Samples
One page per analysed APK — hashes, signer certificate and every C2 extracted from it. Binary samples are never published; only these indicators and metadata.
| SHA-256 | MD5 | Families | C2s | First seen |
|---|---|---|---|---|
| 041b9066f42b78c5… | cf5e62ebbf4be2417b9d3849c3c3f9c9 | APT-C-27 | 1 | 2018-07-18 |
| 0713ff7bb8d9dc5b… | 3c67dd614849317b200107f6617c0adc | APT-C-27 | 1 | 2018-07-22 |
| 0a399c83c1dcefe7… | 6947ff1be3734aadceb5f294d1f187a5 | SyrianMT | 1 | 2020-04-12 |
| 0c5b37b48769df1f… | 681ff974adb54692e61551f9640f76bf | APT36 | 1 | 2020-05-02 |
| 0d30d0314cbac92e… | 3279b467dcc9d779d86c3776c88b1748 | ProSpy | 1 | 2026-03-15 |
| 0eef59d4a6e61c38… | 08eb605476792d1226dd15381d81619f | SK TelecomFraud | 1 | 2015-10-28 |
| 1107200102a22114… | 16be804c03588a54930cb1a1902319b2 | APT41 | 2 | 2024-03-08 |
| 124d3a55770da5f7… | 9aec04c37472c3b54ee354fae481b59e | MMRat | 1 | 2023-09-03 |
| 162ce2ad26116269… | — | DCHSpy | 10 | 2025-07-02 |
| 18f02dd87210fc75… | a4b68eb8b4ab1c21e52554cdc7770c99 | AndroRat | 1 | 2019-10-08 |
| 20c159ee7b905c75… | f719e52b31a1395d6711a4f7d410736e | SK TelecomFraud | 1 | 2015-12-21 |
| 2152b98a832ce3e4… | 187e32c89303dafcb6562d71d252ba8e | CECbot | 1 | 2026-09-24 |
| 220fcfa47a11e7e3… | 07532dea34c87ea2c91d2e035ed5dc87 | Bitter | 1 | 2022-07-06 |
| 28f8b2b568529c21… | 119e42d5ae18ba9d8158cc75861639b7 | AndroRat | 1 | 2019-10-04 |
| 29f84d3095602403… | f507efa84ac63a356491455681a74272 | SK TelecomFraud | 1 | 2016-01-03 |
| 2a4cf22220b95ad1… | ae866cd8ff9ad51b09bc2799fbdef3d2 | BladeHawk | 1 | 2021-09-10 |
| 2d0a56a347779ffd… | 5de80e4b174f17776b07193a2280b252 | APT-C-27 | 1 | 2018-07-16 |
| 347f1b018f643de0… | 36f79f6999010c2da60e1c98427f1968 | AndroRat | 1 | 2023-05-10 |
| 391d22d89fc8eddf… | fe7ab00c4d7f0c2b343e61473ff24cee | APT41 | 2 | 2024-03-08 |
| 3c46cc0d0b8950ca… | aec6d4933e067ade653bad7f13ff8104 | ProSpy | 1 | 2026-02-23 |
| 43e3a0b0d5e2f172… | d9a39c41e9f599766b5527986e807840 | Bitter, ProSpy | 2 | 2022-03-22 |
| 48d1fd4ed521c947… | — | DCHSpy | 9 | 2025-07-21 |
| 48e3f32e770f01b4… | 66342e3d0e2a066aa66c00e8103b9027 | APT41 | 2 | 2024-03-08 |
| 4e5379745f10a184… | 21439e2066c558510f6219c8ac7255d5 | APT41 | 2 | 2024-03-08 |
| 4eb770e004f6df8a… | b72d1197cd03cdb406d133956bbb0cec | ChinaSMSStealer | 1 | 2019-10-04 |
| 51847406cf995ff0… | 6b2d5488372c330db4ff2a36fd6cad8d | MMRat | 1 | 2023-07-26 |
| 52d1cb75b7826e57… | 308ac61ecb808fae3698d8c1285d419e | APT36 | 1 | 2020-01-03 |
| 65c655663b9bd756… | ac96ffa987aa725ebcf8f93039a7d66d | Xenomorph | 4 | 2022-07-28 |
| 68abbf83f53fdcbd… | d73bafe83b8f0b56f26cd2d1f06fd993 | MMRat | 1 | 2023-06-19 |
| 6c59428863ddba27… | e0c5d39492b2ea679a7e331ecd1a469f | Bitter | 1 | 2022-10-05 |
| 6d5feeb61c6deec0… | 49d6fba9b95d4f74962ffa67e4d00bbd | ProSpy | 1 | 2026-02-19 |
| 6d7cc07bae72aeeb… | 00314e01f12e65f355b004b9ffb6c2db | SK TelecomFraud | 1 | 2015-05-05 |
| 78e669d3b20e5f1f… | 48dae89653161e7c3e4829d5451702dc | SyrianMT | 1 | 2020-04-23 |
| 7ac44c1854977a2e… | e7c28bf5c5df48f5c94ed24695e00c47 | SandroRat | 1 | 2019-09-21 |
| 8007346a57fbe296… | afc5c7f3a74303932ebe1dbdbad1d4bf | AhMyth | 1 | 2019-10-05 |
| 8f997e606a133108… | 6b5ad8ac124e65f1c7037733001afde7 | SyrianMT | 1 | 2020-04-13 |
| 8fad8429b4e0ed5c… | 277112ef4d74bc98b13eac2da6bcfd34 | AhMyth | 1 | 2019-10-04 |
| 9a864f104e7fabb4… | 9d3ac92937c8986ce55b308c60ae8f9a | ProSpy | 1 | 2025-10-02 |
| a4913f52bd90add7… | 48ab25bc1b06eaf2cbbdfed3c3127cea | DCHSpy | 10 | 2025-07-21 |
| aa656a243d200832… | 3682be86f3ae1d874e40fb4e282527a9 | DCHSpy | 10 | 2025-06-19 |
| ab345951a3e673ae… | 42efd88844b49e05ec19dd831354093a | Xenomorph | 1 | 2022-08-09 |
| ab99a33e7528b6b9… | babee6e50eaafa0c316f8450f86e643a | AhMyth | 1 | 2019-10-06 |
| ac2f69c3b9400ee2… | 4308d7fc624a761e67aa3cd1a45490d3 | MMRat | 1 | 2023-08-07 |
| b0e5bde5c6c6904f… | a0afccd2cac6d3fc87d92f022f0451e5 | SandroRat, SyrianMT | 1 | 2017-12-31 |
| b15b5a1a120302f3… | f0d240bac174e38c831afdd80e50a992 | APT-C-27 | 1 | 2018-07-16 |
| b3c1d5fc273d1955… | e750c27b9a4fcaa6a048d86c4d011c92 | CECbot | 1 | 2026-03-23 |
| b66847d571e471ac… | 9c1bed665f214e8fc77fc388baedc2a1 | APT41 | 2 | 2019-09-15 |
| bbe4bd357ed2ec8f… | 009d5271107303ee6d8494cd7fdcc17b | SandroRat | 1 | 2019-01-17 |
| c5ab0adaedf391a3… | 54a7d8d8f6ee586e266f369b0a8a8dee | AndroRat | 1 | 2025-12-29 |
| ca87cc9898af3883… | 2a7576c896bb6f7710e9f41e0a25ce14 | APT-C-23 | 2 | 2019-08-29 |
| ca9fcd32fe770cd5… | 7efa948987c540436397c86e7ec1d783 | ChinaSMSStealer | 1 | 2019-09-28 |
| caf0f58ebe2fa540… | f59cfb0b972fdf65baad7c37681d49ef | APT-C-27 | 1 | 2018-07-16 |
| d06fc998c4aa6a7a… | ec0a5270bac7b8da85f1276c85659213 | MMRat | 1 | 2023-08-07 |
| d15648a84b46f97c… | 8a95262bee8ea1ce6454fb95c3d00df1 | AhMyth | 1 | 2019-10-04 |
| d3033e7305b2c547… | d67384b838fd39c7a3552da04e03df4e | BladeHawk | 1 | 2021-10-07 |
| d4e16801c46f51f7… | ef1a3beccecf0a57efc491c3943e713c | AhMyth | 1 | 2022-09-23 |
| d62705186c488bb2… | 9452673652cee123f62a87f12e2894df | CapraRat | 2 | 2019-04-27 |
| e14f99608a8d16cd… | 21ad6eed6cc52a723f51fc425035067b | APT-C-23 | 2 | 2018-06-10 |
| fe00cfa0f75e8552… | d08990aef46f64276f5409f4d51bf9b9 | ChinaSMSStealer | 1 | 2019-09-25 |