ANDROIDOS_PJAP.A
Information Stealer, Premium Service Abuser, Click Fraud, Malicious Downloader
Android OS
![](/vinfo/imgFiles/legend.jpg)
Threat Type: Trojan
Destructiveness: No
Encrypted: Yes
In the wild: Yes
OVERVIEW
This Android malware arrives bundled with modified applications that can be downloaded from unofficial Android Market websites.
This backdoor is capable of sending SMS, downloading other applications, adding bookmarks, and visiting URLs. It also gathers certain device information and sends it to a remote URL.
It saves a log of its activities in a file. It sends device information to a certain URL:
The malware receives commands from a certain URL. It receives and executes backdoor commands for the malicious user.
This malware automatically adds certain URLs to the phone's book marks. More URLs can be received and added by the malware when commanded.
The malware may also send SMS to premium numbers.
This Trojan may be unknowingly downloaded by a user while visiting malicious websites.
TECHNICAL DETAILS
208,318 bytes
DEX
Yes
01 Apr 2011
Steals information, Compromises system security
Arrival Details
This Trojan may be unknowingly downloaded by a user while visiting malicious websites.
NOTES:
This Android malware arrives bundled with modified applications that can be downloaded from unofficial Android Market websites.
This backdoor is capable of sending SMS, downloading other applications, adding bookmarks, and visiting URLs. It also gathers the following device information and sends it to a remote URL:
- IMEI
- IMSI
- Phone Number
- ICCID
- SIM serial number
- /sdcard/androidh.log
- log.{BLOCKED}d188.com:9033/window.log?id={paramaters}
- xml.{BLOCKED}d188.com:8118/push/androidxml/{paramaters}
- execMark - Add a bookmark
- execPush - send spam SMS, contents of message are controlled by the remote user.
- execSoft - install a new application
- execTanc - unknown command
- execXbox - visit a URL
- http://{BLOCKED}d.paojiao.cn
- http://{BLOCKED}2.{BLOCKED}o.cn
- http://{BLOCKED}g3.cn
- 10086
- 10010
SOLUTION
8.900
1.101.00
24 May 2011
Step 1
Trend Micro Mobile Security Solution
Trend Micro Mobile Security Personal Edition protects Android smartphones and tablets from malicious and Trojanized applications. The App Scanner is free and detects malicious and Trojanized apps as they are downloaded, while SmartSurfing blocks malicious websites using your device's Android browser.
Download and install the Trend Micro Mobile Security App via Google Play.
Step 2
Remove unwanted apps on your Android mobile device
Did this description help? Tell us how we did.