cf3bf943ba2c462aa645d90de50dfad1_FluBot_2c74efb0e830.apk
Classification: Malicious
cf3bf943ba2c462aa645d90de50dfad1_FluBot_2c74efb0e830.apk is a banking trojan (application/zip). Detected by 28 antivirus engines. Linked to Flubot malware.
Detection summary
- 28 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: FLUBOT (S1067)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Flubot | Triage | 2026-09-07 16:55:08 | 2026-09-07 16:55:08 | malicious-activity | S1067 FluBot |
| FluBot | Abuse.ch | 2021-11-26 14:23:27 | 2021-11-26 14:23:27 | malicious-activity | S1067 FluBot |
| Generic.Malware | Abuse.ch | 2021-11-26 14:23:27 | 2021-11-26 14:23:27 | malicious-activity |
Tags
flubot android antivm banker c2 collection credential_access defense_evasion discovery evasion exfiltration impact infostealer otp overlay persistence sms stealer suspicious trojanSample information
- Filenames
- cf3bf943ba2c462aa645d90de50dfad1_FluBot_2c74efb0e830.apk, Voicemail12.apk
- File type
- application/zip
- MD5
729160d423c809ec7d4802fef9010076- SHA-1
05e887acc64b92764a7ce9156745e59b42f1144a- SHA-256
2c74efb0e8304948e56f4ccb1ced6c05734842ecdc95628decacfa74d06baf6c- First indexed
- 2021-11-26 15:15:06
- Last updated
- 2026-10-11 00:34:57
Antivirus detections
| Engine | Detection |
|---|---|
| AhnLab-V3 | Trojan/Android.Banker.1119947 |
| Alibaba | Backdoor:Android/ndroidOS.534a835c |
| Avast-Mobile | Android:Evo-gen [Trj] |
| Avira | ANDROID/Anubis.YCR.Gen |
| BitDefenderFalx | Android.Trojan.Banker.YM |
| CAT-QuickHeal | Android.Banker.R |
| CTX | apk.trojan.banker |
| Cynet | Malicious (score: 99) |
| DrWeb | Android.BankBot.11270 |
| ESET-NOD32 | Android/TrojanDropper.Agent.IVA trojan |
| F-Secure | Malware.ANDROID/Anubis.YCR.Gen |
| Fortinet | Android/BankNot.10484!tr |
| Detected | |
| Ikarus | Trojan-Banker.AndroidOS.Ermac |
| K7GW | Trojan ( 005806451 ) |
| Kaspersky | HEUR:Backdoor.AndroidOS.Polph.g |
| Lionic | Trojan.AndroidOS.Polph.C!c |
| Rising | Dropper.Agent/Android!8.37E (CLOUD) |
| Skyhigh | Artemis!Trojan |
| Sophos | Andr/Xgen2-YW |
| Symantec | Trojan.Gen.NPE |
| SymantecMobileInsight | AdLibrary:Generisk |
| Tencent | a.privacy.BankAnubisTrojan |
| TrellixENS | Artemis!729160D423C8 |
| Trustlook | Android.Malware.Trojan |
| Varist | ABPWS.MKDP-44 |
| Xcitium | Malware@#2fk0wl7xxluyi |
| ZoneAlarm | Andr/Banker-HAB |