escobar.apk
Classification: Malicious
escobar.apk is a trojan (application/zip). Detected by 33 antivirus engines. Linked to Escobar malware. 4 sightings, last seen 2026-09-26.
Detection summary
- 33 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: ESCOBAR (S1092)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-26 06:45:04 | 2026-09-26 06:45:04 | malicious-activity | |
| Aberebot | ThreatFox Abuse.ch | 2026-08-14 07:41:08 | 2026-08-14 08:25:03 | ||
| Escobar | MalwareBazaar Abuse.ch | 2022-03-16 13:45:26 | 2022-03-16 13:45:26 | malicious-activity | S1092 Escobar |
| Generic.Malware | MalwareBazaar Abuse.ch | 2022-03-16 13:45:26 | 2022-03-16 13:45:26 | malicious-activity |
Tags
apk.aberebot escobarSample information
- Filenames
- a9d1561ed0d23a5473d68069337e2f8e7862f7b72b74251eb63ccc883ba9459f, escobar.apk
- File type
- application/zip
- MD5
d57e1c11f915b874ef5c86cedb25abda- SHA-1
22e943025f515a398b2f559c658a1a188d0d889f- SHA-256
a9d1561ed0d23a5473d68069337e2f8e7862f7b72b74251eb63ccc883ba9459f- First indexed
- 2022-03-16 15:15:12
- Last updated
- 2026-09-26 06:45:04
Antivirus detections
| Engine | Detection |
|---|---|
| Lionic | Trojan.AndroidOS.Boogr.C!c |
| DrWeb | Android.BankBot.965.origin |
| MicroWorld-eScan | Trojan.GenericKD.39252584 |
| CAT-QuickHeal | Android.Banker.Ab033 |
| McAfee | Artemis!D57E1C11F915 |
| Trustlook | Android.Malware.Spyware |
| Alibaba | TrojanSpy:Android/Boogr.ce214b8c |
| K7GW | Spyware ( 00580f5f1 ) |
| Cyren | Trojan.KVQN-8 |
| SymantecMobileInsight | AppRisk:Generisk |
| ESET-NOD32 | a variant of Android/Spy.Banker.AZO |
| Avast | Android:AbereBot-A [Bank] |
| Kaspersky | HEUR:Trojan.AndroidOS.Boogr.gsh |
| BitDefender | Trojan.GenericKD.39252584 |
| NANO-Antivirus | Trojan.Android.BankBot.jmtkis |
| Ad-Aware | Trojan.GenericKD.39252584 |
| Sophos | Andr/Banker-HBC |
| Zillya | Trojan.Banker.Android.51929 |
| McAfee-GW-Edition | Artemis!Trojan |
| FireEye | Trojan.GenericKD.39252584 |
| Emsisoft | Trojan.GenericKD.39252584 (B) |
| Ikarus | Trojan.AndroidOS.Banker |
| GData | Trojan.GenericKD.39252584 |
| Avira | ANDROID/Spy.Banker.dhtir |
| Antiy-AVL | Trojan/Generic.ASMalwAD.8 |
| Kingsoft | Android.Troj.tn_banker.azo.(kcloud) |
| Microsoft | TrojanSpy:AndroidOS/Banker.K!MTB |
| Avast-Mobile | Android:Evo-gen [Trj] |
| Cynet | Malicious (score: 99) |
| BitDefenderFalx | Android.Trojan.Banker.WY |
| MAX | malware (ai score=99) |
| Fortinet | Android/Banker.AZO!tr.spy |
| AVG | Android:AbereBot-A [Bank] |