20GBHediye.apk
Classification: Malicious
20GBHediye.apk is a banking trojan (ZIP archive, 330.0 KB). Flagged by 21% of antivirus engines (14 detections). Linked to Cerberus malware.
Detection summary
- 14 antivirus detections (21% detection ratio)
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CERBERUS (S0480)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Android:Cerberus | Hybrid-Analysis | 2020-07-24 11:17:05 | 2020-07-24 11:17:05 | S0480 Cerberus |
Tags
cerber ransomwareSample information
- Filenames
- 20GBHediye.apk
- File type
- Zip archive data, at least v2.0 to extract
- Size
- 337885 bytes
- MD5
2910b260382ea81bbe92fb11ae49c508- SHA-1
c4703eb02bde29a25eedd08ad52861f2adf5677f- SHA-256
b7cc79d635ed1de5cabe949d3aeec596715944fb08b913ef456de8ed03ef7b03- First indexed
- 2020-07-24 11:17:05
- Last updated
- 2026-09-25 16:55:09
Antivirus detections
| Engine | Detection |
|---|---|
| DrWeb | Android.BankBot.607.origin |
| CAT-QuickHeal | Android.Cebruser.GEN30226 |
| Trustlook | Android.PUA.DebugKey |
| K7GW | Trojan ( 005573fd1 ) |
| Avast | Android:Cerberus-AG [Bank] |
| Kaspersky | HEUR:Trojan-Banker.AndroidOS.Cebruser.b |
| F-Secure | Malware.ANDROID/Cerberus.FOPM.Gen |
| Avira | ANDROID/Cerberus.FOPM.Gen |
| ZoneAlarm | HEUR:Trojan-Banker.AndroidOS.Cebruser.b |
| Avast-Mobile | Android:Evo-gen [Trj] |
| AhnLab-V3 | Trojan/Android.SpyAgent.920504 |
| ESET-NOD32 | a variant of Android/Spy.Cerberus.D |
| Ikarus | Trojan-Banker.AndroidOS.Cerberus |
| AVG | Android:Cerberus-AG [Bank] |