347f1b018f643de0b9c946c94bd490a7426503869a0828b0a70b4d318fa097d6

Classification: Malicious

347f1b018f643de0b9c946c94bd490a7426503869a0828b0a70b4d318fa097d6 is a malicious file sample. Linked to Androrat malware. Detected by 19 antivirus engines.

Detection summary

  • 19 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: ANDRORAT (S0292)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Androrat Triage 2026-07-14 13:09:17 2026-07-14 13:09:17 malicious-activity S0292 AndroRAT
Generic.Malware MalwareBazaar Abuse.ch 2024-01-01 10:42:27 2024-01-01 10:42:27 malicious-activity
AndroRAT ThreatFox Abuse.ch 2023-05-11 05:43:05 2023-05-11 06:17:47 S0292 AndroRAT

Tags

apk.androrat androrat android evasion infostealer rat stealth trojan

Sample information

Filenames
347f1b018f643de0b9c946c94bd490a7426503869a0828b0a70b4d318fa097d6, system.apk
File type
application/zip
MD5
36f79f6999010c2da60e1c98427f1968
SHA-1
928e2d5e8478e79f44511b73f3d385dd67786d4a
SHA-256
347f1b018f643de0b9c946c94bd490a7426503869a0828b0a70b4d318fa097d6
First indexed
2023-05-11 06:17:47
Last updated
2026-07-20 18:21:01

Antivirus detections

EngineDetection
CAT-QuickHealAndroid.Agent.GEN37832
TrustlookAndroid.PUA.DebugKey
K7GWTrojan ( 0056b0d51 )
ESET-NOD32a variant of Android/Spy.Agent.BEL
CynetMalicious (score: 99)
KasperskyHEUR:Trojan-Spy.AndroidOS.Agent.abg
F-SecureMalware.ANDROID/SpyAgent.FKWC.Gen
DrWebAndroid.Spy.653.origin
SophosAndr/Xgen-AJX
IkarusTrojan-Spy.AndroidOS.Agent
AviraANDROID/SpyAgent.FKWC.Gen
GridinsoftMalware.U.AndroRat.bot
ZoneAlarmHEUR:Trojan-Spy.AndroidOS.Agent.abg
Avast-MobileAndroid:Evo-gen [Trj]
GoogleDetected
BitDefenderFalxAndroid.Trojan.SpyAgent.GL
AhnLab-V3Trojan/Android.SpyAgent.989141
MaxSecureAndroid.agent.abg
FortinetAndroid/Agent.BEL!tr.spy