dfda8e52df5ba1852d518220363f81a06f51910397627df6cdde98d15948de65

Classification: Malicious

dfda8e52df5ba1852d518220363f81a06f51910397627df6cdde98d15948de65 is a malicious file sample. Linked to Xbot malware. Detected by 44 antivirus engines.

Detection summary

  • 44 antivirus detections (49% detection ratio)
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: XBOT (S0298)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Xbot Triage 2026-06-26 08:37:41 2026-06-26 10:15:29 malicious-activity S0298 Xbot

Tags

banker xbot android discovery infostealer persistence trojan

Sample information

Filenames
dfda8e52df5ba1852d518220363f81a06f51910397627df6cdde98d15948de65
File type
Zip archive data, at least v2.0 to extract
Size
617090 bytes
MD5
d846f7ac66a9a932235fb415b96fee5d
SHA-1
5e2a43b89edd2ab76be6fbebb051669b982fa922
SHA-256
dfda8e52df5ba1852d518220363f81a06f51910397627df6cdde98d15948de65
First indexed
2021-12-09 07:14:16
Last updated
2026-09-03 03:54:21

Antivirus detections

EngineDetection
LionicSUSPICIOUS
DrWebAndroid.SmsBot.376.origin
CAT-QuickHealAndroid.Xbot.A
McAfeeArtemis!D846F7AC66A9
SangforPUP.Android-Script.Save.fb60f393
AlibabaRansom:Android/Haynu.ab053e73
K7GWTrojan ( 004dbeea1 )
TrustlookAndroid.Malware.Trojan
CyrenAndroidOS/Lotoor.C.gen!Eldorado
SymantecMobileInsightSpyware:MobileSpy
ESET-NOD32Android/Haynu.A
TrendMicro-HouseCallANDROIDOS_SMSBOT.CBTQD
AvastAndroid:Agent-IUK [Trj]
ClamAVAndr.Trojan.Xbot-2
KasperskyHEUR:Backdoor.AndroidOS.Agent.bd
NANO-AntivirusTrojan.Android.Agent.dsnrkr
Tencenta.privacy.emial.d
SophosAndr/Haynu-A
TrendMicroANDROIDOS_SMSBOT.CBTQD
Avast-MobileAndroid:Agent-IUK [Trj]
Antiy-AVLTrojan/Generic.ASMalwAD.62C
KingsoftAndroid.Troj.iToper.aj.(kcloud)
MicrosoftRansom:AndroidOS/Botx.A
BitDefenderFalxAndroid.Trojan.Haynu.A
AhnLab-V3Trojan/Android.SmsBot.63280
MAXmalware (ai score=100)
ZonerTrojan.Android.Gen.1335058
IkarusTrojan.AndroidOS.Haynu
FortinetAndroid/Xbot.B!tr
AVGAndroid:Agent-IUK [Trj]
AlibabaBackdoor:Android/ndroidOS.10c4c00a
CTXapk.trojan.haynu
CynetMalicious (score: 99)
ESET-NOD32Android/Haynu.A trojan
GoogleDetected
KingsoftAndroid.Troj.IToper.aj
LionicTrojan.AndroidOS.Haynu.C!c
RisingRansom.Botx/Android!8.6621 (CLOUD)
SkyhighArtemis!Trojan
SymantecAndroid.Mobilespy
TrellixENSArtemis!D846F7AC66A9
VaristAndroidOS/Lotoor.C.gen!Eldorado
VirITAndroid.Trj.Haynu.AI
ZoneAlarmAndr/Haynu-A