c4290560c6776b09f188deb80d27250bddaae123c201ac29391be4aef523f48d

Classification: Malicious

c4290560c6776b09f188deb80d27250bddaae123c201ac29391be4aef523f48d is a dropper (application/zip). Detected by 17 antivirus engines. Linked to Flubot malware.

Detection summary

  • 17 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: FLUBOT (S1067)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Flubot Triage 2026-08-18 19:41:08 2026-08-18 19:41:08 malicious-activity S1067 FluBot
Generic.Malware Abuse.ch 2021-09-29 21:16:22 2021-09-29 21:16:22 malicious-activity

Tags

flubot android antivm banker c2 collection credential_access defense_evasion discovery dropper evasion exfiltration infostealer loader obfuscated otp overlay persistence rat sms spyware stealer suspicious trojan

Sample information

Filenames
c4290560c6776b09f188deb80d27250bddaae123c201ac29391be4aef523f48d.apk, sample.apk
File type
application/zip
MD5
8b6c4905f8f93af27e60b502621e03f6
SHA-1
5e5afc1c4cb35a5c2236ee75caba1fd062079c2f
SHA-256
c4290560c6776b09f188deb80d27250bddaae123c201ac29391be4aef523f48d
First indexed
2021-09-29 22:15:04
Last updated
2026-08-21 18:36:50

Antivirus detections

EngineDetection
TrustlookAndroid.PUA.DebugKey
K7GWTrojan ( 005806451 )
ESET-NOD32a variant of Android/TrojanDropper.Agent.IVA
KasperskyHEUR:Trojan-Dropper.AndroidOS.Hqwar.bk
F-SecureMalware.ANDROID/Dropper.FJVV.Gen
DrWebAndroid.BankBot.10484
SophosAndr/Banker-HAB
IkarusTrojan-Banker.AndroidOS.Flubot
AviraANDROID/Dropper.FJVV.Gen
MicrosoftTrojanDropper:AndroidOS/Agent.B
ZoneAlarmHEUR:Trojan-Dropper.AndroidOS.Hqwar.bk
Avast-MobileAndroid:Evo-gen [Trj]
CynetMalicious (score: 99)
BitDefenderFalxAndroid.Riskware.PackMal.QP
AhnLab-V3Trojan/Android.Marcher.1028025
McAfeeArtemis!3048F4739A39
FortinetAndroid/Agent.IVA!tr