ANDROIDOS_EASYROOT.HRX

December 23, 2015
 Analysis by: Ecular Xu
 THREAT SUBTYPE:

Rooting Tool

 PLATFORM:

Android OS

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:
 INFORMATION EXPOSURE:

  • Threat Type: Rootkit

  • Destructiveness: No

  • Encrypted: No

  • In the wild: Yes

  OVERVIEW

This is the Trend Micro detection for Android applications that can be used to root Android devices.

  TECHNICAL DETAILS

File Size:

7,692,342 bytes

File Compression:

ZIP

Memory Resident:

Yes

Initial Samples Received Date:

27 Dec 2014

Mobile Malware Routine

This is the Trend Micro detection for Android applications that can be used to root Android devices. Rooting enables the user to have elevated rights and permissions to access the Android subsystem.

NOTES:

This malware can be used to help the user getting the root privilege.

After being launched, it checks the root status of device first.

If the device is not rooted, a notification of current root status and a button named “一键获取Root权限”(get the root privilege) appears on the screen.

After the user clicking the button, it performs the rooting program and tries to get the root privilege.

If the device is rooted successful, there is a notification on the screen.

After that, the user can do certain actions which are only allowed for root user, such as remove pre-installed apps and configure the auto-start app list among others.

Note, however that the root privilege can also be used by some other malware, and can endanger the whole system.

  SOLUTION

Minimum Scan Engine:

9.800

Trend Micro Mobile Security Solution

Trend Micro Mobile Security Personal Edition protects Android and iOS smartphones and tablets from malicious and Trojanized applications. It blocks access to malicious websites, increase device performance, and protects your mobile data. You may download the Trend Micro Mobile Security apps from the following sites:


Did this description help? Tell us how we did.