Android DKFBootKit aka LeNa.b and LeNa.c DroidKungFu variant) - new samples

File: com.rovio.new.ads-LeNa.c.apk
MD5:  3B524DD4A7BBD2DE633EBFCFF167FED2


Research: Security Alert: New Variants of Legacy Native (LeNa) Identified By Tim Wyatt

Sample Credits:   with many thanks to Tim Strazzere, April 3, 2012

File:        com.atools.cuttherope-LeNa.b.apk
MD5:      7503128D14FA8FC6B9B64CE6E9CD90E3
SHA1      64013d749086e90bdcfccb86146ad6e62b214cfa

Sample Credits:   with many thanks to Tim Strazzere, March 31, 2012

Research:  2012 NQMobile Security Alert: New Android Malware — DKFBootKit — Moves Towards The First Android BootKit 

which is the same as LeNa featured below

Contagio:  Legacy Native (LeNa) - DroidKungFu variant  

Research 2011:  Lookout Mobile Security LeNa Technical Tear Down Tim Strazzere 

Research 2011:  Lookout Mobile Security Alert: Legacy Makes Another Appearance, Meet Legacy Native (LeNa)   By Tim Strazzere


 Download 3B524DD4A7BBD2DE633EBFCFF167FED2- password infected

Download  7503128D14FA8FC6B9B64CE6E9CD90E3 - password infected

Android.Stiniter / TGLoader (malware utilizing Root exploit)

File:                 android.dds.com-STiNiTER.apk
MD5:     E9AA097C6E87690F938BE8C75EF91C27
Sample Credits:   with many thanks to Tim Strazzere, March 27, 2012
Research:   Original Detection Symantec Android.Stiniter
Research:  Security Alert: New TGLoader Android Malware Utilizes the Exploid Root Exploit

Download  - password infected

Contents of capture-site.com Android malware development/distribution site #OCJP by 0Day.jp

ANALYSIS:   #26 Exposing the Android Fraud #Malware Development Site
 Contents of capture-site.com Android malware distribution site by Hendrik Adrian
 


Download (pass infected)

Android FakeToken

File: Android Faketoken
MD5: zip file with the components, not the original apk
 Sample Credits:   with many thanks to anonymous, March 15, 2012
Research:   Android Malware Pairs Man-in-the-Middle With Remote-Controlled Banking Trojan by Carlos Castillo

Download  - password infected

Android Opfake aka FakeSMSInstaller

File:  opfake
Sample Credits:   with many thanks to  anonymous, March 12, 2012
Research:   Android.Opfake.B Adopts Bot Tactics

Download  - password infected 

Android.Moghava: A Recipe for Mayhem

File: carddeemamaAndroid.apk or irfoods 1.1.apk
MD5:  ec86f084ea0e0d0a33d5f39df19bd7be
Sample Credits:   with many thanks to Sanjay and to anonymous, March 1, 2012
Research:     Symantec Android.Moghava: A Recipe for Mayhem by  Irfan Asrar

Download  - password infected