Samples
One page per analysed APK - hashes, signer certificate and every C2 extracted from it. Binary samples are never published; only these indicators and metadata. Most recently added first.
Showing 7 of 12 pages · 585 samples · 50 per page.
| SHA-256 | MD5 | Families | C2s | First seen |
|---|---|---|---|---|
| 2358a0e548eba346… | 1044f447a9cbbf426212596379c614b2 | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-06 |
| de971fb08b0e5ef2… | 196375ba705d87a250069d64d1c9da20 | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-06 |
| 93853df9f337e5fb… | 62f2c16af43430f3980aef3f88d7d104 | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-06 |
| ab526c9cc016c4ba… | 4506072968b119ce77c23da19793d0b3 | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-07 |
| 4751ffbb972a6a3a… | 1b76a1d4a04132d52323848e0ce79e85 | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-08 |
| 26b11dc01a7ce322… | c589c55c2a9341b12719f55bc90307e9 | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-08 |
| 64f45c0323cb1729… | 96355038aa5d8162c938b519398c2bb3 | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-08 |
| dd7c4a3aefcf4392… | feb35e239e21b108e5936d9c23c8efea | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-08 |
| 175a2d2d813280e8… | 558b1a1d1d6fde443eeb1332811e21e8 | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-08 |
| a8d62f37757631b6… | 9bd4a920b6cd5449e191e5bd2f2273b9 | Uzbek News Lure Dropper (provisional) | 1 | 2026-10-08 |
| 8c5c097752b0d6cc… | 29adf1cfbea049f06aecc9fd0491b00a | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-08 |
| ac1835ae46258a1e… | 50fef22b950bb3b403efdccb541bb00a | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-08 |
| ba7332459a0e4ab8… | ede936597bf947768851d7c61f9a326f | NFC Relay (provisional) | 2 | 2026-10-08 |
| e3832322e716af75… | 485afcb2868e4f09fd2cdeb7c8bd140d | GosuVPN Dropper (provisional) | 1 | 2026-10-08 |
| 8434cf47a5a14552… | 1461e6820139adaecbd766b2a8d499cb | WebRTC Spycam RAT (provisional) | 1 | 2026-10-08 |
| ac8c47abcb15c10a… | 63beaaa74ee8e56ecc9f689c7bb1fd17 | Magic Dropper (provisional) | 1 | 2026-10-08 |
| 9ea98d083024dc94… | a871b38f8eea1f41b10af1fe2d011c57 | Telegram Bot Stealer (provisional) | 1 | 2026-10-08 |
| 8968d6ed113bd904… | 8748b861416547f7d50b8046eec6305a | NFC Relay (provisional) | 2 | 2026-10-08 |
| cafd4c58b4e54e19… | 293b53edfa069430881f534f7332b407 | SecretShoot Crypto Drainer (provisional) | 1 | 2026-10-09 |
| 1440cd851a899a52… | d8a9a0b68f2cddaf853d46ac2749b5ba | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-09 |
| 0ea4e7cc9af4e727… | 4e175be709481cfdde5480cd36dd3259 | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-09 |
| 85742a0053828862… | 9b39092b710a179c215ac0f410126610 | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-09 |
| 1ddede165aba42e5… | 55326f0761d6159465acf11eb8e8351a | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-09 |
| bba7819fa77f49cc… | 202e88e055b2ecfee87934fcc41a3ae6 | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-09 |
| f63166f41ac9919a… | 9f083a7f870ec8ae8a2c73dcf1e3169b | Modobom WAP Fraud (provisional) | 7 | 2026-10-07 |
| 40d1db89934bbae3… | b26516bb8e6c5a9571b5bef4ab414035 | Orbit Shop Phish (provisional) | 1 | 2026-10-08 |
| 43168978b5b88155… | acbe734cfaf17cf8ddc7f281936d9854 | AtlasBridge Overlay RAT (provisional) | 2 | 2026-10-08 |
| 844b58576a5f7848… | 2b37b58557159088f0b54667e3b46e7d | Shellapp VNC RAT (provisional) | 4 | 2026-09-29 |
| be165239e4fe899b… | 48c5cab842617c00b380d2c4effd8721 | novinarya | 1 | 2026-10-07 |
| e5f23ea7a7d4d585… | 1345f89b60108074b9fa4dae349cc53f | CapraRat | 2 | 2022-02-07 |
| 83a4718fd650f78b… | 4a7a22d90ead6ffa86ef704958b57aab | CapraRat | 2 | 2019-07-31 |
| 80d6be8218cfc154… | 4ad5dfb98e903066dff447f351518a5f | CapraRat | 2 | 2020-04-27 |
| 1a425c66fb788af6… | fc1ee2d9e739256b1a4b19e3a2390090 | CapraRat | 2 | 2020-10-21 |
| 86b4dcd83121236a… | 08a0f17f687d68889a3bcbfad56a8624 | CloudSettle Tunnel RAT (provisional) | 2 | 2026-10-08 |
| 6e562f3028b5c124… | 7c428b1aa7121e1ac56d71389c6f8426 | CloudSettle Tunnel RAT (provisional) | 2 | 2026-10-04 |
| 6d0282f31c8a521e… | 72612b7c94d3de8ea515b4a09e0fd356 | CloudSettle Tunnel RAT (provisional) | 2 | 2026-09-20 |
| 75894da573866f27… | 97233891c788189741a6aa2a88b3cf39 | Zloy SMS RAT (provisional) | 1 | 2026-06-28 |
| 7ceb8663fc2c099e… | fd5771f2593d2337e967c0e32ad6805b | Telegram Bot Stealer (provisional) | 1 | 2026-10-05 |
| d6aeeba8aa65674a… | e8ee00b2a9b4132315b6bb74105e3cd2 | Store Lure Dropper (provisional) | 1 | 2026-08-26 |
| 0683f43611510c93… | b841117fbe250303d3b3a2f2997c2756 | WebSocket RAT (provisional) | 3 | 2026-10-02 |
| b6dc251ea9ce86cb… | 6d4c03d72f82cb2110bd9d2488fa359b | Metasploit | 1 | 2026-10-08 |
| c6ad7e66f7fb0018… | ea2369a3d1b692159a070b5c66278109 | Metasploit | 1 | 2026-10-08 |
| 2c4694a79d1ba0fe… | f7548904e0f1857143578fe27a2abe52 | Anubis | 3 | 2026-10-07 |
| 48bf67f14bd62bfc… | 6a45249b3ef638e5855f5706ce319fa9 | CloudSettle Tunnel RAT (provisional) | 2 | 2026-10-05 |
| d27a9bf383b5a969… | 1dbc5aff5faf8ed015aef54952ea09ff | HK Banking Stealer (provisional) | 1 | 2026-10-08 |
| 7b81db06097eaaf9… | c610fb1778be8fb3b78373e81cadc725 | WebRTC Spycam RAT (provisional) | 1 | 2026-10-05 |
| 6827edb54e2310ae… | bc7f0950326ec45d0a216779cc52e0ba | Black Hawk | 1 | 2026-10-07 |
| 12b72de4d7869e4f… | 4786ded6d1ddfd89a19ef1461956e915 | Black Hawk | 1 | 2026-10-08 |
| 032071c1c92d900f… | e71f91224a8d87c4cb67a2b239835c73 | Famelack Loader (provisional) | 2 | 2026-10-08 |
| 75b5b4e8c4e20d26… | cc1fe6cc8a74370bb5965cd07d03706c | Famelack Loader (provisional) | 1 | 2026-10-08 |