AndroidMalware_2020 - Popular Android malware seen in 2020

项目说明

AndroidMalware_2020

Popular Android threats in 2020

January

Silent Adware

75fd1658cd6cb56f9194dbb1aabadd64
80abde70e5f4d4dc7ace31586097e026
1250f1296c0e92112d554960d4f99710

New Anubis samples

d4be1208d35bc8badb0fa97a36a28c8c
d936dad9349ebe2daf8f69427f414fdc

Coybot Brazilian banker

058de750a4a2402104e4bd22179f8432050c98ea88b5bfec2f065f6dc2a950f9
bf20ad4fcc9fb6910e481a199bb7da649bcd29dda3a2c737b83d9

Bread

2273af79cae07c3d0d07eb4d3f30d60c
35027baae5178b5642dd6fa17857ff51
e674fb1705779c2e0599659a8a96befb

C in the wild

5db521d8bafa37bc3b96feebac99121e
8b6642efb498f829870fc108b8f2f29a

Fake AV

8476aa9e1887fadd03a1df0a608d5877
73107da87705c19c7ca8873f04323c6b
fd6ae5a3d73d9f13c2a88934d4af9a90

Shopaholic

0a421b0857cfe4d0066246cb87d8768c
0b54b822683a70b9d4a3af08a2d506b2
0b682e9cae5b8623fc3e62048623dcdb

Stars Wallpaper

42bd23110fbfde71be924a9bdb5a8381

Xiny

171dba383d562bec235156f101879223bf7b32c7
f9f87a2d2f4d91cd450aa9734e09534929170c6c
f9f87a2d2f4d91cd450aa9734e09534929170c6c

February

PremiumRateSMS

cf661506978f088f276a5a5bc4f0ea71101f99941840dd0864b2068ee2eb2271

Joker

d36be817f7dce6712d1e84b6e1a49e7a9210092749c508d7b1121854ebf018d8
5ec214704b63d93181932d389f4ed76bd730bd05e912518a1357a413d6fa96b1

Mobok

a9b6ad7233eed5b592a78e3a37e3143bd185554b4e9166aa2fa5ff0f99b1248c
e750766c16eca9501f07efe044db683dc08551c42d399ae8cc9e585345df8469

Anubis

c38c675a4342052a18e969e839cce797fef842b9da3731ced0a70

AdFraud

a26ce61f3137307ab3456d6312d823bec7a3924d830d8764778803ad48843467
230f66be98f022cc8656e25917c4fd5c08a36903539ce1bd36f4c
381620b5fc7c3a2d73e0135c6b4ebd91e117882f804a4794f3a583b3b0c19bc5

Cerberus

6363beadf56ad162bc58fa8f1c5393223cd94221af0b3b2e9db0d718c3fae085
fe23b30a9296477557f027d4710e81eb1b08d65a1a83b6d81a4ed6128ed6e2a0

March

Banker

ce448fb2d1575f3a74ee59c611f6ec06
d5577c5f181d5496ae2ebd295a705a73
e491d383e9f89ba734e96

CookieStealer

65a92baefd41eb8c1a9df6c266992730
c907d74ace51cec7cb53b0c8720063e1
f84a43b008a25ba2ba1060b33daf14a5

MonitorMirror

ecac763feff38144e2834c43de813216

Adobot

c05fbe8f45ba26416b7ddbc2269603f9

BeanShell

57eb0919e5b8eee24547f74cb2a1562780ecb00c
28612e3c18f179d125f97443ba194e13d6ac635c

E

7F5D9BB281
8A563B6AF3CF74C8CBB88B99E104D949
7107AC3BCCD8DB274B21F0E494E3ECCC
F73F66B15791A42DAC86D0CED46D660F

Tekya

f2aa425d0b30e4896977e2f31a1eacb3

Trickbot

05c0c1bb23cc06474c3fd3ba51e4e4c6
5c749c9fce8c41bf6bcc9bd8a691621b

Xerxes

4b4b8078717890dee57a58a3307a9b07

Co

2C522F3527DEF8AC97958CD2C89A7C29
872EBBA0DFE0A28DA3E91B0EE4D6DF32
3382348F9618058DDE3AACFFCB34982E

Coce

31c1ae3e642515ca64656620f075e3ffd3258e9f
a84626484f812c1baf4520d19be6dc78718b9cf1
bc466506e3f184c45054c93445275d9b8ef044f8
d738fd0844dcfa47ebdf53d835ab130f2132a6c2
ca04b5d781ab64ae8c8eb2837fe4ee6b31ee9c4d

Co

b7070a1fa932fe1cc8198e89e3a799f3

Co

a2fba41933c2043ccc99f1e4dca83cd0

Co

2c522f3527def8ac97958cd2c89a7c29

Co

766e5ecf6b1d86abf401ad9223de857d

Co

343453ab84e5d94e21658fd2356f30a7

Co

ec2b4ad861c0dbef1404713d9eac48a4

Co

fb914d05797fdf5e880fff0343384cdb

Co

d1d417235616e4a05096319bb4875f57

Co

599db33d534d1e98ea63dd2ce30100a7

Co

4f2b73a6f2a7816e54ff0b15b9dd555f

Co

bd5c4f984047374a48266

Co

e2838367f4a83d8863a1bc3c7a8a7865

Co

ec2b4ad861c0dbef1404713d9eac48a4

Co

5815a29e5fc062840f4bc9620a8b618a

April

AprCerberus

0f3c4594f761570c38484ac37c0ec52f

AprXhelper

57cb18969dfccfd3e22e33ed5c8c66ce
59acb21b05a16c08ade1ec50571ba5d4
b5ccbfd13078a341ee3d5f6e35a54b0a

AprXloader

a196666d4aaaa6ae0ba9e498ffd8f65c

BankerSpanish

57f75ad95573f857fcfe13aaa3847511
92624244ee4834560efedb66224b16ab
f7793d6e66757aaf6b8af5b0abd4cf41

BankerTrojan

b7b6ae08971e111291e2dffe48667c42
e0eb732a66de240f299611985d824497

BotnetRogue

23d81292afe2a554c544f9dde5d92480

CometBot

0ddee377b166a4a00fe1fe24ccdccc80
ac1c1b3bc87957ef6ea1d4c642375ccb

CoyBot

9d92ae9e4ca2544f334b1bbac52c426f

FakeZoom

e640eb702de37deb80c0a763eb67dea6

LockerArabic

6904c283c8e4a7a200e6d5c1dc349b0c

MetasploitZoom

30a1a22dcf7fa0b62809f510a43829b1

MultiTargets

a13b3a0e161d0bf9fa1d80f56352a0ae

SMSThief

f6eedae205d6137aef4faccc76755c74

SpyNote

F640E707327AC8A060D96BA9DD545E41

TeleRat

ae31113c7e3c8915e79c1978bc30cbcd

XploitSpy

a6be1cb53db45e0e013e2fa3bf5de4dd

Co

66c19dda018820cc0987e

Co

66c19dda018820cc0987e

Co

ef80429d554a6f7a0b1ad97a2ca5df4d

Co

849796248bfe2560039f6986c83f43d6

Co

6b5ad8ac124e65f1c7037733001afde7
48dae89653161e7c3e4829d5451702dc
6947ff1be3734aadceb5f294d1f187a5
36022a7280f87689ed1844c312463629

Co

f48cb8a945f94cdf069cf

Co

3288a6cb81bc3e928e438fa280fec847

May

XploitSpy

117e1331306fec02b1ffe6b68d148cc9

aggresiveAds

1eeda6306a2b12f78902a1bc0b7a7961
3aba867b8b91c17531e58a9054657e10

blackLoan

5bc922612ef826f95d5cf46697292b82
a13b3a0e161d0bf9fa1d80f56352a0ae
ef3619529b507c53bd701a9207b40550

cerberus

2e73cd5a5324c97285fd48800c51bed1

fakeAarogyaSetu

bbe84ba545d652d9e06635a6e89d48b5
bfa19e91bb4b25d34ac10ad7b9fc5df2
df5698d5aef850b217cbbfa9789bd347
e5e44ac40123023eebd5caf9662f05d1

fake

6e5572c5be9fc6d33edeb5c53fb41aed
a5d2905375c08bd5c3cf68ad6647b7d1

Flexnet

22d0e9abc0cd8c6d0c9f7e3017cbb8c6

insidiousMalware

ea069a5c96dc1db0715923eb68192fd325f3d3ce
f17aebc741957aa21cfe7c7d7baec0900e863f61

mandrake

097ba092ecb90bfe3de50ee0d296e079
1437bd4e45ea57cb68599554a2c9ad6d

mysteryBot

51a9cd06be4b8f4217b0e64d3ac6b1d6

projectSpy

37c94b09b98f3caf5a3fe3d391802dd3

wolfRat

9845316fa32b13d04651a704201f705a

Co

8ae20794d2fc7659a003d5debd6970d8

Co

8ae20794d2fc7659a003d5debd6970d8

Co

1dfc2e6f96727ab1bb37bc5ac303dc62
6e3d57271a1c0e8e79c88d15f3897bab
8fc2e3254eabdfceee843c6bc3367f6c
698aa564ba543d8b0bb2b

Co

2d84a8bbd77aee8432742dc28eef2da3
51a4472a506795e386906541c3483080
4271184bc33ee9672fe4713f14e43bd6
a81c5c3da9d41069af9ab00780dbe09e

Co

b11e45e1f7f4dca9327a10a572c18623

June

Ransomware Crydroid

381134ea0f0be535b9d2ce8a94093576

BitterApt

9edf73b04609e7c3dada1f1807c11a33
d7c21a239999e055ef9a08a0e6207552
ea3b4cde5ef86acfe2971345a2d57cc0

BarcodeAds

4fa7ded17ae2439a6460b61bea8b69ef
6bc84ab1e5c94f71895f6
63a7581b20136ae0ebde728df51baf86

ActionSpy

5f529573d5d4d067700e981f09c48069
331578141f84b11077e3222b1d7d7785
ef0ec7f3ba199bd7933942ec1e28d221

FakeContact

66b3529f7589cac62960bfacc9dbc5f4
476b68a650223780ec73f804e639b7ce
c448ae9ad80f088e9296f08a114605e2

HiddenAds

6742e9a9e7c84520f4b46ac80592ef0c

Mal

0bca3976cadc06295d26e73ca6940b51

RoamingMantis EU

5b26501b0c8e282bb8bd27a339998cc7
27ccdbbd88fc1ec2e5f7ac968dcc19b8
74e34a83c3496e64cbdeebde86e987aa

July

AdwarePig

520b50eee2f9dc522a87398f3bd5be94
fc0824678f582b0bdf65856e90cf0a01

BlackRock

36cd2ea94bcf9f9a9959dc4c1c489933
aef6feeb7fd1af99b5539e8d5a2b712a
d576f944e1ad344f29902fe75bf25eaf

Blur

5a62bbaa7b08c3ff08eb748ff374749a

Cerberus

8a3b7815fd4872a217a1c2f57bedc0cb
45f5fa9427331e6a9d6ed2d8cdbaada5

Joker

2a7d3d0734f31eb11397cef2b49225c7
3c5abec5b685809a670dee9b729a9096
c8e8080c1365da6dc340edc17d86f674

Mobok

fbfa4eaf010acc12adc8ec8a62862d44

PreInstalled

66C7451E7C87AD5145596012C6E9F9A0

WelcomeChat

2b6f2c53e206544a707241c9e157f9dd
8698967ce83b4ac06a509a9fbfef5281
989da9cf729db914c03cfadb25418e0a

August

Terracotta

024c43ba8076100d1ac76f56b8a338f8
de3ea09307f58f4f4d02b7e34afb828b

banking trojan

d9f7b42cace711da6fecd6e015e1492e

donot APT

abdef021da3fcb8082c82743c2e730ae
51b9d09d57365fa4e09251b0072eff1d

September

thiefBot

ebbe5b633811885c87018

spyware for Belarusian protesters

2dcf0b16bc7cd525a64ad1d7cc2f4500

tikTok spyware

9fed52ee7312e217bd10d6a156c8b988

rampantKitten

4ae3654b7ed172b0273e7c7448b0c23c

alien Spyware

db026fe524d1ce98de04374ff374fdf0

cerberus

0f4733a3a188ca0ddf3f730b17b23e20
53b5f39fb9e885767cf05270f6ed4286
477b37aa15058e1ac8167de3260a2400

finspy

a55aa213cd85441aa4e16

joker

2086f0d40e611c25357e8906ebb10cd1
b8dea8e30c9f8dc5d81a5c205ef6547b
5a5756e394d751fae29fada67d498db3

aptGroup

d35ff5620e18bf5aba1d2396828436ca

tiktok

f24d513024256ad483ccdfd98eb1f636

banking

94859f82f5c28ad0083a8b4ebc8765fb

October

aggressi

dcb5b8d8270b4a51a7702fa716ff9bc2

bahamut

4f2cce408fc858fb7464ac0c903fdc56
6ef7ea19a000f2570c30ae3814b8482f
9368dd657e410f8a9ba2b71c95cc0777

gra

c7b8e65e5d04d5ffbc43ed7639a42a5f
df6e86d804af7084c569aa809b2e2134

moreAdware

33c6fd6c478fa2d62bcf79889546f062
616bdd854caf21374f158a1e82fdca18

msoftRansomware

a39439dbe22a5642daf0d90f8f91c330

rainbowMix

2c06380e078b7dd4ba7ca322ce2f968d

No

donotFirestarter

4139bc61833f61365f49dc165aab0ae5
705313f75d9048531c21b3d7d123007c

ghimob

2b2752bfe7b22db70eb0e8d9ca64b415
321432b9429ddf4edcf9040cf7acd0d8

jokerNew

e9261a376639ff3f178a298d031f5e94

minecraftMod

3a334ef5167e69ee3bc8471531ea0970
9748b06507a017e64dfc2a9055ce1a3d
a7267059bf34b6df33c1d0e57ae7bda0

December

amongUs

adcc3a2f7cef4a20d5985f7d6c2290a0

sextortionistSpyware

ab6571f8c6ca1ba58ed84319afdc61ab
196ad11cb5c93b206180d

joker

1416f440d371dc47d03adae29d3f5e64

adware

a0e91c365a7e0bf345996c1391032646
075305b7d367935ac090742230eb0d20

cyberpunk

cbd316de527a02ac17947

bankerSpyware

a2a1622425ca1bb2e75196ed85e5d82c

anubis

a2a1622425ca1bb2e75196ed85e5d82c

password: infected

li, use it at your own risk

项目信息

开发语言：未知

Star 数：335

技术要点

该项目属于病毒分析方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Popular Android malware seen in 2020展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。