Pulse Detail — Threat Intelligence

PULSE NAME

KYCShadow: An Android Banking Malware Exploiting Fake KYC Workflows for Credential and OTP Theft

WHITE Tr1sa111 2026-04-30 Modified: 2026-04-30

IOCs

LOW VOLUME

MITRE ATT&CK & Malware Families

MALWARE FAMILIES

KYCShadow

Indicators of Compromise (2 / 9 total)

All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-SHA256	1d261b45e73b5b712becb12ed182ec89d3dd0d73143a2dd8ff5512da489a50eb	—	2026-04-30
FileHash-SHA256	34479b18597f1a0deb5d55b8450bc21af1d1f638c4ceca1ee19e6f5ac89d6be2	—	2026-04-30

References (1)