Google Services 1.0.apk

Classification: Malicious

Google Services 1.0.apk is a spyware (application/zip). Detected by 19 antivirus engines. Linked to Anubis malware. 4 sightings, last seen 2026-09-27.

Detection summary

  • 19 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: ANUBIS (S0422)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-09-27 09:45:03 2026-09-27 09:45:03 malicious-activity
Ahmyth Triage 2026-08-18 22:05:24 2026-08-18 22:05:24 malicious-activity
Generic.Malware Abuse.ch 2021-02-04 01:20:26 2021-02-04 01:20:26 malicious-activity
Anubis Abuse.ch 2021-02-04 01:20:26 2021-02-04 01:20:26 malicious-activity S0422 Anubis

Tags

ahmyth antivm banker c2 dropper evasion exfiltration infostealer loader otp rat sms stealer trojan

Sample information

Filenames
dde973f01e5116b7482d50559496ff35acff4c043c82f00fcc63d23c621daaad, dde973f01e5116b7482d50559496ff35acff4c043c82f00fcc63d23c621daaad.apk, Google Services 1.0.apk
File type
application/zip
MD5
6d0926193cca3b30e883542e1e1c08b6
SHA-1
11762e79b1551f72dad1ee7a079cd2507ef54ad0
SHA-256
dde973f01e5116b7482d50559496ff35acff4c043c82f00fcc63d23c621daaad
First indexed
2021-02-04 02:15:05
Last updated
2026-09-27 09:45:03

Antivirus detections

EngineDetection
DrWebAndroid.Spy.613.origin
CAT-QuickHealAndroid.XploitSpy.GEN34866
SangforMalware
TrustlookAndroid.PUA.DebugKey
K7GWSpyware ( 005047e71 )
ESET-NOD32a variant of Android/Spy.Agent.BEH
AvastAndroid:L3mon-B [Spy]
KasperskyHEUR:Backdoor.AndroidOS.Ahmyth.f
F-SecureMalware.ANDROID/SpyAgent.FOPN.Gen
IkarusTrojan-Spy.AndroidOS.Agent
AviraANDROID/SpyAgent.FOPN.Gen
ZoneAlarmHEUR:Backdoor.AndroidOS.Ahmyth.f
Avast-MobileAndroid:Evo-gen [Trj]
CynetMalicious (score: 85)
BitDefenderFalxAndroid.Trojan.InfoStealer.VK
AhnLab-V3Backdoor/Android.Agent.929675
MaxSecureTrojan.Trojan.Dropper.AndroidOS.Hqwar.bb
FortinetAndroid/Agent.AOX!tr
AVGAndroid:L3mon-B [Spy]