flubot_v4.8_a0181864eed9294cac0d278fa0eadabe68b3adb333eeb2e26cc082836f82489d.apk
Classification: Malicious
flubot_v4.8_a0181864eed9294cac0d278fa0eadabe68b3adb333eeb2e26cc082836f82489d.apk is a trojan (application/zip). Detected by 34 antivirus engines.
Detection summary
- 34 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: FLUBOT (S1067)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Flubot | Triage | 2026-02-09 16:58:47 | 2026-08-17 15:29:53 | malicious-activity | S1067 FluBot |
| Generic.Malware | Abuse.ch | 2021-08-13 12:35:35 | 2021-08-13 12:35:35 | malicious-activity |
Tags
flubot android banker collection credential_access defense_evasion discovery evasion infostealer persistence trojan exfiltration otp overlay rat sms spyware stealerSample information
- Filenames
- a0181864eed9294cac0d278fa0eadabe68b3adb333eeb2e26cc082836f82489d.apk, flubot_v4.8_a0181864eed9294cac0d278fa0eadabe68b3adb333eeb2e26cc082836f82489d.apk, Flubot 4.8.apk
- File type
- application/zip
- MD5
c23426edaf37a2fc6fc3a6e5daa17bfa- SHA-1
a362e1aaf8bc7a7491b10eab252c3b7ee8532a46- SHA-256
a0181864eed9294cac0d278fa0eadabe68b3adb333eeb2e26cc082836f82489d- SHA-512
98b78e62a63d87ddc55722658e85acb5f9ba4b792578ca8868e8214e04f4336e9728bec2c386b6afbac4f2183f8232d6e958b215c5c0948746f4254d32ffa2ff- First indexed
- 2021-08-13 13:15:06
- Last updated
- 2026-08-31 08:52:47
Antivirus detections
| Engine | Detection |
|---|---|
| AhnLab-V3 | Trojan/Android.Marcher.1028025 |
| Alibaba | TrojanDropper:Android/Hqwar.8269f391 |
| Antiy-AVL | Trojan/Generic.ASMalwAD.2D |
| Avast-Mobile | Android:Evo-gen [Trj] |
| Avira | ANDROID/Dropper.FKAR.Gen |
| BitDefenderFalx | Android.Trojan.Banker.WV |
| CAT-QuickHeal | Android.ScytheSCF.RX |
| Cynet | Malicious (score: 99) |
| DrWeb | Android.BankBot.10555 |
| ESET-NOD32 | a variant of Android/TrojanDropper.Agent.IMA |
| F-Secure | Malware.ANDROID/Dropper.FKAR.Gen |
| Fortinet | Android/Agent.IMA!tr |
| Detected | |
| Gridinsoft | Trojan.U.Agent.oa |
| Ikarus | Trojan-Dropper.AndroidOS.Agent |
| K7GW | Trojan ( 0059d3e11 ) |
| Kaspersky | HEUR:Backdoor.AndroidOS.Polph.g |
| Kingsoft | Win32.Troj.Undef.a |
| MAX | malware (ai score=94) |
| McAfee | Artemis!C23426EDAF37 |
| Microsoft | Program:AndroidOS/Multiverze |
| NANO-Antivirus | Trojan.Android.BankBot.izmrck |
| Skyhigh | Artemis!Trojan |
| Sophos | Andr/Xgen2-YR |
| Symantec | Trojan.Gen.MBT |
| SymantecMobileInsight | AppRisk:Generisk |
| Tencent | a.privacy.InfoStealer |
| TrendMicro | TROJ_FRS.0NA103GC22 |
| TrendMicro-HouseCall | TROJ_FRS.0NA103GC22 |
| Trustlook | Android.Malware.Trojan |
| Varist | AndroidOS/Agent.BKV |
| Xcitium | Malware@#1zo0eli7o44ma |
| Zillya | Dropper.Agent.Android.358863 |
| ZoneAlarm | HEUR:Backdoor.AndroidOS.Polph.g |