Android FindAndCall spyware

File: il.co.egv-3.apk
Size: 518611
MD5:  024E47BB9252C5537B94225C0E7D7932

Research Find and Call: Leak and Spam by Denis (Kaspersky)
Sample credit: thanks to anonymous, July 10, 2012

Download (password infected)

Apple IPhoneOS FindAndCall spyware

File  iPhoneOS/FindCall.A!tr.spy

File: FindAndCall 1.1.ipa
Size: 2940485
MD5:  4D99379EC9F2CA9A33BFE9841A931A80


Research Find and Call: Leak and Spam by Denis (Kaspersky)
Sample credit: thanks to anonymous, July 10, 2012

Download (password infected)

Android KungFu variant

File: _pl.byq.new_19_1.2.5.apk
Size: 81995
MD5:  079455DE5891F7E1BB19017C77F1BEC0


File: _com.tebs3.cuttherope_6_1.1.5.apk
Size: 90311
MD5:  45F86E5027495DC33D168F4F4704779C

Credit: thanks to anonymous, July 9, 2012

Download (password infected)

April 2012 - Dougalek.A - Android spyware

File

00e74c118fa3902e5c85fd8e37f3d084.apk
9d1625aa79b55a79064dac7a0ecc2f91.apk
857ee29d88796e1f1b7b440dc9eadc77.apk
b9622e587ae28cfff8ffc5645221e422.apk
c2dfe44d9f130033ecd89ba33f8a2e0a.apk
e8237a583fe7b2362b4addf01518600b.apk

Research McAfee: Android Malware Promises Video While Stealing Contacts - April 2012
Credit Thomas Wang

Download (password infected)

Android CI4 SMS Bot

Sample Credits: Tim Strazzere
Research: Lookout: Security Alert: CI4 SMS Bot

Download (password infected)

Android Security Suite Premium = New ZitMo

Sample Credits:   with many thanks to Arvind Kumar , June 20, 2012
Research:   Kaspersky SecureList Android Security Suite Premium = New ZitMo

Download (password infected)

See you in two weeks

Angus McIntyre

Greetings,
I will be traveling and will not have time for posts until June. If you sent any files to me recently and I did not post / did not reply, please accept my sincere apologies, it has been a busy period.

Please continue to share and upload files to  Contagio Community and Contagio Mobile dump where it will be available immediately to others via the main download link posted there.
I hope you all have a great end of spring and glorious summer.
Thank you
Mila

NotCompatible - Android Drive-by malware

  
Sample Credits:   with many thanks to Tim Strazzere, May 3, 2012
Research:   UPDATE: Security Alert: Hacked Websites Serve Suspicious Android Apps (NotCompatible)  - Lookout


Download (password infected)

Android Gamex Trojan

File: de.mehrmannd.sdbooster-GAMEX.apk
Size: 256139
MD5:  50836808A5FE7FEBB6CE8B2109D6C93A
Sample Credits:   with many thanks to Tim Strazzere, April 30, 2012
Research:      Security Alert: Gamex Trojan Hides in Root-Required Apps – Tricking Users into Downloads - Lookout

Download (password infected)

Android PJApps - 2011 - Liveprints wallpaper

File: Newfpwap_com_liveprintslivewallpaper.apk
Size: 1316981
MD5:  A84997B0D220E6A63E2943DA64FFA38C
Sample Credits:   with many thanks to anonymous April 28, 2012
 

Download  - password infected

Android Copy9 - commercial spy app - Potentially Unwanted (PUP app)

File:       Copy9 - commerical product (http://copy9.com - "The Number 1 solution for Spy"
MD5:     69B9691A8274A17CDC22E9681B3E1C74
Sample Credits:   with many thanks to Harsh, April 20, 2012
CleanMX report: http://support.clean-mx.de/clean-mx/viruses?id=1448570
Original location: http://copy9.com/download/copy9_23.apk

Download  - password infected

Fake Instagram - Fake App Tall Fraud - Android Malware

File:       Fake Instagram
MD5:     69B9691A8274A17CDC22E9681B3E1C74
Sample Credits:   with many thanks to Tim Strazzere, April 18, 2012
Research:   The Continuing Saga of Fake App Toll Fraud  - Lookout

Download  - password infected

Android.Qicsomos - Fake CarrierIQ detector-SMS Trojan

File:             Android.Qicsomos.apk
MD5:     69B9691A8274A17CDC22E9681B3E1C74
Sample Credits:   with many thanks to Anonymous,April 17 2012
Research:   Symantec: The Day After the Year in Mobile Malware?
Symantec: Android.Qicsomos

Download  - password infected

Spyera (Android commercial App) - aka Tigerbot

Looks like  Tigerbot is a commercial spy app developed by Spyera



File: spyera.apk aka Tigerbot
MD5:  9D0B1B6BBC1568A8A0C7F186B8944905
Sample Credits:   with many thanks to Tim Strazzere to the sample and information, Lookout Security, April 11,  2012
Research:   NQ: Security Alert: New Android Malware — TigerBot — Identified in Alternative Markets

Download  - password infected

Android DKFBootKit aka LeNa.b and LeNa.c DroidKungFu variant) - new samples

File: com.rovio.new.ads-LeNa.c.apk
MD5:  3B524DD4A7BBD2DE633EBFCFF167FED2


Research: Security Alert: New Variants of Legacy Native (LeNa) Identified By Tim Wyatt

Sample Credits:   with many thanks to Tim Strazzere, April 3, 2012

File:        com.atools.cuttherope-LeNa.b.apk
MD5:      7503128D14FA8FC6B9B64CE6E9CD90E3
SHA1      64013d749086e90bdcfccb86146ad6e62b214cfa

Sample Credits:   with many thanks to Tim Strazzere, March 31, 2012

Research:  2012 NQMobile Security Alert: New Android Malware — DKFBootKit — Moves Towards The First Android BootKit 

which is the same as LeNa featured below

Contagio:  Legacy Native (LeNa) - DroidKungFu variant  

Research 2011:  Lookout Mobile Security LeNa Technical Tear Down Tim Strazzere 

Research 2011:  Lookout Mobile Security Alert: Legacy Makes Another Appearance, Meet Legacy Native (LeNa)   By Tim Strazzere


 Download 3B524DD4A7BBD2DE633EBFCFF167FED2- password infected

Download  7503128D14FA8FC6B9B64CE6E9CD90E3 - password infected

Android.Stiniter / TGLoader (malware utilizing Root exploit)

File:                 android.dds.com-STiNiTER.apk
MD5:     E9AA097C6E87690F938BE8C75EF91C27
Sample Credits:   with many thanks to Tim Strazzere, March 27, 2012
Research:   Original Detection Symantec Android.Stiniter
Research:  Security Alert: New TGLoader Android Malware Utilizes the Exploid Root Exploit

Download  - password infected

Contents of capture-site.com Android malware development/distribution site #OCJP by 0Day.jp

ANALYSIS:   #26 Exposing the Android Fraud #Malware Development Site
 Contents of capture-site.com Android malware distribution site by Hendrik Adrian
 


Download (pass infected)

Android FakeToken

File: Android Faketoken
MD5: zip file with the components, not the original apk
 Sample Credits:   with many thanks to anonymous, March 15, 2012
Research:   Android Malware Pairs Man-in-the-Middle With Remote-Controlled Banking Trojan by Carlos Castillo

Download  - password infected

Android Opfake aka FakeSMSInstaller

File:  opfake
Sample Credits:   with many thanks to  anonymous, March 12, 2012
Research:   Android.Opfake.B Adopts Bot Tactics

Download  - password infected 

Android.Moghava: A Recipe for Mayhem

File: carddeemamaAndroid.apk or irfoods 1.1.apk
MD5:  ec86f084ea0e0d0a33d5f39df19bd7be
Sample Credits:   with many thanks to Sanjay and to anonymous, March 1, 2012
Research:     Symantec Android.Moghava: A Recipe for Mayhem by  Irfan Asrar

Download  - password infected