20GB HEDIYE.apk
Classification: Malicious
20GB HEDIYE.apk is a banking trojan (application/java-archive). Detected by 34 antivirus engines. Linked to Anubis malware. 4 sightings, last seen 2026-09-23.
Detection summary
- 34 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: ANUBIS (S0422)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-23 12:45:05 | 2026-09-23 12:45:05 | malicious-activity | |
| Anubis | Triage | 2026-05-22 23:26:38 | 2026-07-21 17:01:55 | malicious-activity | S0422 Anubis |
| Generic.Malware | Abuse.ch | 2020-05-20 14:34:45 | 2020-05-20 14:34:45 |
Tags
anubis android banker collection credential_access defense_evasion evasion infostealer persistence stealth trojanSample information
- Filenames
- 3f00206aaed4612ce4655152b972aeb2787ca4133aeacc8c9acd8c4d38ea3f79, 3f00206aaed4612ce4655152b972aeb2787ca4133aeacc8c9acd8c4d38ea3f79.apk, 20GB HEDIYE.apk, hediye20gb.apk
- File type
- application/java-archive
- MD5
17e3c903b5c0a1e8f86c89c64a0d07b3- SHA-1
ec35c6afba2b78669efcf73d3821eeb876eecc7c- SHA-256
3f00206aaed4612ce4655152b972aeb2787ca4133aeacc8c9acd8c4d38ea3f79- First indexed
- 2020-05-20 14:34:45
- Last updated
- 2026-09-23 12:45:05
Antivirus detections
| Engine | Detection |
|---|---|
| AVG | Android:Banker-SZ [Trj] |
| AhnLab-V3 | Trojan/Android.Banker.885397 |
| Alibaba | TrojanSpy:Android/Anubis.2fb37031 |
| Avast | Android:Banker-SZ [Trj] |
| Avast-Mobile | Android:Evo-gen [Trj] |
| Avira | ANDROID/Svpeng.B.Gen |
| BitDefenderFalx | Android.Trojan.FakeApp.HU |
| CAT-QuickHeal | Android.Anubis.GEN24512 |
| CTX | apk.trojan.anubis |
| ClamAV | Andr.Trojan.Anubis-6692604-3 |
| Cynet | Malicious (score: 99) |
| DrWeb | Android.BankBot.670.origin |
| ESET-NOD32 | a variant of Android/Spy.Banker.AOG |
| F-Secure | Malware.ANDROID/Svpeng.B.Gen |
| Fortinet | Android/Agent.AOV!tr.spy |
| Detected | |
| Ikarus | Trojan-Banker.AndroidOS.Anubis |
| K7GW | Trojan ( 0053b5f91 ) |
| Kaspersky | HEUR:Trojan-Banker.AndroidOS.Anubis.t |
| Lionic | Trojan.AndroidOS.Anubis.C!c |
| MaxSecure | Android.Android.WIN32.Anubis.n |
| McAfee | Artemis!17E3C903B5C0 |
| Skyhigh | Artemis!Trojan |
| Sophos | Andr/Xgen2-YC |
| Symantec | Trojan.Gen.MBT |
| SymantecMobileInsight | Other:Android.Reputation.1 |
| Tencent | a.privacy.BankAnubisTrojan |
| Trustlook | Android.Malware.Trojan |
| Varist | AndroidOS/Banker.AA.gen!Eldorado |
| VirIT | Android.Trj.BankBot.ZU |
| Xcitium | Malware@#lz9e56yepec2 |
| ZoneAlarm | HEUR:Trojan-Banker.AndroidOS.Anubis.t |
| alibabacloud | Trojan[spy]:Android/Banker.AOG |
| huorong | Backdoor/Android.FakeBank.c |