AndroidUpdate.apk

Classification: Malicious

AndroidUpdate.apk is a banking trojan (application/java-archive, 2.3 MB). Flagged by 12% of antivirus engines (17 detections). Linked to Cerberus malware.

Detection summary

  • 17 antivirus detections (12% detection ratio)
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: CERBERUS (S0480)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Alienbot Triage 2026-08-18 18:06:02 2026-08-18 18:06:02 malicious-activity
Cerberus Abuse.ch 2020-11-22 00:38:15 2020-11-22 00:38:15 malicious-activity S0480 Cerberus
Trojan.Generic Hybrid-Analysis 2020-11-21 21:45:07 2020-11-21 21:45:07

Tags

alienbot cerberus android banker collection credential_access defense_evasion discovery dropper evasion execution exfiltration infostealer obfuscated otp persistence rat sms spyware stealer stealth trojan

Sample information

Filenames
b1908d38e44242eece0cc1d11e51cf482400977f110d8210ff9c12d7365af743.apk, AndroidUpdate.apk
File type
application/java-archive
Size
2446703 bytes
MD5
570d868aca95df74b7e3a2b8005cda2b
SHA-1
fe3b0d48e0d75e70eeb546448fb25e52e4ab6cff
SHA-256
b1908d38e44242eece0cc1d11e51cf482400977f110d8210ff9c12d7365af743
First indexed
2020-11-21 21:45:07
Last updated
2026-09-27 09:23:23

Antivirus detections

EngineDetection
TrustlookAndroid.PUA.DebugKey
K7GWTrojan ( 005615ca1 )
InvinceaAndr/Banker-GZA
SophosAndr/Banker-GZA
AviraANDROID/Dropper.FHTS.Gen
CynetMalicious (score: 85)
IkarusTrojan-Banker.AndroidOS.Cerberus
FortinetAndroid/Agent.FRJ!tr
McAfeeArtemis!570D868ACA95
AlibabaTrojan:Android/Banker.331b537f
KasperskyUDS:DangerousObject.Multi.Generic
McAfee-GW-EditionArtemis
MicrosoftTrojan:Script/Wacatac.C!ml
AegisLabTrojan.Multi.Generic.4!c
ZoneAlarmUDS:DangerousObject.Multi.Generic
Avast-MobileAPK:RepMalware [Trj]
Qihoo-360Other.Android.Gen