8a6889610a18296e812fabd0a4ceb8b75caadc5cec1b39e8173c3e0093fd3a57
Classification: Malicious
8a6889610a18296e812fabd0a4ceb8b75caadc5cec1b39e8173c3e0093fd3a57 is a trojan (ZIP archive, 569.2 KB). Flagged by 53% of antivirus engines (48 detections).
Detection summary
- 48 antivirus detections (53% detection ratio)
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: S.O.V.A. (S1062)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Sova | Triage | 2026-06-07 02:32:40 | 2026-06-07 05:41:56 | malicious-activity | S1062 S.O.V.A. |
| Generic Malware | Hybrid-Analysis | 2023-06-29 05:45:02 | 2023-06-29 05:45:02 |
Tags
keylogger sova android banker collection credential_access defense_evasion discovery evasion impact infostealer persistence stealth trojanSample information
- Filenames
- 01b6f0220794476fe19a54c049600ab3.apk
- File type
- Zip archive data, at least v?[0] to extract
- Size
- 582835 bytes
- MD5
01b6f0220794476fe19a54c049600ab3- SHA-1
eb9dfde47a393bca666e947f285f16c20baf6c32- SHA-256
8a6889610a18296e812fabd0a4ceb8b75caadc5cec1b39e8173c3e0093fd3a57- First indexed
- 2023-06-29 05:41:03
- Last updated
- 2026-09-14 15:53:58
Antivirus detections
| Engine | Detection |
|---|---|
| Lionic | UNSAFE |
| DrWeb | Android.BankBot.842.origin |
| MicroWorld-eScan | Trojan.GenericKD.39821727 |
| CAT-QuickHeal | Script.Trojan.44315.GC |
| VIPRE | Trojan.GenericKD.39821727 |
| Trustlook | Android.Malware.Trojan |
| Alibaba | TrojanBanker:Android/BankBot.39bce1b9 |
| K7GW | Trojan ( 005806451 ) |
| SymantecMobileInsight | Other:Android.Reputation.1 |
| Symantec | Trojan.Gen.MBT |
| ESET-NOD32 | a variant of Generik.GLAMSH |
| Cynet | Malicious (score: 99) |
| Kaspersky | HEUR:Trojan-Banker.AndroidOS.Sova.j |
| BitDefender | Trojan.GenericKD.39821727 |
| NANO-Antivirus | Trojan.Android.BankBot.ixvrnl |
| Emsisoft | Trojan.GenericKD.39821727 (B) |
| F-Secure | Trojan:Android/SmsSend.UU |
| McAfee-GW-Edition | BehavesLike.Trojan.hc |
| FireEye | Trojan.GenericKD.39821727 |
| Sophos | Andr/Sova-B |
| GData | Trojan.GenericKD.39821727 |
| Avira | ANDROID/Boogr.otvkn |
| Antiy-AVL | Trojan/Generic.ASMalwAD.5B |
| Microsoft | Trojan:AndroidOS/Sova.A |
| Arcabit | Trojan.Generic.D25FA19F |
| ZoneAlarm | HEUR:Trojan-Banker.AndroidOS.Sova.j |
| Avast-Mobile | Android:Evo-gen [Trj] |
| Detected | |
| BitDefenderFalx | Android.Trojan.Banker.WW |
| AhnLab-V3 | Trojan/Android.FakeApp.1023173 |
| McAfee | Artemis!548497673ADC |
| MAX | malware (ai score=100) |
| Tencent | a.privacy.BankSova |
| Ikarus | Trojan-Banker.AndroidOS.Anubis |
| AVG | Android:Evo-gen [Trj] |
| Avast | Android:Evo-gen [Trj] |
| Avira | ANDROID/Evo.AG1342822.Gen |
| CTX | apk.trojan.banker |
| ESET-NOD32 | Generik.GLAMSH trojan |
| Fortinet | Android/Boogr.AZK!tr |
| Kingsoft | Android.Troj.Unknown.a |
| Lionic | Trojan.AndroidOS.Sova.C!c |
| McAfeeD | ti!8A6889610A18 |
| TrellixENS | Artemis!548497673ADC |
| Varist | ABTrojan.SKAA-9 |
| ZoneAlarm | Andr/Sova-B |
| alibabacloud | Trojan[stealer]:Android/Sova.A |
| huorong | Trojan/Android.Stealer.djj!crit |