced108cb625e
SHA-256
2b26c52922e8d4f07e948f13970025d62c0d96bd0fe6802d0567fd2c73b94392
First indexed
2021-09-03 12:15:03
Last updated
2026-09-11 02:25:44

Antivirus detections

EngineDetection
K7GWSpyware ( 00521e371 )
TrustlookAndroid.PUA.DebugKey
ESET-NOD32a variant of Android/TrojanDropper.Agent.IMA
KasperskyHEUR:Trojan-Dropper.AndroidOS.Hqwar.bk
DrWebAndroid.BankBot.9899
IkarusTrojan-Dropper.AndroidOS.Agent
AviraANDROID/Dropper.FJVV.Gen
ZoneAlarmHEUR:Trojan-Dropper.AndroidOS.Hqwar.bk
Avast-MobileAndroid:Evo-gen [Trj]
CynetMalicious (score: 99)
BitDefenderFalxAndroid.Trojan.Banker.WT
AhnLab-V3Trojan/Android.Marcher.1028025
McAfeeArtemis!2161F7CB5A2D
FortinetAndroid/Agent.IMA!tr