ANDROIDOS_KSAPP.A
January 21, 2013
THREAT SUBTYPE:
Information Stealer, Malicious Downloader, Spying Tool
PLATFORM:
Android OS
FIRST DETECTION COUNT/S:
1
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:

Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
TECHNICAL DETAILS
Tamaño del archivo 3543345 bytes
Residente en memoria Yes
Fecha de recepción de las muestras iniciales 08 Nov 2012
NOTES:
This is the Trend Micro detection for 3rd-party apps infected with malicious code known as KSAPP.
Once executed, the app may download possibly malicious files from the following URLs:
- http://{BLOCKED}y.{BLOCKED}i.com:5222/kspp/do?imei=xxxx&wid=yyyy&type=&step=0
- http://{BLOCKED}n.{BLOCKED}1302.com:5222/kspp/do?imei=xxxx&wid=yyyy&type=&step=0
- http://{BLOCKED}1.com:5101/ks/do?imei=xxxx&wid=yyyy&type=&step=0
- Download other malicious APK
- Prompt users to install the downloaded APK
- Popup website to users
- Invoke more extended API through remote control script.
SOLUTION
Motor de exploración mínimo 9.300
Primer archivo de patrones de VSAPI 1.359.00
Primera fecha de publicación de patrones de VSAPI 30 Jan 2013
Trend Micro Mobile Security Solution
Trend Micro Mobile Security Personal Edition protects Android smartphones and tablets from malicious and Trojanized applications. The App Scanner is free and detects malicious and Trojanized apps as they are downloaded, while SmartSurfing blocks malicious websites using your device's Android browser.
Download and install the Trend Micro Mobile Security App via Google Play.
Did this description help? Tell us how we did.