General
- Target 6a41be0be47457c93f9639921e5199c3cb89ba117dcc6f05e86441414384422e.apk
- Size 6.5MB
- Sample260729-hmfltsar5t
- SHA256 6a41be0be47457c93f9639921e5199c3cb89ba117dcc6f05e86441414384422e
Score
10/10
Malware Config
Targets
-
- Target 6a41be0be47457c93f9639921e5199c3cb89ba117dcc6f05e86441414384422e.apk
- Size 6.5MB
- SHA256 6a41be0be47457c93f9639921e5199c3cb89ba117dcc6f05e86441414384422e
Score10/10-
Family: Herodotus
Herodotus is an Android banking trojan that evades detection by mimicking human behavior, first seen in October 2025.
-
Herodotus payload
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-
Requests enabling of the accessibility settings.