Saturday, May 10, 2014

Android Monitor spyware - HGSpy.A / QlySpy.a

File: com.exp.tele.apk
Size: 721665
MD5:  3709F87D2B6FF0BD7937112974DC1143

Sample credit: Steven Chen
Research:

Download. Email me if you need the password


Forsafe report

http://www.foresafe.com/report/3709F87D2B6FF0BD7937112974DC1143

Ijinshan Fireeye:
http://fireeye.ijinshan.com/analyse.html?md5=3709f87d2b6ff0bd7937112974dc1143&sha1=42d7c21c13316eec6ad7d190f324130da7221987&type=1#full



https://www.virustotal.com/en-gb/file/9a049a19f35e736bc408edb6bb80dd1623ccd3365fed9aa3e5eca341a89c0901/analysis/
HA256: 9a049a19f35e736bc408edb6bb80dd1623ccd3365fed9aa3e5eca341a89c0901
File name: 51.apk
Detection ratio: 14 / 51
Analysis date: 2014-05-10 15:25:20 UTC ( 10 hours, 28 minutes ago )
Antivirus Result Update
Ad-Aware Android.Monitor.HGSpy.A 20140510
AhnLab-V3 Android-Malicious/SmForw 20140510
BitDefender Android.Monitor.HGSpy.A 20140510
DrWeb Android.SmsSend.685 20140510
ESET-NOD32 a variant of Android/Secapk.A 20140510
Emsisoft Android.Monitor.HGSpy.A (B) 20140510
F-Secure Trojan-Downloader:Android/Boqx.I 20140510
Fortinet Android/Secapk.A!tr 20140510
GData Android.Monitor.HGSpy.A 20140510
K7GW Trojan ( 004942641 ) 20140509
Kingsoft Android.Troj.at_QlySpy.a.(kcloud) 20140510
MicroWorld-eScan Android.Monitor.HGSpy.A 20140510
NANO-Antivirus Trojan.Dex.Secapk.cussul 20140510
VIPRE Adware.AndroidOS.SecAPK.a (v) 20140510

1 comment: