1. Symantec/
  2. Security Response/
  3. Android.Appleservice

Android.Appleservice

Risk Level 1: Very Low

Discovered:
June 25, 2012
Updated:
March 10, 2014 12:23:16 PM
Type:
Trojan
Infection Length:
Varies
Systems Affected:
Android
Android.Appleservice is a Trojan horse for Android devices that may steal information from the compromised device.

Android package file
The Trojan may arrive as a package with the following characteristics:

Package name:
  • de.androidn.xconstruction
  • com.dodur.android.mummy
  • com.androidn.parkour.activities
  • com.cooguo.xln
  • cn.androidn.moplusand.ui
  • cn.thhsoppc.nkiwarqqm.pnmdvwgln
  • com.cooguo.inkfishpond
  • com.reactor.game.torus
  • com.andoop.jailbreak
  • com.androidn.kissing_test
  • de.androidn.android.SmearKing
  • com.androidn.darts
  • cn.ofqvalqs.kmhsmcncr.pmiujufli
  • com.androidn.vtt3d
  • cn.bwioqcun.wefmihtfe.sngglecbo
  • com.androidn.game.forestman
  • com.androidn.mypaperplane_x_lite
  • com.feelingtouch.bocce
  • com.androidn.cjmm
  • com.cooguo.aquarium2
  • com.feasy.jewels.FruitsMatching
  • com.droidhen.traffic
  • com.cooguo.fishpond
  • com.android.systemtools.core
  • com.blyts.parkour.activities
  • cn.androidn.asxhl2007.tombofqin
  • net.osaris.turbofly
  • com.androidn.game.linkup
  • com.androidn.pool
  • com.cooguo.pocketfrog
  • de.hms.xconstructionfull
  • com.cooguo.aquarium
  • com.cooguo.yoritsuki
  • net.androidn.turbofly
  • com.androidn.game.snailjump
  • com.cooguo.koipond
  • com.cooguo.market
  • com.duesi91.hatecats1c
  • com.cooguo.snowplum
  • com.androidn.traffic
  • de.androidn.android.TapKing


Name:
  • AndroidCoreTools
  • YoLinkup
  • Bocce Ball
  • Traffic Time
  • UnblockMummy
  • My Paper Plane 2
  • Torus 3D
  • TurboFly 3D
  • X Construct
  • Aquarium
  • Snail Jump
  • Kissing Test
  • Pool Master Pro
  • Fruits Matching
  • HatefulCats
  • Darts 3D


Permissions
When the Trojan is being installed, it requests permissions to perform the following actions:
  • Open network connections
  • Create new SMS messages
  • Read SMS messages on the device
  • Access location information, such as GPS information
  • Start once the device has finished booting

Installation
Once installed, the application may display one of the following icons:
  • A purple icon with Chinese characters in blue and "3D" in yellow
  • A blue icon with a paper airplane and the number 2
  • A black icon with a green frog and a red frog
  • An icon with a photo of a red-haired girl wearing a rabbit ears headband.








Antivirus Protection Dates

  • Initial Rapid Release version June 25, 2012
  • Latest Rapid Release version June 25, 2012
  • Initial Daily Certified version pending
  • Latest Daily Certified version pending
  • Initial Weekly Certified release date June 27, 2012
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Mario Ballano

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube