DHL25.apk

Classification: Malicious

DHL25.apk is a banking trojan (application/zip). Detected by 34 antivirus engines. Linked to Flubot malware.

Detection summary

  • 34 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: FLUBOT (S1067)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Flubot Triage 2026-08-18 21:30:21 2026-08-18 21:30:21 malicious-activity S1067 FluBot
FluBot Abuse.ch 2021-09-07 11:48:32 2021-09-07 11:48:32 malicious-activity S1067 FluBot

Tags

flubot android banker collection credential_access defense_evasion discovery dropper evasion exfiltration infostealer loader otp overlay persistence sms stealer trojan

Sample information

Filenames
d62843e7064553f995bb97b3e064922ebc93ac6591112f9b58b11b51c5ca8b30.apk, DHL25.apk
File type
application/zip
MD5
7aa3538e663b6f580f821a9b345ec187
SHA-1
37470bd54c24ec5b42ee982bcd8df2f6255f3fa9
SHA-256
d62843e7064553f995bb97b3e064922ebc93ac6591112f9b58b11b51c5ca8b30
First indexed
2021-09-07 13:15:09
Last updated
2026-10-12 01:54:51

Antivirus detections

EngineDetection
TrustlookAndroid.PUA.DebugKey
K7GWTrojan ( 005806451 )
ESET-NOD32a variant of Android/TrojanDropper.Agent.IMA
KasperskyHEUR:Trojan-Dropper.AndroidOS.Hqwar.bk
DrWebAndroid.BankBot.9899
SophosAndr/Banker-HAB
IkarusTrojan-Banker.AndroidOS.Flubot
AviraANDROID/Dropper.FJVV.Gen
ZoneAlarmHEUR:Trojan-Dropper.AndroidOS.Hqwar.bk
Avast-MobileAndroid:Evo-gen [Trj]
CynetMalicious (score: 99)
BitDefenderFalxAndroid.Trojan.Banker.WT
AhnLab-V3Trojan/Android.Marcher.1028025
McAfeeArtemis!C3F51A14DAF4
FortinetAndroid/Agent.IMA!tr
AlibabaTrojanDropper:Android/Hqwar.7c130dcd
Antiy-AVLTrojan/Generic.ASMalwAD.2D
AviraANDROID/Dropper.FKAR.Gen
BitDefenderFalxAndroid.Trojan.Banker.WV
DrWebAndroid.BankBot.10555
F-SecureMalware.ANDROID/Dropper.FKAR.Gen
KasperskyHEUR:Backdoor.AndroidOS.Polph.g
KingsoftWin32.Troj.Agent.cks
MAXmalware (ai score=99)
McAfeeArtemis!7AA3538E663B
MicrosoftTrojan:AndroidOS/Multiverze
NANO-AntivirusTrojan.Android.BankBot.jajiuk
SophosAndr/Xgen2-YW
SymantecTrojan.Gen.MBT
SymantecMobileInsightAppRisk:Generisk
Tencenta.privacy.BankAnubisTrojan
TrustlookAndroid.Malware.Trojan
XcitiumMalware@#1sgbraj0otr3w
ZoneAlarmHEUR:Backdoor.AndroidOS.Polph.g