694271_Telegram_Buratino-T.apk
Classification: Malicious
694271_Telegram_Buratino-T.apk is a banking trojan (application/zip). Detected by 20 antivirus engines. Linked to Anubis malware.
Detection summary
- 20 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: ANUBIS (S0422)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-26 08:45:07 | 2026-09-26 08:45:07 | malicious-activity | |
| Anubis | Abuse.ch | 2021-07-29 10:36:27 | 2021-07-29 10:36:27 | malicious-activity | S0422 Anubis |
Sample information
- Filenames
- ad2053bc0cf1cc54c5a0f7e6de4653b8012ba349219ac56b27e26e6cf2b96077, 694271_Telegram_Buratino-T.apk
- File type
- application/zip
- MD5
dc030efa5973ba809bad2f544d9b18d2- SHA-1
baf73bca4e730cfe9f4ca2704d2da88073fb9224- SHA-256
ad2053bc0cf1cc54c5a0f7e6de4653b8012ba349219ac56b27e26e6cf2b96077- First indexed
- 2021-07-29 12:15:10
- Last updated
- 2026-09-26 08:45:07
Antivirus detections
| Engine | Detection |
|---|---|
| DrWeb | Android.BankBot.760.origin |
| CAT-QuickHeal | Android.Hqwar.GEN30159 |
| Sangfor | Malware.Android-Script.Save.389a6199 |
| Trustlook | Android.Malware.General (score:9) |
| K7GW | Trojan ( 00551de81 ) |
| Cyren | AndroidOS/Banker.AA.gen!Eldorado |
| ESET-NOD32 | a variant of Android/Spy.Banker.AOV |
| Avast | Android:Banker-SZ [Trj] |
| ClamAV | Andr.Trojan.Anubis-6692604-3 |
| Kaspersky | HEUR:Trojan-Banker.AndroidOS.Anubis.n |
| Sophos | Andr/Dropr-HO |
| Ikarus | Trojan-Banker.AndroidOS.Anubis |
| Avira | ANDROID/Banker.FOTJ.Gen |
| Microsoft | TrojanSpy:AndroidOS/Anubis.A!MTB |
| Avast-Mobile | Android:Evo-gen [Trj] |
| Cynet | Malicious (score: 99) |
| BitDefenderFalx | Android.Trojan.Banker.SK |
| AhnLab-V3 | Trojan/Android.Banker.1016533 |
| Fortinet | Android/Agent.AOV!tr.spy |
| AVG | Android:Banker-SZ [Trj] |