Android-Update.apk

Classification: Malicious

Android-Update.apk is a banking trojan (application/java-archive). Detected by 9 antivirus engines. Linked to Cerberus malware.

Detection summary

  • 9 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: CERBERUS (S0480)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-09-26 18:45:06 2026-09-26 18:45:06 malicious-activity
Cerberus Triage 2026-08-18 19:47:08 2026-08-18 19:55:55 malicious-activity S0480 Cerberus
Generic.Malware Abuse.ch 2021-09-04 15:02:07 2021-09-04 15:02:07 malicious-activity

Tags

cerberus android banker c2 collection credential_access defense_evasion discovery dropper evasion exfiltration impact infostealer loader obfuscated persistence rat spyware stealer stealth suspicious trojan

Sample information

Filenames
c4648a8011f5d3e18feeb69c079e6af6e8c51321a9e7b5493bbf50e6fbfc1bfe, c4648a8011f5d3e18feeb69c079e6af6e8c51321a9e7b5493bbf50e6fbfc1bfe.apk, Android-Update.apk
File type
application/java-archive
MD5
2c31fdb2c51684b9e44c3f4851d91eac
SHA-1
e3641b6f79cf1af7d1c15b65a5ade7499023182e
SHA-256
c4648a8011f5d3e18feeb69c079e6af6e8c51321a9e7b5493bbf50e6fbfc1bfe
First indexed
2021-09-04 15:15:03
Last updated
2026-09-26 18:45:07

Antivirus detections

EngineDetection
K7GWTrojan ( 005573fd1 )
TrustlookAndroid.PUA.DebugKey
ESET-NOD32a variant of Android/TrojanDropper.Agent.ISG
SophosAndr/Banker-GTV
IkarusTrojan-Banker.AndroidOS.Cerberus
Avast-MobileAndroid:Evo-gen [Trj]
BitDefenderFalxAndroid.Trojan.Banker.WA
AhnLab-V3Trojan/Android.Banker.1024165
FortinetAndroid/Bankbot.6439!tr