ALIASES:

Andr/Adop-A (Sophos)

 PLATFORM:

Android OS

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

Infection Channel: Via app stores

This Trojan appeared on the Google Play app market. Once this Trojan is installed on the affected device and the application is used, it creates a shortcut that looks like it is the game, Legend of Zelda. It also adds shortcuts to websites on the affected device's home screen and generates ads.

To get a one-glance comprehensive view of the behavior of this Trojan, refer to the Threat Diagram shown below.

It is capable of displaying advertisements from certain sites.

This app uses an open source N64 emulator.

This Trojan may be downloaded from app stores/third party app stores.

  TECHNICAL DETAILS

File Size: 31,598,232 bytes
File Type: APK
Memory Resident: Yes
Initial Samples Received Date: 27 Apr 2012
Payload: Displays ads

Arrival Details

This Trojan may be downloaded from app stores/third party app stores.

NOTES:

This Trojan appeared on the Google Play app market. It has since been taken down.

Once this Trojan is installed on the affected device and the application is used, it creates the following shortcut:

It also adds shortcuts to websites on the affected device's home screen:

It is capable of displaying advertisements from the following:

  • Airpush
  • Google Ads
  • Leadbolt
  • Mobfox
  • Sellaring

Some of the mentioned advertisement networks routines are:

  • Adding ads on notifications
  • Modifying the browser's bookmarks

This app uses an open source N64 emulator.

  SOLUTION

Minimum Scan Engine: 9.200
TMMS Pattern File: 1.233.00
TMMS Pattern Date: 01 May 2012

Step 1

Trend Micro Mobile Security Solution

Trend Micro Mobile Security Personal Edition protects Android smartphones and tablets from malicious and Trojanized applications. The App Scanner is free and detects malicious and Trojanized apps as they are downloaded, while SmartSurfing blocks malicious websites using your device's Android browser.

Download and install the Trend Micro Mobile Security App via Google Play.

Step 2

Remove unwanted apps on your Android mobile device

[ Learn More ]

Did this description help? Tell us how we did.