Aleyna_Tilki_Ifsa.apk
Classification: Malicious
Aleyna_Tilki_Ifsa.apk is a trojan (application/java-archive). Detected by 41 antivirus engines. Linked to Cerberus malware. 3 sightings, last seen 2026-09-27.
Detection summary
- 41 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CERBERUS (S0480)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-27 15:45:04 | 2026-09-27 15:45:04 | malicious-activity | |
| Generic.Malware | Abuse.ch | 2021-10-14 13:43:41 | 2021-10-14 13:43:41 | malicious-activity | |
| Cerberus | Abuse.ch | 2021-10-14 13:43:41 | 2021-10-14 13:43:41 | malicious-activity | S0480 Cerberus |
Sample information
- Filenames
- ebdb622ce91fe9b259189a724665c3ae4f2de4eed7eafa527d89b43cf3353891, Aleyna_Tilki_Ifsa.apk
- File type
- application/java-archive
- MD5
1811a235f38ce27bbf46ecb4c2c18713- SHA-1
ad8064d88591d214f96ea90d465df5cefd632762- SHA-256
ebdb622ce91fe9b259189a724665c3ae4f2de4eed7eafa527d89b43cf3353891- First indexed
- 2021-10-14 14:15:05
- Last updated
- 2026-09-27 15:45:04
Antivirus detections
| Engine | Detection |
|---|---|
| CAT-QuickHeal | Android.ScytheSCF.GG |
| Trustlook | Android.PUA.DebugKey |
| K7GW | Trojan ( 005633ff1 ) |
| ESET-NOD32 | a variant of Android/TrojanDropper.Agent.IYA |
| Sophos | Andr/Banker-GTV |
| Ikarus | Trojan-Banker.AndroidOS.Agent |
| BitDefenderFalx | Android.Trojan.Banker.RY |
| Fortinet | Android/Agent.FRJ!tr |
| AhnLab-V3 | PUP/Android.FLPrev.1096134 |
| Alibaba | TrojanBanker:Android/Cerberus.bff9bd80 |
| Antiy-AVL | Trojan/Generic.ASMalwAD.37 |
| Arcabit | Trojan.Generic.D240CE3E |
| Avast-Mobile | Android:Evo-gen [Trj] |
| Avira | ANDROID/Dropper.FKKQ.Gen |
| BitDefender | Trojan.GenericKD.37801534 |
| BitDefenderFalx | Android.Trojan.Banker.XJ |
| Cynet | Malicious (score: 99) |
| DrWeb | Android.BankBot.11015 |
| Emsisoft | Trojan.GenericKD.37801534 (B) |
| F-Secure | Malware.ANDROID/Dropper.FKKQ.Gen |
| FireEye | Trojan.GenericKD.37801534 |
| GData | Trojan.GenericKD.37801534 |
| Detected | |
| Ikarus | Trojan-Banker.AndroidOS.Hydra |
| K7GW | Trojan ( 0058fc031 ) |
| Kaspersky | HEUR:Trojan-Dropper.AndroidOS.Hqwar.gn |
| Lionic | Trojan.AndroidOS.Cebruser.C!c |
| MAX | malware (ai score=100) |
| McAfee | Artemis!1811A235F38C |
| MicroWorld-eScan | Trojan.GenericKD.37801534 |
| Microsoft | Trojan:AndroidOS/Cerberus.B!MTB |
| NANO-Antivirus | Trojan.Android.BankBot.jepkrm |
| Skyhigh | Artemis!Trojan |
| Sophos | Andr/Banker-HAM |
| Symantec | Trojan.Gen.2 |
| SymantecMobileInsight | AppRisk:Generisk |
| Tencent | a.privacy.BankAnubisTrojan |
| Trustlook | Android.Malware.Trojan |
| VIPRE | Trojan.GenericKD.37801534 |
| Xcitium | Malware@#2wid9bt4awu1z |
| ZoneAlarm | HEUR:Trojan-Dropper.AndroidOS.Hqwar.gn |