Viking Horde: A New Type of Android Malware on Google Play - Check Point Software
Tags
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Screen Capture - T1513 Server - T1583.004 Server - T1584.004 Sms Messages - T1636.004 Software - T1592.002 Connection Proxy - T1090 Screen Capture - T1113 Screen Capture
Show in Graph
Common Information
Type Value
UUID 9c978930-62b1-4cfd-a7ca-759edfeb8751
Fingerprint b5a52080a925a298
Analysis status DONE
Considered CTI value 2
Text language
Published May 9, 2016, 7 p.m.
Added to db Jan. 18, 2023, 8:16 p.m.
Last updated Nov. 8, 2024, 12:42 a.m.
Headline Viking Horde: A New Type of Android Malware on Google Play
Title Viking Horde: A New Type of Android Malware on Google Play - Check Point Software
Detected Hints/Tags/Attributes 45/1/17
Source URLs
Redirection Url
Details Source https://blog.checkpoint.com/2016/05/09/viking-horde-a-new-type-of-android-malware-on-google-play/
URL Provider
Details Provider Source level domain
Details checkpoint.com blog.checkpoint.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
clib.so
Details Domain 1 
com.android.security
Details Domain 188 
com.android
Details Domain 1 
www.adautoexchange.com
Details Domain 1 
www.adexchng.com
Details Domain 1 
www.adexchnge.com
Details Domain 1 
www.adexchangetech.com
Details File 3 
core.bin
Details File 1 
android.bin
Details File 7 
update.bin
Details sha256 1 
85e6d5b3569e5b22a16245215a2f31df1ea3a1eb4d53b4c286a6ad2a46517b0c
Details sha256 1 
254c1f16c8aa4c4c033e925b629d9a74ccb76ebf76204df7807b84a593f38dc0
Details sha256 1 
ebfef80c85264250b0e413f04d2fbf9e66f0e6fd6b955e281dba70d536139619
Details sha256 1 
10d9fdbe9ae31a290575263db76a56a601301f2c2089ac9d2581c9289a24998a
Details sha256 1 
a13abb024863dc770f7e3e5710435899d221400a1b405a8dd9fd12f62c4971de
Details sha256 1 
1dd08afbf8a9e5f101f7ea4550602c40d1050517abfff11aaeb9a90e1b2caea1
Details sha256 1 
e284a7329066e171c88c98be9118b2dce4e121b98aa418ae6232eaf5fd3ad521