contagio mobile: coolreaper

Mobile and printer friendly
NEW FILE LOCATION (instead of broken Mediafire links

Showing posts with label coolreaper. Show all posts

Wednesday, December 17, 2014

Coolpad Android Devices - CoolReaper files / samples

Research: CoolReaper Revealed: A Backdoor in Coolpad Android Devices by
Claud Xiao and Ryan Olson

Report download : https://www.paloaltonetworks.com/content/dam/paloaltonetworks-com/en_US/assets/pdf/reports/Unit_42/unit42-cool-reaper.pdf

Sample Credit: Claud Xiao

Download the files listed below (email me if you need the password) - 825MB zip

List of included files (2,825 Files 1.4 GB):

0 comments Labels: coolreaper

Older Posts Home

Subscribe to: Posts (Atom)

Shared by

Mila

View my complete profile

About contagiominidump

aka "take a sample, leave a sample" Contagio mobile mini-dump is a part of contagiodump.blogspot.com. Contagio mobile mini-dump offers an upload dropbox for you to share your mobile malware samples. You can also download any samples individually or in one zip. CLICK HERE TO DOWNLOAD ALL Note: use infected for the password on posts before Sept. 2102 or email for the password scheme for newer samples

Blog Archive

▼ 2024 (3)
- ▼ November (1)
  - 2024-11-04 ToxicPanda Android Banking Trojan samples
- ► September (2)

► 2018 (4)
- ► March (4)

► 2016 (14)
- ► July (10)
- ► June (1)
- ► May (1)
- ► February (2)

► 2015 (28)
- ► October (1)
- ► September (1)
- ► June (5)
- ► May (3)
- ► April (1)
- ► March (11)
- ► February (4)
- ► January (2)

► 2014 (49)
- ► December (12)
- ► November (3)
- ► October (6)
- ► September (1)
- ► August (1)
- ► July (1)
- ► June (2)
- ► May (9)
- ► April (1)
- ► March (3)
- ► February (4)
- ► January (6)

► 2013 (46)
- ► December (1)
- ► November (21)
- ► September (3)
- ► July (1)
- ► June (1)
- ► May (4)
- ► April (3)
- ► March (2)
- ► February (7)
- ► January (3)

► 2012 (56)
- ► December (5)
- ► November (4)
- ► October (3)
- ► September (7)
- ► August (4)
- ► July (6)
- ► June (2)
- ► May (4)
- ► April (4)
- ► March (6)
- ► February (6)
- ► January (5)

► 2011 (55)
- ► December (3)
- ► November (1)
- ► October (27)
- ► September (8)
- ► August (5)
- ► July (9)
- ► June (2)

Blog List

contagio
Life in Linux Kernel
Security Intelligence | TrendLab...
AVG | Top Threats
The Official Lookout Blog
Adobe reader w old versions for Android
Rogunix.com - Mobile malware links
Xuxian Jiang @ NC State University
Kinetoo: the smartphone samurai's log
AVG Mobilation | News and Media Releases | Android Security

Take a sample, Leave a Sample.

UPLOAD BOX

please upload ONLY mobile malware samples and save them in zip files with password infected. Thank you
You can also email your samples (see profile for email address)

Malware List

See the categories for the malware listed on this blog.
Items listed below are old and were posted on contagio before - HERE
Android.Bgserv
BasebridgeA
BasebridgeB
CollectionofJavamobilemalware
CollectionofSymbianmalware
DDreamLight
Doombot_1.sis
DroidDreamvariants
DroidKungFu.A
DroidKungFu.B
Dust.exePocketPCfileinfector2004
Fake10086
FSCGAD_1.00.8.apk
Geinimi.1299167838 swampy.sexpos.apk
Holy***kingBible
iCalendar
ikeeBiphone
iMatch
JavaMobileMalwareSMSsender.zip
jSMSHider
MonkeyJump2.0.apk
Mosquito.1_1.sis
myournetpower.SuperSolo.apk
Palm:Phage
PJApps variants
PMCryptic.exeWindowsCEmalware-2008
PMSW_V1.8_.apk
pornoplayer.apk
RZStudio
SMS_Replicator_Secret.apk
SMStrojan-Tank_3d.jar
SymbianCabir
SymbOS_Zitmo.ACERT.SIS
Trojan.Palm.Liberty
Trojan.Palm.Vapor
Trojan-SMSforAndroidFakePlayerRUapk

Search This Blog

Subscribe To

Posts

Atom

Posts

All Comments

Atom

All Comments

http { server { ### COPY THE CODE BELOW INTO YOUR WEBSITE'S EXISTING SERVER{} (VIRTUAL HOST) BLOCK ### CLICKY ANTI-ADBLOCK PROXY - https://clicky.com/help/proxy # IMPORTANT NOTE: Incoming X-Forwarded-For headers are supported by default. # To disable this, replace all "$proxy_add_x_forwarded_for" references with "$remote_addr". # DNS RESOLVER - if already defined elsewhere, this can optionally be deleted. resolver 1.1.1.1; # COOKIES - override cookie header to just send the service-related first party cookies. set $cookie ""; if ($cookie__cky_ignore) { set $cookie "_cky_ignore=$cookie__cky_ignore; _cky_osa=$cookie__cky_osa"; } # JAVASCRIPT TRACKING CODE location = /2252432b08a3d483.js { proxy_pass https://static.getclicky.com/js?in=%2F35c7ea0836d1e846; proxy_connect_timeout 10s; proxy_http_version 1.1; proxy_ssl_server_name on; proxy_set_header Host static.getclicky.com; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Cookie ""; } # JAVASCRIPT BEACON location = /35c7ea0836d1e846 { proxy_pass https://in.getclicky.com/in.php; proxy_connect_timeout 10s; proxy_http_version 1.1; proxy_ssl_server_name on; proxy_set_header Host in.getclicky.com; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Cookie $cookie; } ### / CLICKY } }