AndroidMalware_2020

Popular Android threats in 2020

January

• Silent Adware
  75fd1658cd6cb56f9194dbb1aabadd64
  80abde70e5f4d4dc7ace31586097e026
  1250f1296c0e92112d554960d4f99710

• New Anubis samples
  d4be1208d35bc8badb0fa97a36a28c8c
  d936dad9349ebe2daf8f69427f414fdc

• Coybot Brazilian banker
  058de750a4a2402104e4bd22179f8432050c98ea88b5bfec2f065f6dc2a950f9
  bf20ad4fcc9fb6910e481a199bb7da649bcd29dd91846692875a3a2c737b83d9

• Bread
  2273af79cae07c3d0d07eb4d3f30d60c
  35027baae5178b5642dd6fa17857ff51
  e674fb1705779c2e0599659a8a96befb

• CVE exploitation in the wild
  5db521d8bafa37bc3b96feebac99121e
  8b6642efb498f829870fc108b8f2f29a

• Fake AV
  8476aa9e1887fadd03a1df0a608d5877
  73107da87705c19c7ca8873f04323c6b
  fd6ae5a3d73d9f13c2a88934d4af9a90

• Shopaholic
  0a421b0857cfe4d0066246cb87d8768c
  0b54b822683a70b9d4a3af08a2d506b2
  0b682e9cae5b8623fc3e62048623dcdb

• Stars Wallpaper
  42bd23110fbfde71be924a9bdb5a8381

• Xiny
  171dba383d562bec235156f101879223bf7b32c7
  f9f87a2d2f4d91cd450aa9734e09534929170c6c
  f9f87a2d2f4d91cd450aa9734e09534929170c6c

February

• PremiumRateSMS
  cf661506978f088f276a5a5bc4f0ea71101f99941840dd0864b2068ee2eb2271

• Joker
  d36be817f7dce6712d1e84b6e1a49e7a9210092749c508d7b1121854ebf018d8
  5ec214704b63d93181932d389f4ed76bd730bd05e912518a1357a413d6fa96b1

• Mobok
  a9b6ad7233eed5b592a78e3a37e3143bd185554b4e9166aa2fa5ff0f99b1248c
  e750766c16eca9501f07efe044db683dc08551c42d399ae8cc9e585345df8469

• Anubis
  c38c675a4342052a18e969e839cce797fef842b9d53032882966a3731ced0a70

• AdFraud
  a26ce61f3137307ab3456d6312d823bec7a3924d830d8764778803ad48843467
  230f66be98f30155934379022cc8656e25917c4fd5c08a36903539ce1bd36f4c
  381620b5fc7c3a2d73e0135c6b4ebd91e117882f804a4794f3a583b3b0c19bc5

• Cerberus
  6363beadf56ad162bc58fa8f1c5393223cd94221af0b3b2e9db0d718c3fae085
  fe23b30a9296477557f027d4710e81eb1b08d65a1a83b6d81a4ed6128ed6e2a0

March

• Banker
  ce448fb2d1575f3a74ee59c611f6ec06
  d5577c5f181d5496ae2ebd295a705a73
  e491d383e9f89ba76864491598734e96

• CookieStealer
  65a92baefd41eb8c1a9df6c266992730
  c907d74ace51cec7cb53b0c8720063e1
  f84a43b008a25ba2ba1060b33daf14a5

• MonitorMirror
  ecac763feff38144e2834c43de813216

• Adobot
  c05fbe8f45ba26416b7ddbc2269603f9

• BeanShell
  57eb0919e5b8eee24547f74cb2a1562780ecb00c
  28612e3c18f179d125f97443ba194e13d6ac635c

• EventBot
  7F5D728119951839B46895808107B281
  8A563B6AF3CF74C8CBB88B99E104D949
  7107AC3BCCD8DB274B21F0E494E3ECCC
  F73F66B15791A42DAC86D0CED46D660F

• Tekya
  f2aa425d0b30e4896977e2f31a1eacb3

• Trickbot
  05c0c1bb23cc06474c3fd3ba51e4e4c6
  5c749c9fce8c41bf6bcc9bd8a691621b

• Xerxes
  4b4b8078717890dee57a58a3307a9b07

• Covid_Cerebrus
  2C522F3527DEF8AC97958CD2C89A7C29
  872EBBA0DFE0A28DA3E91B0EE4D6DF32
  3382348F9618058DDE3AACFFCB34982E

• Covid_CommercialSurvaillence
  31c1ae3e642515ca64656620f075e3ffd3258e9f
  a84626484f812c1baf4520d19be6dc78718b9cf1
  bc466506e3f184c45054c93445275d9b8ef044f8
  d738fd0844dcfa47ebdf53d835ab130f2132a6c2
  ca04b5d781ab64ae8c8eb2837fe4ee6b31ee9c4d

• Covid_FakeCoronatracker
  b7070a1fa932fe1cc8198e89e3a799f3

• Covid_SMSWorm
  a2fba41933c2043ccc99f1e4dca83cd0

• Covid_Anubis
  2c522f3527def8ac97958cd2c89a7c29

• Covid_IranSpyware
  766e5ecf6b1d86abf401ad9223de857d

• Covid_Cerberus
  343453ab84e5d94e21658fd2356f30a7

• Covid_Hidad
  ec2b4ad861c0dbef1404713d9eac48a4

• Covid_Metasploit
  fb914d05797fdf5e880fff0343384cdb

• Covid_Ransomware
  d1d417235616e4a05096319bb4875f57

• Covid_RATPropagation
  599db33d534d1e98ea63dd2ce30100a7

• Covid_ProjectSpySpyware
  4f2b73a6f2a7816e54ff0b15b9dd555f

• Covid_Metasploit
  bd5c4f67227287662984047374a48266

• Covid_Joker
  e2838367f4a83d8863a1bc3c7a8a7865

• Covid_HiddenAd
  ec2b4ad861c0dbef1404713d9eac48a4

• Covid_Ahmyth
  5815a29e5fc062840f4bc9620a8b618a

April

• AprCerberus
  0f3c4594f761570c38484ac37c0ec52f

• AprXhelper
  57cb18969dfccfd3e22e33ed5c8c66ce
  59acb21b05a16c08ade1ec50571ba5d4
  b5ccbfd13078a341ee3d5f6e35a54b0a

• AprXloader
  a196666d4aaaa6ae0ba9e498ffd8f65c

• BankerSpanish
  57f75ad95573f857fcfe13aaa3847511
  92624244ee4834560efedb66224b16ab
  f7793d6e66757aaf6b8af5b0abd4cf41

• BankerTrojan
  b7b6ae08971e111291e2dffe48667c42
  e0eb732a66de240f299611985d824497

• BotnetRogue
  23d81292afe2a554c544f9dde5d92480

• CometBot
  0ddee377b166a4a00fe1fe24ccdccc80
  ac1c1b3bc87957ef6ea1d4c642375ccb

• CoyBot
  9d92ae9e4ca2544f334b1bbac52c426f

• FakeZoom
  e640eb702de37deb80c0a763eb67dea6

• LockerArabic
  6904c283c8e4a7a200e6d5c1dc349b0c

• MetasploitZoom
  30a1a22dcf7fa0b62809f510a43829b1

• MultiTargets
  a13b3a0e161d0bf9fa1d80f56352a0ae

• SMSThief
  f6eedae205d6137aef4faccc76755c74

• SpyNote
  F640E707327AC8A060D96BA9DD545E41

• TeleRat
  ae31113c7e3c8915e79c1978bc30cbcd

• XploitSpy
  a6be1cb53db45e0e013e2fa3bf5de4dd

• Covid_AgeDetector
  66c4513025128719dda018820cc0987e

• Covid_Cerberus
  66c4513025128719dda018820cc0987e

• Covid_CovidMap
  ef80429d554a6f7a0b1ad97a2ca5df4d

• Covid_Ginp
  849796248bfe2560039f6986c83f43d6

• Covid_Lures
  6b5ad8ac124e65f1c7037733001afde7
  48dae89653161e7c3e4829d5451702dc
  6947ff1be3734aadceb5f294d1f187a5
  36022a7280f87689ed1844c312463629

• Covid_SpyMax
  f48cb8a945f94c76450065725df069cf

• Covid_SpyPhone
  3288a6cb81bc3e928e438fa280fec847

May

• XploitSpy
  117e1331306fec02b1ffe6b68d148cc9

• aggresiveAds
  1eeda6306a2b12f78902a1bc0b7a7961
  3aba867b8b91c17531e58a9054657e10

• blackLoan
  5bc922612ef826f95d5cf46697292b82
  a13b3a0e161d0bf9fa1d80f56352a0ae
  ef3619529b507c53bd701a9207b40550

• cerberus
  2e73cd5a5324c97285fd48800c51bed1

• fakeAarogyaSetu
  bbe84ba545d652d9e06635a6e89d48b5
  bfa19e91bb4b25d34ac10ad7b9fc5df2
  df5698d5aef850b217cbbfa9789bd347
  e5e44ac40123023eebd5caf9662f05d1

• fakeValorant
  6e5572c5be9fc6d33edeb5c53fb41aed
  a5d2905375c08bd5c3cf68ad6647b7d1

• Flexnet
  22d0e9abc0cd8c6d0c9f7e3017cbb8c6

• insidiousMalware
  ea069a5c96dc1db0715923eb68192fd325f3d3ce
  f17aebc741957aa21cfe7c7d7baec0900e863f61

• mandrake
  097ba092ecb90bfe3de50ee0d296e079
  1437bd4e45ea57cb68599554a2c9ad6d

• mysteryBot
  51a9cd06be4b8f4217b0e64d3ac6b1d6

• projectSpy
  37c94b09b98f3caf5a3fe3d391802dd3

• wolfRat
  9845316fa32b13d04651a704201f705a

• Covid_BankBot
  8ae20794d2fc7659a003d5debd6970d8

• Covid_Nautilus
  8ae20794d2fc7659a003d5debd6970d8

• Covid_Slocker
  1dfc2e6f96727ab1bb37bc5ac303dc62
  6e3d57271a1c0e8e79c88d15f3897bab
  8fc2e3254eabdfceee843c6bc3367f6c
  698aa564ba543d8b0bb247471554672b

• Covid_SmsStealer
  2d84a8bbd77aee8432742dc28eef2da3
  51a4472a506795e386906541c3483080
  4271184bc33ee9672fe4713f14e43bd6
  a81c5c3da9d41069af9ab00780dbe09e

• Covid_FakeCoronaTest
  b11e45e1f7f4dca9327a10a572c18623

June

• Ransomware Crydroid
  381134ea0f0be535b9d2ce8a94093576

• BitterApt
  9edf73b04609e7c3dada1f1807c11a33
  d7c21a239999e055ef9a08a0e6207552
  ea3b4cde5ef86acfe2971345a2d57cc0

• BarcodeAds
  4fa7ded17ae2439a6460b61bea8b69ef
  6bc84ab1e802203215665c94f71895f6
  63a7581b20136ae0ebde728df51baf86

• ActionSpy
  5f529573d5d4d067700e981f09c48069
  331578141f84b11077e3222b1d7d7785
  ef0ec7f3ba199bd7933942ec1e28d221

• FakeContact
  66b3529f7589cac62960bfacc9dbc5f4
  476b68a650223780ec73f804e639b7ce
  c448ae9ad80f088e9296f08a114605e2

• HiddenAds
  6742e9a9e7c84520f4b46ac80592ef0c

• Malvertising
  0bca3976cadc06295d26e73ca6940b51

• RoamingMantis EU
  5b26501b0c8e282bb8bd27a339998cc7
  27ccdbbd88fc1ec2e5f7ac968dcc19b8
  74e34a83c3496e64cbdeebde86e987aa

July

• AdwarePig
  520b50eee2f9dc522a87398f3bd5be94
  fc0824678f582b0bdf65856e90cf0a01

• BlackRock
  36cd2ea94bcf9f9a9959dc4c1c489933
  aef6feeb7fd1af99b5539e8d5a2b712a
  d576f944e1ad344f29902fe75bf25eaf

• Blur
  5a62bbaa7b08c3ff08eb748ff374749a

• Cerberus
  8a3b7815fd4872a217a1c2f57bedc0cb
  45f5fa9427331e6a9d6ed2d8cdbaada5

• JokerVariant
  2a7d3d0734f31eb11397cef2b49225c7
  3c5abec5b685809a670dee9b729a9096
  c8e8080c1365da6dc340edc17d86f674

• Mobok
  fbfa4eaf010acc12adc8ec8a62862d44

• PreInstalled
  66C7451E7C87AD5145596012C6E9F9A0

• WelcomeChat
  2b6f2c53e206544a707241c9e157f9dd
  8698967ce83b4ac06a509a9fbfef5281
  989da9cf729db914c03cfadb25418e0a

August

• Terracotta
  024c43ba8076100d1ac76f56b8a338f8
  de3ea09307f58f4f4d02b7e34afb828b

• banking trojan
  d9f7b42cace711da6fecd6e015e1492e

• donot APT
  abdef021da3fcb8082c82743c2e730ae
  51b9d09d57365fa4e09251b0072eff1d

September

• thiefBot
  e88867956017bbe5b633811885c87018

• spyware for Belarusian protesters
  2dcf0b16bc7cd525a64ad1d7cc2f4500

• tikTok spyware
  9fed52ee7312e217bd10d6a156c8b988

• rampantKitten
  4ae3654b7ed172b0273e7c7448b0c23c

• alien Spyware
  db026fe524d1ce98de04374ff374fdf0

• cerberus
  0f4733a3a188ca0ddf3f730b17b23e20
  53b5f39fb9e885767cf05270f6ed4286
  477b37aa15058e1ac8167de3260a2400

• finspy
  a55aa68518586381213cd85441aa4e16

• joker
  2086f0d40e611c25357e8906ebb10cd1
  b8dea8e30c9f8dc5d81a5c205ef6547b
  5a5756e394d751fae29fada67d498db3

• aptGroup
  d35ff5620e18bf5aba1d2396828436ca

• tiktok
  f24d513024256ad483ccdfd98eb1f636

• banking
  94859f82f5c28ad0083a8b4ebc8765fb

October

• aggressiveAdware
  dcb5b8d8270b4a51a7702fa716ff9bc2

• bahamut
  4f2cce408fc858fb7464ac0c903fdc56
  6ef7ea19a000f2570c30ae3814b8482f
  9368dd657e410f8a9ba2b71c95cc0777

• gravityRat
  c7b8e65e5d04d5ffbc43ed7639a42a5f
  df6e86d804af7084c569aa809b2e2134

• moreAdware
  33c6fd6c478fa2d62bcf79889546f062
  616bdd854caf21374f158a1e82fdca18

• msoftRansomware
  a39439dbe22a5642daf0d90f8f91c330

• rainbowMix
  2c06380e078b7dd4ba7ca322ce2f968d

November

• donotFirestarter
  4139bc61833f61365f49dc165aab0ae5
  705313f75d9048531c21b3d7d123007c

• ghimob
  2b2752bfe7b22db70eb0e8d9ca64b415
  321432b9429ddf4edcf9040cf7acd0d8

• jokerNew e9261a376639ff3f178a298d031f5e94

• minecraftMod 3a334ef5167e69ee3bc8471531ea0970
  9748b06507a017e64dfc2a9055ce1a3d
  a7267059bf34b6df33c1d0e57ae7bda0

December

• amongUs
  adcc3a2f7cef4a20d5985f7d6c2290a0

• sextortionistSpyware
  ab6571f8c6ca1ba58ed84319afdc61ab
  196ad9386487043611cb5c93b206180d

• joker
  1416f440d371dc47d03adae29d3f5e64

• adware
  a0e91c365a7e0bf345996c1391032646
  075305b7d367935ac090742230eb0d20

• cyberpunk
  cbd92757051490316de527a02ac17947

• bankerSpyware
  a2a1622425ca1bb2e75196ed85e5d82c

• anubis
  a2a1622425ca1bb2e75196ed85e5d82c

password: infected

live malware, use it at your own risk