ANDROIDOS_ADCLICK.A
June 06, 2017
PLATFORM:
Android
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
INFORMATION EXPOSURE:

Threat Type: Adware
Destructiveness: No
Encrypted: No
In the wild: Yes
TECHNICAL DETAILS
File Size:
43274012 bytes
File Compression:
ZIP
Memory Resident:
Yes
Initial Samples Received Date:
18 Apr 2017
NOTES:
This adware can make clicks automatically in the background. Once the adware running on the device, it can do any of the following.
- Establish a connection with the C&C server silently.
C&C server: http://www.{BLOCKED}a21.net/new/apps_kakao_judis_5.php?pkg=com..&sdk=
- Get the malicious auto-clicking JavaScript code from C&C server.
- Locate the banners of Google ads infrastructure.
- Make auto-clicking on banners of Google ads
It gathers the following device information:
- IMEI
- Phone Number
Based on analysis above, it has the following capabilities:
- Auto-clicking advertisements.
- Gathering the device information