DroidDreamLight - new variant found in a China-based third-party app

Name:                    DroidDreamLight
File Name:             com.button.phone_91595200_0.apk
MD5:                     3D9472D792019E40605ABFA9CB22FBA5
Sample Credits:   many thanks to anonymous, Sept 22, 2011
Research:             Sep16 Massive Code Change for New DroidDreamLight Variant Trend Micro
found in this Android store

Download (pass infected)





com.button.phone_91595200_0.apk
Submission date:2011-09-22 15:31:32 (UTC)
Current status:finished
Result:8 /44 (18.2%)
http://www.virustotal.com/file-scan/report.html?id=fb9eddff1cec4b2e64b967d50939957ee56dea172ca8e3c93e78a0d29ffcb5ab-1316705492
Emsisoft     5.1.0.11     2011.09.22     Trojan-Downloader.AndroidOS!IK
F-Secure     9.0.16440.0     2011.09.22     Trojan:Android/DroidDream.D!mfb
Ikarus     T3.1.1.107.0     2011.09.22     Trojan-Downloader.AndroidOS
Jiangmin     13.0.900     2011.09.22     TrojanDownloader.AndroidOS.v
Kaspersky     9.0.0.837     2011.09.22     Trojan-Downloader.AndroidOS.DorDrae.ai
Microsoft     1.7702     2011.09.22     TrojanSpy:AndroidOS/DDLight.B
TrendMicro     9.500.0.1008     2011.09.22     AndroidOS_DORDRAE.N
TrendMicro-HouseCall     9.500.0.1008     2011.09.22     AndroidOS_DORDRAE.N
MD5   : 3d9472d792019e40605abfa9cb22fba5