220124-c4wfqaaegm.bin

Classification: Malicious

220124-c4wfqaaegm.bin is a trojan (Android package). Detected by 32 antivirus engines. Linked to Carbonsteal malware.

Detection summary

  • 32 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: CARBONSTEAL (S0529)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-09-26 23:45:04 2026-09-26 23:45:04 malicious-activity
Carbonsteal Triage 2026-04-24 07:34:00 2026-04-24 07:34:00 malicious-activity S0529 CarbonSteal

Tags

carbonsteal infostealer rat spyware trojan

Sample information

Filenames
d1b68d2ed4ba116bb03ce2a2fee1b42b57e2d0d96f6d1286bd457eccc26300b3, 220124-c4wfqaaegm.bin
File type
Android package (APK), with AndroidManifest.xml
MD5
7a998128451915141705a130c05828de
SHA-1
ff24a49453984bcbe5ad21b7234f47961dd8ef79
SHA-256
d1b68d2ed4ba116bb03ce2a2fee1b42b57e2d0d96f6d1286bd457eccc26300b3
First indexed
2026-04-24 07:34:00
Last updated
2026-09-26 23:45:04

Antivirus detections

EngineDetection
AVGAndroid:CarbonSteal-B [Spy]
AhnLab-V3Trojan/Android.Agent.440429
AlibabaTrojan:Android/Agent.441413db
Antiy-AVLTrojan[APT]/Win32.APT15
AvastAndroid:CarbonSteal-B [Spy]
Avast-MobileAndroid:Evo-gen [Trj]
AviraTR/Android.Agent.QUL
BitDefenderFalxAndroid.Trojan.Zitmo.P
CAT-QuickHealAndroid.Piom.F
CTXapk.trojan.piom
CynetMalicious (score: 99)
DrWebAndroid.Spy.3398
ESET-NOD32Android/Spy.Agent.DGO trojan
F-SecureTrojan.TR/Android.Agent.QUL
FortinetAndroid/Generic.Z.734F1A!tr
GoogleDetected
K7GWTrojan ( 00550d8d1 )
KasperskyHEUR:Trojan-Spy.AndroidOS.Mlasdl.c
KingsoftWin32.Troj.Undef.a
LionicTrojan.AndroidOS.Generic.C!c
McAfeeDti!D1B68D2ED4BA
NANO-AntivirusTrojan.Android.Fyec.epuwwj
RisingSpyware.Agent/Android!8.3BE (CLOUD)
SophosAndr/Zitmo-L
SymantecTrojan.Gen.2
SymantecMobileInsightTrojan:Malapp
Tencenta.expense.hiddendown
TrustlookAndroid.Malware.Spyware
VaristABTrojan.QUDN-
ZoneAlarmAndr/Zitmo-L
alibabacloudTrojan[spy]:Android/Mlasdl.c
huorongTrojan/Android.Stealer.akm!crit