TF-MAL-apk.asacub
📛 Threat Title
Malware family: Asacub
Description
ThreatFox malware family `apk.asacub`. Printable name: Asacub.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.asacub
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.asacub
IOC database
- Type
- domain
- Value
apk.asacub- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.asacub
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.asacub
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:apt.etda.or.th
Tool: Asacub ... Last change to this tool card: 30 December 2022 Download this tool card in JSON format
-
web:attack.mitre.org
Asacub is a banking trojan that attempts to steal money from victims' bank accounts. It attempts to do this by initiating a wire transfer via SMS message from compromised devices.
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the Asacub malware family including references, samples and yara signatures.
-
web:sec.cloudapps.cisco.com
In May 2025, Cisco was engaged by multiple government agencies that provide incident response services to government organizations to support the investigation of attacks that were targeting certain Cisco Adaptive Security Appliance (ASA) 5500-X Series devices that were running Cisco Secure Firewall ASA Software with VPN web services enabled to ...
-
web:threats.kaspersky.com
Description This family consists of malware that runs on the Android operating system. The malware is used to steal user payment information. This malware is distributed by means of phishing SMS messages that prompt the user to download photos. Top 10 countries with most attacked users (% of total attacks) 1 Russian Federation 98.57%
-
web:www.cisa.gov
WASHINGTON - The Cybersecurity and Infrastructure Security Agency (CISA) published a malware analysis report today on FIRESTARTER, malware that allows remote access and control by malicious threat actors targeting Cisco Firepower and Secure Firewall products running Adaptive Security Appliance (ASA) or Firepower Threat Defense (FTD) software.
-
web:www.microsoft.com
Understand how this virus or malware spreads and how its payloads affects your computer. Protect against this threat, identify symptoms, and clean up or remove infections.
-
web:www.ncsc.gov.uk
This guidance helps private and public sector organisations deal with the effects of malware (which includes ransomware). It provides actions to help organisations prevent a malware infection, and also steps to take if you're already infected. Following this guidance will reduce: the likelihood of becoming infected the spread of malware throughout your organisation the impact of the infection
-
web:www.researchgate.net
Prevention and detection of eBPF-based malware is also explored, with the goal of providing organizations or legitimate users of eBPF techniques to harden their systems against eBPF-based malware ...
-
web:www.securityweek.com
The Asacub variant used in this campaign is said to be the last modification known to date, and focused on grabbing banking information from infected devices. However, the malware has seen at least three major modifications in the past half a year, as cybercriminals changed it from spyware to a banking Trojan, Kaspersky says.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.