Hayatevdeguzel.apk
Classification: Malicious
Hayatevdeguzel.apk is a banking trojan (application/java-archive, 2.8 MB). Detected by 47 antivirus engines. Linked to Cerberus malware.
Detection summary
- 47 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: CERBERUS (S0480)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Alienbot | Triage | 2026-08-19 01:07:25 | 2026-08-19 01:07:25 | malicious-activity | |
| Generic Malware | Hybrid-Analysis | 2025-02-13 19:00:30 | 2025-02-13 19:00:30 | ||
| Cerberus | Abuse.ch | 2020-12-01 23:41:53 | 2020-12-01 23:41:53 | malicious-activity | S0480 Cerberus |
| Generic.Malware | Abuse.ch | 2020-12-01 23:41:53 | 2020-12-01 23:41:53 | malicious-activity |
Tags
alienbot cerberus android banker collection credential_access defense_evasion discovery dropper evasion execution exfiltration infostealer obfuscated otp persistence rat sms spyware stealer stealth trojanSample information
- Filenames
- fc12f8a950b3eb4e56de5fefc2b57d7726222547b468ebd2fb5cf315bd1bb7cb.apk, FC12F8A950B3EB4E56DE5FEFC2B57D7726222547B468EBD2FB5CF315BD1BB7CB.apk, Hayatevdeguzel.apk
- File type
- application/java-archive
- Size
- 2956447 bytes
- MD5
1109a987d8b8a210ee642ad90e719035- SHA-1
82eed0d1bfef5ffb02dd770c870a818c27372f98- SHA-256
fc12f8a950b3eb4e56de5fefc2b57d7726222547b468ebd2fb5cf315bd1bb7cb- First indexed
- 2020-12-02 01:15:05
- Last updated
- 2026-09-27 16:38:03
Antivirus detections
| Engine | Detection |
|---|---|
| CAT-QuickHeal | Android.Agent.GEN37398 |
| Trustlook | Android.PUA.DebugKey |
| Alibaba | Trojan:Android/Boogr.97b95b73 |
| K7GW | Trojan ( 005633ff1 ) |
| ESET-NOD32 | a variant of Android/TrojanDropper.Agent.GSX |
| Kaspersky | HEUR:Trojan-Dropper.AndroidOS.Hqwar.cf |
| Sophos | Andr/Banker-GZA |
| F-Secure | Malware.ANDROID/Boogr.zakhf |
| DrWeb | Android.BankBot.5392 |
| McAfee-GW-Edition | Artemis |
| Ikarus | Trojan-Banker.AndroidOS.Cerberus |
| Avast-Mobile | Android:Evo-gen [Trj] |
| Avira | ANDROID/Boogr.zakhf |
| ZoneAlarm | HEUR:Trojan-Dropper.AndroidOS.Hqwar.cf |
| Cynet | Malicious (score: 85) |
| BitDefenderFalx | Android.Trojan.Banker.RY |
| AhnLab-V3 | Trojan/Android.Banker.1001216 |
| McAfee | Artemis!1109A987D8B8 |
| MaxSecure | Android.WIN32.Hqwar.da |
| Fortinet | Android/Agent.FRJ!tr |
| Qihoo-360 | Other.Android.Gen |
| AhnLab-V3 | Trojan/Android.Banker.1002024 |
| Alibaba | TrojanDropper:Android/Hqwar.5585bc73 |
| Antiy-AVL | Trojan[Dropper]/Android.Hqwar |
| Avira | ANDROID/Dropper.FHYZ.Gen |
| BitDefenderFalx | Android.Trojan.Banker.VQ |
| CAT-QuickHeal | Android.ScytheSCF.GG |
| Cynet | Malicious (score: 99) |
| DrWeb | Android.BankBot.6152 |
| F-Secure | Malware.ANDROID/Dropper.FHYZ.Gen |
| Fortinet | Android/Agent.FXV!tr |
| Detected | |
| K7GW | Trojan ( 0058fc031 ) |
| Kaspersky | HEUR:Trojan-Dropper.AndroidOS.Hqwar.fv |
| Lionic | Trojan.AndroidOS.Hqwar.C!c |
| MAX | malware (ai score=100) |
| Microsoft | TrojanDropper:AndroidOS/Banker.A!MTB |
| Skyhigh | Artemis!Trojan |
| Sophos | Andr/Banker-GTV |
| Symantec | PUA.Gen.2 |
| SymantecMobileInsight | Other:Android.Reputation.1 |
| Tencent | a.privacy.BankAnubisTrojan |
| Trustlook | Android.Malware.Trojan |
| Varist | ABTrojan.GUYX- |
| Xcitium | Malware@#sceuz584pz1t |
| ZoneAlarm | HEUR:Trojan-Dropper.AndroidOS.Hqwar.fv |
| alibabacloud | Trojan[dropper]:Android/Hqwar.fv |