ef80429d554a6f7a0b1ad97a2ca5df4d.apk

Classification: Malicious

ef80429d554a6f7a0b1ad97a2ca5df4d.apk is a malicious file sample. Linked to Cerberus malware. Reported by 2 threat sources, last seen 2026-03-06.

Detection summary

  • 13 antivirus detections (66% detection ratio)
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: CERBERUS (S0480)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Cerberus Triage 2026-03-05 23:41:01 2026-03-06 04:37:30 malicious-activity S0480 Cerberus
Generic Malware Hybrid-Analysis 2023-03-27 00:00:04 2024-03-21 20:00:07
Android:Cerberus Hybrid-Analysis 2020-04-14 09:30:04 2020-04-14 09:30:04

Tags

cerber ransomware cerberus android banker collection credential_access defense_evasion discovery evasion impact infostealer persistence rat stealth trojan

Sample information

Filenames
ef80429d554a6f7a0b1ad97a2ca5df4d.apk, covidMapv8.1.7.apk
File type
Zip archive data, at least v?[0] to extract
Size
164114 bytes
MD5
ef80429d554a6f7a0b1ad97a2ca5df4d
SHA-1
18492f451511e2f736646ed61778365c6936f342
SHA-256
2b43af46398ece7b9e1e41bb7c2e2ff3ec227edb38283bea7622115bb76a7823
SHA-512
11c0599ce5b3a82b0438a8a41d965417e45fb41ba9b8511a6104544738270bf1c4abff0429c20957dc7427663e7c4281529330d068364ef64f50c61c1e828c17
First indexed
2020-04-14 09:30:04
Last updated
2026-07-11 09:29:47

Antivirus detections

EngineDetection
CAT-QuickHealAndroid.Cebruser.GEN30226
TrustlookAndroid.Malware.General (score:9)
K7GWTrojan ( 005573fd1 )
ESET-NOD32a variant of Android/Spy.Cerberus.A
AvastAndroid:Cerberus-N [Bank]
KasperskyHEUR:Trojan-Banker.AndroidOS.Cebruser.b
SophosAndr/Banker-GTV
DrWebAndroid.BankBot.612.origin
ZoneAlarmHEUR:Trojan-Banker.AndroidOS.Cebruser.b
Avast-MobileAndroid:Cerberus-N [Bank]
AhnLab-V3Trojan/Android.SpyAgent.920504
IkarusTrojan-Banker.AndroidOS.Cerberus
AVGAndroid:Cerberus-N [Bank]