Andr/Boxer-A is a premium SMS Trojan family that targets Android devices.
Andr/Boxer-A poses as an installer to legitimate applications such as Installer, Skype or ICQ.
When run, the Trojan prompts the user with a downloader window but sends an SMS message to a premium number in the background.
Andr/Boxer-A is able to determine the premium number based on ISO Country code from the mobile number SIM card.
Examples of Andr/Boxer-A include:
Example 1
File Information
- Size
- 2.0M
- SHA-1
- 009df15d2848dbc9d4574b7b73d40264c375df7b
- MD5
- f60d572258d5a83726822649e332793c
- CRC-32
- c65dd876
- File type
- JAR archive file
- First seen
- 2012-06-26
Example 2
File Information
- Size
- 1.2M
- SHA-1
- 00a2e22642cab99095abd6b26d47bdfbd197708d
- MD5
- d7f0c51bf005aabc75291df900810df7
- CRC-32
- 22f342e3
- File type
- JAR archive file
- First seen
- 2012-06-26
Example 3
File Information
- Size
- 2.2M
- SHA-1
- 00a81c9edfdc6a0df284dcbf2eff75233fc6a96b
- MD5
- 9056a2814af3ec42ee0810ef81356a64
- CRC-32
- 1d59e188
- File type
- Android application package (APK) file
- First seen
- 2012-01-07