Sentry-Exfil Stealer (provisional)

Malware family · 1 sample(s) · 2 indicator record(s) · 1 signing certificate(s) · Active 2026-09-29 (experimental)

About Sentry-Exfil Stealer (provisional)

Sentry-Exfil Stealer (provisional) is an Android information stealer that collects device data and user content and exfiltrates it to the constapr.com infrastructure (713c1.constapr.com, lfga.constapr.com). Provisional label pending correlation to a named family.

Indicators

IndicatorTypeSampleFirst seen
713c1.constapr.com domain 5c11ba6f62e5… 2026-09-29
lfga.constapr.com domain 5c11ba6f62e5… 2026-09-29