DHL29.apk
Classification: Malicious
DHL29.apk is a trojan (application/zip). Detected by 17 antivirus engines. Linked to Flubot malware. 6 sightings from 4 threat sources, last seen 2026-10-10.
Detection summary
- 17 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: FLUBOT (S1067)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Cyber Threat Alliance | 2026-08-23 10:05:08 | 2026-10-10 10:03:39 | malicious-activity | |
| Generic Malware | Hybrid-Analysis | 2026-09-23 12:45:03 | 2026-09-23 12:45:03 | malicious-activity | |
| Dogerat | Triage | 2026-08-13 02:41:27 | 2026-08-13 02:41:27 | malicious-activity | |
| FluBot | Abuse.ch | 2021-06-01 06:47:10 | 2021-06-01 06:47:10 | malicious-activity | S1067 FluBot |
Tags
dogerat flubot android banker c2 collection credential_access defense_evasion discovery dropper evasion exfiltration impact infostealer loader otp overlay persistence rat sms stealer stealth trojanSample information
- Filenames
- 3f92de4c765321d0d022a607266351cea4de1929a5eceae07b3d76b5d606716c, 3f92de4c765321d0d022a607266351cea4de1929a5eceae07b3d76b5d606716c.apk, DHL29.apk
- File type
- application/zip
- MD5
155953e69a4512cd222fd13863228a1f- SHA-1
2c1d549a0691b45ba219508742af51105fb5a2ee- SHA-256
3f92de4c765321d0d022a607266351cea4de1929a5eceae07b3d76b5d606716c- First indexed
- 2021-06-01 08:15:12
- Last updated
- 2026-09-23 12:45:04
Antivirus detections
| Engine | Detection |
|---|---|
| McAfee | Artemis!155953E69A45 |
| Trustlook | Android.PUA.DebugKey |
| Alibaba | TrojanDropper:Android/Hqwar.24fa9c18 |
| K7GW | Trojan ( 0057d3b11 ) |
| SymantecMobileInsight | AdLibrary:Generisk |
| Symantec | Trojan.Gen.2 |
| ESET-NOD32 | a variant of Android/TrojanDropper.Agent.ICZ |
| Kaspersky | HEUR:Trojan-Dropper.AndroidOS.Hqwar.bk |
| Tencent | a.gray.BundlingPromotApp |
| DrWeb | Android.BankBot.9305 |
| McAfee-GW-Edition | Artemis |
| Sophos | Andr/Banker-HAB |
| Microsoft | Trojan:Script/Wacatac.B!ml |
| AegisLab | Trojan.AndroidOS.Hqwar.C!c |
| Avast-Mobile | APK:RepMalware [Trj] |
| BitDefenderFalx | Android.Riskware.PackMal.QG |
| AhnLab-V3 | Dropper/Android.FakeApp.1019269 |