Samples
One page per analysed APK - hashes, signer certificate and every C2 extracted from it. Binary samples are never published; only these indicators and metadata. Most recently added first.
Showing 9 of 12 pages · 585 samples · 50 per page.
| SHA-256 | MD5 | Families | C2s | First seen |
|---|---|---|---|---|
| 3d2b066451506ed9… | 51ff35d85f915db442e85e6790a06642 | Telegram Phish Proxy (provisional) | 2 | 2026-10-07 |
| 32be1aeabebde0e4… | ef322241a0637e54ca2328f61c24307e | Telegram Phish Proxy (provisional) | 1 | 2026-10-07 |
| 2c400fc15dffd583… | a24501de87ee7028f0d00e52d45a2227 | Telegram Phish Proxy (provisional) | 1 | 2026-10-05 |
| 0da9f39ae5767899… | 22705618e4ec2c6f5858397dce2ad5f0 | Telegram Phish Proxy (provisional) | 1 | 2026-10-06 |
| e9bf1b6ae0438ba2… | 7108fd01bd06a20c0aa5daad36675bea | SyamRAT (provisional) | 1 | 2026-09-26 |
| aed3573f764aa98c… | 0327455b185dbecd34907ccae48becb6 | SyamRAT (provisional) | 1 | 2026-09-14 |
| 92e625364ce330b9… | fc741b78d7f2b7e840b43911a39786a4 | SyamRAT (provisional) | 1 | 2026-10-05 |
| 7f9d84dde2ca2081… | c6e856b5bbb1955ad3786d3c2b8bd883 | SyamRAT (provisional) | 1 | 2026-10-03 |
| 3efa80d2a7a12a4c… | 7d77a2341a192c45688330669cbb7c15 | SyamRAT (provisional) | 1 | 2026-09-29 |
| 34f261b71257687f… | efa650c14ba19de26a0dc90e4362a61a | Telegram Phish Proxy (provisional) | 2 | 2026-10-07 |
| 984ebc258c100ca2… | b6224053aeb60de3663a0e82b13f8097 | SyamRAT (provisional) | 1 | 2026-08-21 |
| 7492ff519fbee6b4… | b8adcf2ac8e85aab135e77f4d002f372 | SyamRAT (provisional) | 1 | 2026-08-30 |
| 68caf4b087d2790f… | 37e21890228e945600a60054b6fad8e2 | SyamRAT (provisional) | 1 | 2026-08-26 |
| e9f1b821f2045053… | 30ce5b921b60984d8db8e42fea424a89 | SMS Forwarder (provisional) | 1 | 2026-10-05 |
| 793a2cdd28f20300… | cb3e7e96d185bd4a0546dcb395a7f263 | SyamRAT (provisional) | 1 | 2026-09-30 |
| c734e944db5634b5… | 365ba8f6b05b0c780c47462c85792dc6 | RatHat | 1 | 2026-10-07 |
| 6a0e9b4ac963ce45… | dad480cb24dc207da21bbfbdca6eaefa | Telegram Dropper (provisional) | 3 | 2026-10-06 |
| c7b6c2ea5a8013d9… | 0ed509e05e7b22fd61224739e8c7aa00 | Flutter Banking Overlay (provisional) | 2 | 2026-09-07 |
| 06a47ef466f16374… | 79be4ebd108d81c6e769e7ec87afa192 | Flutter Banking Overlay (provisional) | 2 | 2026-08-26 |
| 9354d54a1c6be377… | e2996885b7dbfb11fa1f2fb07756bdcd | SMS Forwarder (provisional) | 2 | 2026-08-17 |
| c25f721eba1d351b… | 87cfb361dc311b377f80d23afcf20087 | SMS Forwarder (provisional) | 2 | 2026-08-17 |
| a234574170149e9b… | 51a508038a5d281790d18cb3a2e3d7eb | SMS Forwarder (provisional) | 1 | 2026-09-30 |
| 0050e3ef2812f13a… | fd2f9369807d923bc5194938ee3f43a3 | SMS Forwarder (provisional) | 1 | 2026-09-03 |
| 9beab3f4aec1f751… | 6431c6f831677f4dd087c85c42adb2c9 | HDFC Card Stealer (provisional) | 2 | 2026-10-03 |
| 289c1cb66d0111a8… | 5af2f63ee18d51bde5a02af814cff413 | NFC Relay (provisional) | 2 | 2026-10-02 |
| eaaaf4000ff494c2… | ec03a883ae2a749fda00b6c70135d0c7 | Black Hawk | 2 | 2026-09-20 |
| e296be45721e501c… | 5c8d5480109014ca4a261e6af1fa020a | Telegram Dropper (provisional) | 2 | – |
| e1d2ad8dfaa518c2… | 4d95645ad4ed08152f5a6f4157b572f3 | Magic Dropper (provisional) | 1 | 2026-10-03 |
| 5c11ba6f62e51165… | 2a6ee2fc315ee0cbe20acf683a68c06f | Sentry-Exfil Stealer (provisional) | 2 | 2026-09-29 |
| 65fc2a875abb9546… | 12f16859cff283704c6ae81b7d84c766 | Flutter Banking Overlay (provisional) | 1 | 2026-10-06 |
| 8bd23d6635f112da… | 18412f55381deaab7ea66d2747a0c0f4 | Script-Bot Dropper (provisional) | 2 | 2026-10-01 |
| 3dbbc7a01101a8e1… | 55602b6c9a7a455408553994e143b2b2 | SMS Forwarder (provisional) | 2 | 2026-09-20 |
| b920ac40a21947d7… | ea36f81ce54d3e1ac2d11f17fd29dbe4 | SMS Forwarder (provisional) | 1 | 2026-09-27 |
| cfc758a9d012c3e4… | 942e0cf878a88186180cb7d48886e4fd | RatHat | 1 | 2026-10-05 |
| c51ff0587c160d20… | b8e3840e07d18e10edd957d20f634805 | Flutter SMS Stealer (provisional) | 1 | 2026-10-01 |
| b49d3191d491e4b1… | d5674978d66134fee231e90df989ffb3 | Black Hawk | 1 | 2026-09-30 |
| 5a30d9fdfe55eb6e… | 4af49b10dbd7baf3f0f4f64a21f39e37 | Flutter SMS Stealer (provisional) | 1 | 2026-10-03 |
| 08ddce94ca93c1c5… | 5137bf592e54a2f6217392a7699c80d5 | RatHat | 1 | 2026-10-01 |
| 05d48e10de68749d… | 4635a0eacda8593ddebc482c87e62110 | WebSocket RAT (provisional) | 3 | 2026-10-06 |
| a98a224b644d3d88… | 6b69a9bf30d76c135db369956774f2cb | Hermit | 1 | 2018-10-29 |
| fe1fb1eaf852085c… | 6e68edd3ef11a3e5d124626d9da9ad81 | KoSpy | 1 | 2025-02-07 |
| f3e004f888becd03… | de87afde4fa6a244f7165e8e2bf4fa29 | KoSpy | 1 | 2025-02-07 |
| f1b33341b0dc25c8… | 565cad577bdb486e0437b35a3b44af2a | KoSpy | 1 | 2025-02-07 |
| da56b0416b205b36… | dd5a670fecdcaa870ae94fa61dbb7cfa | KoSpy | 1 | 2025-02-07 |
| d937ea795b97a6f6… | fce7ebd58c1d4e9975bd10726ee61bf2 | KoSpy | 1 | 2025-02-07 |
| cbcfcb8089eded5a… | 33fb856978a510daa4f523a646c3a188 | KoSpy | 1 | 2025-02-07 |
| bf0150e1e31f6559… | e61bde8b1d6e409aafd296dedf29f9f5 | KoSpy | 1 | 2025-02-07 |
| b0c0f38551a119d0… | 03b22e4cc944de00feda7120ebea572c | KoSpy | 1 | 2025-02-07 |
| aa2bbdde656674f2… | 30aed8101df41fa139e7c88bf810ba64 | KoSpy | 1 | 2025-02-07 |
| 90ec29bafccc540d… | d271cde524f16d5a4d9bfcdcbaca92ee | KoSpy | 1 | 2025-02-07 |