Samples
One page per analysed APK - hashes, signer certificate and every C2 extracted from it. Binary samples are never published; only these indicators and metadata. Most recently added first.
Showing 1 of 12 pages · 584 samples · 50 per page.
| SHA-256 | MD5 | Families | C2s | First seen |
|---|---|---|---|---|
| 6027091577efdc76… | b7945f1105a2c1fcc5bdb56ce834b622 | NFC Relay (provisional) | 2 | 2026-10-10 |
| 43e62fa4bcd07b3a… | 5eb54c750b9d7e03b638caca95047cff | NFC Relay (provisional) | 2 | 2026-10-10 |
| 2b8943840529e7cb… | 3e96be24115eb3312425a2d282efce17 | NFC Relay (provisional) | 2 | 2026-10-11 |
| d811ea66deb1a40c… | 44df3c597031d81cb2036ddc7a47d672 | NFC Relay (provisional) | 2 | 2026-10-11 |
| aed16211d04c1d2a… | 0075506027d676cb1607069094b12c69 | NFC Relay (provisional) | 2 | 2026-10-11 |
| 6085ae687218ed6a… | 1c32d7a3c2fc497c521640863f1c17dc | NFC Relay (provisional) | 2 | 2026-10-11 |
| 20ba7a54e5dcf6ad… | 1f7bc20e628ab1ba83caa6ec4e833abc | NFC Relay (provisional) | 2 | 2026-10-04 |
| 95dc6098c8b0551b… | 828df615b452e28f2a7d767535878bc6 | NFC Relay (provisional) | 2 | 2026-10-04 |
| 7c77da3f0300bb26… | e7e4cd152107f1f2bec477af25ce7cb0 | Shellapp WebView Exfil (provisional) | 1 | 2026-09-26 |
| 9011a4b1cf4aafce… | 163c05fff974945e63db00b22d16fa8c | Shellapp WebView Exfil (provisional) | 1 | 2026-09-09 |
| c15c162c47d0bbcc… | 027a42ba701a877093ef825d8a95a2a8 | Shellapp WebView Exfil (provisional) | 1 | 2026-09-06 |
| c67086b3adbc99fe… | 32357eb6085f6fc1e7c8cfe00b590de4 | Shellapp WebView Exfil (provisional) | 1 | 2026-09-06 |
| ed7f2f37a766922b… | 184f27fd8ee669aa0430d2b8b2d028d2 | Shellapp WebView Exfil (provisional) | 1 | 2026-09-20 |
| e5260b85c316a233… | 67fab492d372fcbca70157ee4c2b4ed7 | Metasploit | 1 | 2026-09-25 |
| 930bc90c9b6cc518… | c0addc03956cc74d14bb040a520ddab8 | Metasploit | 1 | 2026-09-25 |
| aae8a77820bc5b37… | d7b8a4a2d40d02b12171102ea95c3282 | Shellapp WebView Exfil (provisional) | 1 | 2026-10-11 |
| f97a29dc26a0fd67… | d06a62e423ccddbc63dbe46796db39a3 | Metasploit | 1 | 2026-09-29 |
| d07f9331d7773796… | 91a08499ab1adde6157700438e8b10d4 | Metasploit | 1 | 2026-10-02 |
| 63b6b4da5596b57c… | 8b205bea60b6dfa527192cc0aa221d35 | Metasploit | 1 | 2026-10-02 |
| 17c0fd040f0dd865… | 9a2a5cc04ab104d30e0082542c9033bf | Metasploit | 1 | 2026-09-20 |
| e1d70d1082555fb2… | 2b98b0feaf0e68aeff777f78f598a91d | Metasploit | 1 | 2026-10-04 |
| b1fdf25d6819bf38… | 9c10ff5d0220b3d8bf7531ca3b7c8b6f | Metasploit | 1 | 2026-10-05 |
| a88e4c6a9b49daab… | 34ba8758af6ca305c95722b84131232f | Metasploit | 1 | 2026-10-03 |
| 8d6a924c31a14800… | 897692de614395e4ac31a407d100bf12 | Metasploit | 1 | 2026-10-03 |
| 7304a89963581d48… | fb28c33c9a697ffc0574a3994f0b0e5d | Metasploit | 1 | 2026-10-04 |
| 6dd7c9573329ba8a… | 5798712fd54329c4a9f085b9a1f98a7a | WebSocket SMS Stealer (provisional) | 1 | 2026-10-11 |
| e7ccdd997a28ff5a… | 937e051d35f75df4c4d26edcf9ce74fd | Metasploit | 1 | 2026-10-10 |
| deb7baae8601c041… | a608c08bf62f6b9d287e3fc7f0db8d14 | Metasploit | 1 | 2026-10-10 |
| d68b43f37b04445a… | 9cc1ae076e1053cbd25197ddbb9669d9 | Metasploit | 1 | 2026-10-09 |
| cb1227a9504690f2… | 4933d979554da34c65040fbb3789961e | Metasploit | 1 | 2026-10-08 |
| ba9df4f77503b240… | 81ff998033914cf4c6ba8747ddabd248 | Metasploit | 1 | 2026-10-08 |
| b559b3d4fbf77357… | c4f77722c29fbae124cb58d56767e52c | Metasploit | 1 | 2026-10-06 |
| a7f01fc26000d9d0… | 1ead46fa5c6198c6f5d6d97bb01bfa6d | Metasploit | 1 | 2026-10-08 |
| a32c17e333f974c9… | e7187bb71b9c74394efab90567e2b138 | Metasploit | 1 | 2026-10-08 |
| 95a6edd99c75ef9a… | aab01663546393259b552e9090f6c7b6 | Metasploit | 1 | 2026-10-11 |
| 94aa198303b77b48… | 9ac22d9bf277f1afa87c988b373dd71b | Metasploit | 1 | 2026-10-10 |
| 8d5d57a9b9ddc0ce… | 6c59c1cae86c121002c846a33ac34494 | Metasploit | 1 | 2026-10-08 |
| 60fc70f8ab389e18… | b1a83f9327fd3873d51fdbfa243f0c7e | Metasploit | 1 | 2026-10-10 |
| 583c04d8726d88c9… | 7098ccaa7ea4d4b7b0e1c36c864a86f0 | Metasploit | 1 | 2026-10-10 |
| 58031d0230b11a49… | 603552dadfa1bd6edec26f36a584749a | Metasploit | 1 | 2026-10-06 |
| 0e374119192ae0f4… | 850c5f2c8ee30962c50d4fd0037a2164 | Metasploit | 1 | 2026-10-08 |
| 0c258c2e7243f4e3… | d58541a76dc4c777d7111785d7cf9826 | Metasploit | 1 | 2026-10-10 |
| 03a1fe04ec36038a… | 28307deb6e739cffa88c46971a2f239f | Metasploit | 1 | 2026-10-09 |
| 0106e49ef1acdc36… | 72d3f54c2e3fcd7c76412c06e8ce0505 | Metasploit | 1 | 2026-10-09 |
| 298f3bd6cc333e04… | 2ac392287711db5e1d4399e7118b387a | Kahwin SMS Stealer (provisional) | 1 | 2023-12-12 |
| 26e6bdc1bf055dc6… | cf4c4fddc1de1ac8b97d4893bbc77fdf | Kahwin SMS Stealer (provisional) | 2 | 2023-11-06 |
| 2426de79163f6611… | ee307cb21d0ed7aca91eaf482aa36952 | Kahwin SMS Stealer (provisional) | 2 | 2023-09-17 |
| 22b710341e535f25… | 80e2723a14127cbd39eb0ac490e5f218 | Kahwin SMS Stealer (provisional) | 2 | 2023-08-11 |
| 2117ac47b21c094f… | 946c9361fc4ca02f63aa34a2f799a512 | Kahwin SMS Stealer (provisional) | 1 | 2023-09-08 |
| 1f0ad6e41914b43e… | 012841f72ab9fb7ddad4da533b342d47 | Kahwin SMS Stealer (provisional) | 2 | 2023-12-27 |