6d55d90d021b0980528f56d040e78fa7b85a96f5c244e23f330f24c8e80c1cb2
Classification: Malicious
6d55d90d021b0980528f56d040e78fa7b85a96f5c244e23f330f24c8e80c1cb2 is a banking trojan. Detected by 28 antivirus engines. Linked to Crocodilus malware.
Detection summary
- 28 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CROCODILUS (S9004)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Crocodilus | ThreatFox Abuse.ch | 2025-06-04 15:44:25 | 2025-06-06 15:18:01 | S9004 Crocodilus |
Tags
apk.crocodilusSample information
- SHA-256
6d55d90d021b0980528f56d040e78fa7b85a96f5c244e23f330f24c8e80c1cb2- First indexed
- 2025-06-05 05:17:14
- Last updated
- 2026-08-02 18:24:37
Antivirus detections
| Engine | Detection |
|---|---|
| AhnLab-V3 | Dropper/Android.Agent.1295892 |
| Alibaba | TrojanBanker:Android/Agent.888475cb |
| Antiy-AVL | Trojan[Banker]/Android.Agent |
| Avast-Mobile | Android:Evo-gen [Trj] |
| Avira | ANDROID/Bankbot.FTMJ.Gen |
| BitDefenderFalx | Android.Riskware.Marcher.aACY |
| CTX | apk.trojan.banker |
| Cynet | Malicious (score: 99) |
| DrWeb | Android.Packed.56.origin |
| ESET-NOD32 | Android/Spy.Banker.DSH |
| F-Secure | Malware.ANDROID/Bankbot.FTMJ.Gen |
| Fortinet | Android/Agent.MVQ!tr |
| Gridinsoft | Malware.U.Gen.tr |
| Ikarus | Trojan-Dropper.AndroidOS.Agent |
| K7GW | Trojan ( 0058fc031 ) |
| Kaspersky | HEUR:Trojan-Banker.AndroidOS.Agent.eq |
| Lionic | Trojan.AndroidOS.Agent.C!c |
| Microsoft | TrojanDropper:AndroidOS/Multiverze!rfn |
| Sophos | Andr/FakeApp-EL |
| Symantec | Trojan.Gen.NPE |
| SymantecMobileInsight | AppRisk:Generisk |
| Tencent | a.privacy.BankBotSteal |
| TrellixENS | Artemis!0FDEC5400AF5 |
| TrendMicro | TROJ_FRS.VSNTF425 |
| TrendMicro-HouseCall | TROJ_FRS.VSNTF425 |
| Trustlook | Android.Malware.Trojan |
| Varist | ABApplication.YO |
| ZoneAlarm | Andr/FakeApp-EL |