Analysis by: Roland Marco Dela Paz
 THREAT SUBTYPE:

Information Stealer, Malicious Downloader, Spying Tool

 PLATFORM:

Android OS

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Backdoor

  • Destructiveness: No

  • Encrypted: No

  • In the wild: Yes

  OVERVIEW

This backdoor may be manually installed by a user.

  TECHNICAL DETAILS

File Size: 296,656 bytes
File Type: DEX
Memory Resident: Yes
Initial Samples Received Date: 07 May 2011
Payload: Steals information

Arrival Details

This backdoor may be manually installed by a user.

NOTES:

This malware may arrive via Trojanized Apps. It arrives via a modified Android game.

It is installed as the following file:

  • /data/app/com.pocketchunk.blade-1.apk

It gets the following information from the affected phone:

  • IMEI
  • IMSI
  • Mobile Network Code (MNC) of the operator, operator name, operator type etc.)
  • Network operator related information (country code, Mobile Country Code (MCC)
  • Phone number
  • Phone related information (model, brand, manufacturer of the phone etc.
  • Voicemail number

These data are then sent to a remote website.

It can be instructed by a remote user to do the following:

  • add a bookmark
  • call a specified number
  • change the wallpaper
  • collect SMS messages in the phone
  • collect device information
  • get GPS coordinates
  • get the list of contacts
  • open a URL
  • send an SMS to specified number
  • send an email

  SOLUTION

Minimum Scan Engine: 8.900
TMMS Pattern File: 1.105.00
TMMS Pattern Date: 13 Jun 2011

Step 1

Trend Micro Mobile Security Solution

Trend Micro Mobile Security Personal Edition protects Android smartphones and tablets from malicious and Trojanized applications. The App Scanner is free and detects malicious and Trojanized apps as they are downloaded, while SmartSurfing blocks malicious websites using your device's Android browser.

Download and install the Trend Micro Mobile Security App via Google Play.

Step 2

Remove unwanted apps on your Android mobile device

[ Learn More ]

Did this description help? Tell us how we did.