Evdeyim.apk
Classification: Malicious
Evdeyim.apk is a banking trojan (application/java-archive, 2.3 MB). Detected by 11 antivirus engines. Linked to Cerberus malware.
Detection summary
- 11 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CERBERUS (S0480)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Alienbot | Triage | 2026-08-18 19:05:49 | 2026-08-18 19:05:49 | malicious-activity | |
| Generic Malware | Hybrid-Analysis | 2025-02-13 19:45:05 | 2025-02-13 20:36:27 | ||
| Generic.Malware | Abuse.ch | 2020-12-12 20:59:40 | 2020-12-12 20:59:40 | malicious-activity | |
| Cerberus | Abuse.ch | 2020-12-12 20:59:40 | 2020-12-12 20:59:40 | malicious-activity | S0480 Cerberus |
Tags
alienbot cerberus android banker collection credential_access defense_evasion discovery dropper evasion execution exfiltration infostealer loader obfuscated otp persistence rat sms spyware stealer stealth trojanSample information
- Filenames
- bce447711725ad9106a0094d25220103b1bf4ba83bc247b3662ff4a6bfe9c67e.apk, BCE447711725AD9106A0094D25220103B1BF4BA83BC247B3662FF4A6BFE9C67E.apk, Evdeyim.apk
- File type
- application/java-archive
- Size
- 2414285 bytes
- MD5
3bfd4d18a3ceb4fb378772f1e4d1540c- SHA-1
5f9926d498c3cd78fd99244cdd9f92de3a0eebc1- SHA-256
bce447711725ad9106a0094d25220103b1bf4ba83bc247b3662ff4a6bfe9c67e- First indexed
- 2020-12-12 23:15:07
- Last updated
- 2026-10-12 02:56:54
Antivirus detections
| Engine | Detection |
|---|---|
| CAT-QuickHeal | Android.Agent.GEN37398 |
| McAfee | Artemis!3BFD4D18A3CE |
| Trustlook | Android.PUA.DebugKey |
| K7GW | Trojan ( 005633ff1 ) |
| Sophos | Andr/Banker-GZA |
| McAfee-GW-Edition | Artemis |
| Ikarus | Trojan-Banker.AndroidOS.Cerberus |
| Microsoft | Trojan:Script/Wacatac.C!ml |
| Avast-Mobile | APK:RepMalware [Trj] |
| BitDefenderFalx | Android.Trojan.Banker.RY |
| Fortinet | Android/Agent.FRJ!tr |