Android_Guncelleme1.apk
Classification: Malicious
Android_Guncelleme1.apk is a banking trojan (application/java-archive). Detected by 10 antivirus engines. Linked to Cerberus malware.
Detection summary
- 10 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CERBERUS (S0480)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-23 15:45:05 | 2026-09-23 15:45:05 | malicious-activity | |
| Generic.Malware | Abuse.ch | 2021-10-11 23:12:08 | 2021-10-11 23:12:08 | malicious-activity | |
| Cerberus | Abuse.ch | 2021-10-11 23:12:08 | 2021-10-11 23:12:08 | malicious-activity | S0480 Cerberus |
Sample information
- Filenames
- 45e63dd8588695731b33aa0b84f386f89fc4022166a42900e0467dabd4867d17, Android_Guncelleme1.apk
- File type
- application/java-archive
- MD5
66ff573205df6847e473db816628bf8a- SHA-1
28e6eb9fc01ae3b4a640c3a9aeef0b9d95de9666- SHA-256
45e63dd8588695731b33aa0b84f386f89fc4022166a42900e0467dabd4867d17- First indexed
- 2021-10-12 00:00:06
- Last updated
- 2026-09-25 06:44:07
Antivirus detections
| Engine | Detection |
|---|---|
| CAT-QuickHeal | Android.ScytheSCF.GG |
| Trustlook | Android.PUA.DebugKey |
| K7GW | Trojan ( 005616e31 ) |
| ESET-NOD32 | a variant of Android/TrojanDropper.Agent.IXV |
| Kaspersky | UDS:Trojan-Banker.AndroidOS.Cebruser.san |
| Sophos | Andr/Banker-GTV |
| BitDefenderFalx | Android.Trojan.Banker.RY |
| AhnLab-V3 | Trojan/Android.Banker.1046267 |
| Ikarus | Trojan-Banker.AndroidOS.Agent |
| Fortinet | Android/Agent.FRJ!tr |