Aleyna_Tilki_Ifsa.apk
Classification: Malicious
Aleyna_Tilki_Ifsa.apk is a trojan (application/java-archive). Detected by 38 antivirus engines. Linked to Cerberus malware. 3 sightings, last seen 2026-09-26.
Detection summary
- 38 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CERBERUS (S0480)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-26 22:45:05 | 2026-09-26 22:45:05 | malicious-activity | |
| Generic.Malware | Abuse.ch | 2021-10-14 19:44:18 | 2021-10-14 19:44:18 | malicious-activity | |
| Cerberus | Abuse.ch | 2021-10-14 19:44:18 | 2021-10-14 19:44:18 | malicious-activity | S0480 Cerberus |
Sample information
- Filenames
- cf3bd3c242555867a1e6bdd07e7c9dcc5df5ba5cf15e24ed12ac7e1bc533f829, Aleyna_Tilki_Ifsa.apk
- File type
- application/java-archive
- MD5
f50a8b6f416d2efb30fe6b2b5f83b9da- SHA-1
da162c0a3ae612ee779ff781e60b4362880fc7a8- SHA-256
cf3bd3c242555867a1e6bdd07e7c9dcc5df5ba5cf15e24ed12ac7e1bc533f829- First indexed
- 2021-10-14 20:15:04
- Last updated
- 2026-09-26 22:45:05
Antivirus detections
| Engine | Detection |
|---|---|
| Trustlook | Android.PUA.DebugKey |
| K7GW | Trojan ( 0053b5f91 ) |
| BitDefenderFalx | Android.Trojan.Banker.RY |
| Fortinet | Android/Agent.FRJ!tr |
| AhnLab-V3 | PUP/Android.FLPrev.1096134 |
| Alibaba | TrojanBanker:Android/Cerberus.7937ad51 |
| Antiy-AVL | Trojan/Generic.ASMalwAD.37 |
| Arcabit | Trojan.Generic.D242466D |
| Avast-Mobile | Android:Evo-gen [Trj] |
| Avira | ANDROID/Dropper.FKKQ.Gen |
| BitDefender | Trojan.GenericKD.37897837 |
| BitDefenderFalx | Android.Trojan.Banker.XJ |
| CAT-QuickHeal | Android.ScytheSCF.GG |
| Cynet | Malicious (score: 99) |
| DrWeb | Android.BankBot.11023 |
| ESET-NOD32 | a variant of Generik.GKFIJBU |
| Emsisoft | Trojan.GenericKD.37897837 (B) |
| F-Secure | Malware.ANDROID/Dropper.FKKQ.Gen |
| FireEye | Trojan.GenericKD.37897837 |
| GData | Trojan.GenericKD.37897837 |
| Detected | |
| Ikarus | Trojan-Banker.AndroidOS.Hydra |
| Kaspersky | HEUR:Trojan-Dropper.AndroidOS.Hqwar.gn |
| Lionic | Trojan.AndroidOS.Hqwar.C!c |
| MAX | malware (ai score=100) |
| McAfee | Artemis!F50A8B6F416D |
| MicroWorld-eScan | Trojan.GenericKD.37897837 |
| Microsoft | Trojan:AndroidOS/Cerberus.B!MTB |
| NANO-Antivirus | Trojan.Android.BankBot.jhjylp |
| Skyhigh | Artemis!Trojan |
| Sophos | Andr/Banker-HAM |
| Symantec | Trojan.Gen.2 |
| SymantecMobileInsight | AppRisk:Generisk |
| Tencent | a.privacy.BankAnubisTrojan |
| Trustlook | Android.Malware.Trojan |
| VIPRE | Trojan.GenericKD.37897837 |
| Xcitium | Malware@#fepxftueharb |
| ZoneAlarm | HEUR:Trojan-Dropper.AndroidOS.Hqwar.gn |