Analysis by: Weichao Sun
 THREAT SUBTYPE:

Premium Service Abuser

 PLATFORM:

Android OS

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted: No

  • In the wild: Yes

  OVERVIEW

This malware shows a fake infection on the affected user's mobile phone. Once the user clicks on the fake infection, it automatically downloads another app. The downloading uses network data and causes unauthorized spending.

  TECHNICAL DETAILS

File Size: 9,263,853 bytes
File Type: APK
Memory Resident: Yes

Mobile Malware Routine

This Trojan posts the following information to its command and control (C&C) server:

  • IMEI
  • IMSI
  • Phone number
  • Network type

It is capable of doing the following:

  • Displays a fake infection according to the reply from the server
  • Download an app when user clicks on the fake notification
  • Decrypt and install app detected as ANDROIDOS_GINMASTER.HRXD

  SOLUTION

Minimum Scan Engine: 9.300

Trend Micro Mobile Security Solution

Trend Micro Mobile Security Personal Edition protects Android smartphones and tablets from malicious and Trojanized applications. The App Scanner is free and detects malicious and Trojanized apps as they are downloaded, while SmartSurfing blocks malicious websites using your device's Android browser.

Download and install the Trend Micro Mobile Security App via Google Play.


Did this description help? Tell us how we did.