flubot_v5.2_4859ab9cd5efbe0d4f63799126110d744a42eff057fa22ff1bd11cb59b49608c.apk

Classification: Malicious

flubot_v5.2_4859ab9cd5efbe0d4f63799126110d744a42eff057fa22ff1bd11cb59b49608c.apk is a banking trojan (Android package). Detected by 30 antivirus engines.

Detection summary

  • 30 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: FLUBOT (S1067)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-09-23 16:45:03 2026-09-23 16:45:03 malicious-activity
Flubot Triage 2026-02-19 11:36:08 2026-02-19 11:36:08 malicious-activity S1067 FluBot

Tags

flubot android banker collection credential_access defense_evasion discovery evasion impact infostealer persistence trojan

Sample information

Filenames
4859ab9cd5efbe0d4f63799126110d744a42eff057fa22ff1bd11cb59b49608c, flubot_v5.2_4859ab9cd5efbe0d4f63799126110d744a42eff057fa22ff1bd11cb59b49608c.apk
File type
Android package (APK), with classes.dex, with APK ...
MD5
06371fc75740162de9e6275102012e6c
SHA-1
9b45243e89541ae26fea5ff2b9c7d14ff69044ed
SHA-256
4859ab9cd5efbe0d4f63799126110d744a42eff057fa22ff1bd11cb59b49608c
SHA-512
c865d89143effb176c4be93fc16f54e06d248f5b7e22ffbf19754137f9da181f6d7f6019cdb28d2d7964375b1978a255c475dd3d17487fddb9fa0e4eda8bf248
First indexed
2026-02-19 11:36:08
Last updated
2026-09-23 16:45:03

Antivirus detections

EngineDetection
AhnLab-V3Trojan/Android.Banker.1119947
AlibabaTrojanDropper:Android/Banker.0b2af850
Avast-MobileAndroid:Evo-gen [Trj]
AviraANDROID/Dropper.FKLB.Gen
BitDefenderFalxAndroid.Trojan.Banker.YM
CAT-QuickHealcld.android.agent.1654194756
CTXapk.trojan.banker
CynetMalicious (score: 99)
DrWebAndroid.BankBot.10484
ESET-NOD32a variant of Android/TrojanDropper.Agent.IVA
F-SecureMalware.ANDROID/Dropper.FKLB.Gen
FortinetAndroid/BankNot.10484!tr
GoogleDetected
IkarusTrojan-Banker.AndroidOS.Ermac
K7GWTrojan ( 005806451 )
KasperskyHEUR:Trojan-Dropper.AndroidOS.Agent.sl
LionicTrojan.AndroidOS.Agent.C!c
MicrosoftTrojanDropper:AndroidOS/Banker.AF!MTB
SophosAndr/Xgen2-YW
SymantecTrojan.Gen.2
SymantecMobileInsightAppRisk:Generisk
Tencenta.privacy.BankAnubisTrojan
TrellixENSArtemis!06371FC75740
TrendMicroTROJ_FRS.0NA103AB22
TrendMicro-HouseCallTROJ_FRS.0NA103AB22
TrustlookAndroid.Malware.Trojan
VaristAndroidOS/ABTrojan.GBBO-
XcitiumMalware@#2bebspmj54qdv
ZillyaDropper.Agent.Android.281113
ZoneAlarmAndr/Banker-HAB