1. /
  2. Security Response/
  3. Android.Kranxpay

Android.Kranxpay

Risk Level 1: Very Low

Discovered:
July 9, 2012
Updated:
July 10, 2012 6:18:51 PM
Type:
Trojan
Systems Affected:
Android
Android.Kranxpay is a Trojan horse for Android devices that downloads other apps onto the device.

Android package file
The Trojan may arrive as a package with one of the following name:

APK:
com.mediawoz.gotq.apk


Installation
Once installed, the application will display an icon. The icon and text displayed may differ depending on the version of the Trojanized app used.




The package details and icon can be also seen in the package browser after installation.



Antivirus Protection Dates

  • Initial Rapid Release version July 9, 2012 revision 020
  • Latest Rapid Release version February 19, 2013 revision 016
  • Initial Daily Certified version July 9, 2012 revision 021
  • Latest Daily Certified version July 13, 2012 revision 004
  • Initial Weekly Certified release date July 11, 2012
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Medium
  • Payload: Downloads additional files and apps onto the device.

Distribution

  • Distribution Level: Low
Writeup By: Kevin Savage

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver