b47f2c59b6c4429cf6b4efb050e3ec3d66373dd727ca4215c5f4830cb6bdd792

Classification: Malicious

b47f2c59b6c4429cf6b4efb050e3ec3d66373dd727ca4215c5f4830cb6bdd792 is a spyware (application/gzip). Detected by 12 antivirus engines. Linked to Anubis malware.

Detection summary

  • 12 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: ANUBIS (S0422)

Intrusion sets: APT-C-23 (G1028)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Aridviper Triage 2026-08-12 19:01:34 2026-08-12 19:01:34 malicious-activity G1028 APT-C-23
Anubis Abuse.ch 2021-02-04 07:52:35 2021-02-04 07:52:35 malicious-activity S0422 Anubis

Tags

aridviper vamp banker c2 dropper evasion exfiltration infostealer obfuscated otp persistence rat sms spyware stealer trojan

Sample information

Filenames
b47f2c59b6c4429cf6b4efb050e3ec3d66373dd727ca4215c5f4830cb6bdd792.apk, b47f2c59b6c4429cf6b4efb050e3ec3d66373dd727ca4215c5f4830cb6bdd792
File type
application/gzip
MD5
6da98a77ddb13840d1741f86d55322fd
SHA-1
2c65cbee762effac7cdccce168587e8a140c27e1
SHA-256
b47f2c59b6c4429cf6b4efb050e3ec3d66373dd727ca4215c5f4830cb6bdd792
First indexed
2021-02-04 09:15:12
Last updated
2026-09-06 07:23:26

Antivirus detections

EngineDetection
McAfeeArtemis!03D4397512DF
SymantecMobileInsightAdLibrary:Generisk
KasperskyHEUR:Trojan-Spy.AndroidOS.Agent.wn
NANO-AntivirusTrojan.Android.Mlw.idwbbf
AegisLabTrojan.AndroidOS.Agent.C!c
TencentDos.Trojan-spy.Agent.Wskn
DrWebAndroid.Spy.764.origin
ZoneAlarmHEUR:Trojan-Spy.AndroidOS.Agent.wn
MicrosoftTrojan:Script/Wacatac.C!ml
ESET-NOD32a variant of Android/SpyC23.A
IkarusTrojan-Spy.AndroidOS.APT-C23
Qihoo-360Android/Trojan.Spy.569