ANDROIDOS_MIFRAME.A

March 13, 2017

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

 Analysis by: Jason Gu

---

 PLATFORM:

Android OS

 OVERALL RISK RATING:

 DAMAGE POTENTIAL:

 DISTRIBUTION POTENTIAL:

 REPORTED INFECTION:

 INFORMATION EXPOSURE:

• 
  Threat Type: Trojan
• 
  Destructiveness: No
• 
  Encrypted:
• 
  In the wild: Yes

  TECHNICAL DETAILS

File Size:

3,773,361 bytes

File Type:

APK

Memory Resident:

Yes

Payload:

Connects to URLs/IPs

NOTES:

Based on analysis of the codes, this Android malware has the following capabilities:

• Loads a local html page in 1 pixel iframe. The said html tries to open the following malicious URLs:
  • www.{BLOCKED}z.pl/rc/
  • jL.{BLOCKED}a.pl/rc/

It is possible that the system used by the developer may be infected with malware that injects the malicious code into the source code of these applications.

  SOLUTION

Minimum Scan Engine:

9.850

Trend Micro Mobile Security Solution

Trend Micro Mobile Security Personal Edition protects Android and iOS smartphones and tablets from malicious and Trojanized applications. It blocks access to malicious websites, increase device performance, and protects your mobile data. You may download the Trend Micro Mobile Security apps from the following sites:

• Trend Micro Mobile Security and Antivirus in Google Play
• Trend Micro Mobile Security in iTunes

NOTES:

Trend Micro Mobile Security Personal Edition protects Android smartphones and tablets from malicious and Trojanized applications. The App Scanner is free and detects malicious and Trojanized apps as they are downloaded, while SmartSurfing blocks malicious websites using your device\'s Android browser.

Download and install the Trend Micro Mobile Security App via the Android Market.

Did this description help? Tell us how we did.