Categories: Malware

What is “Android/IPStorm.A”?

The Android/IPStorm.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Android/IPStorm.A virus can do?

Injection (inter-process)
Uses Windows utilities for basic functionality
Attempts to repeatedly call a single API many times in order to delay analysis time
A potential decoy document was displayed to the user
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Android/IPStorm.A?


File Info:
crc32: 0AD2CB99md5: e37d3e95fbc57ed5203096201a7d23a9name: upload_filesha1: e708a19fe2c34a94123a3af3bafa4bcc10d6981dsha256: d233c37f2d49badbf53d054bce7fb8e787c9973067e8dcd79835d7816aacfa43sha512: 0439d9dd7fb390f1b9e76aa9beb7d4adcc35d7fb787dc2a08b5aa8d449727a44bbfc6be902963fcef55ffcb5f7af28e1a74d568baceaad306cd55a646ed049fassdeep: 196608:/onDwMnb8U2+HE0R54ZmRXPtVDDhdbZBZZzfMju:yJtNPtV/ftype: ELF 32-bit LSB  executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Version Info:
0: [No Data]

Android/IPStorm.A also known as:

AegisLab	Trojan.Linux.Alien.4!c
Arcabit	Trojan.Linux.IPStorm.A
Invincea	Linux/IPStorm-A
Symantec	Trojan.IPStorm
ESET-NOD32	Android/IPStorm.A
TrendMicro-HouseCall	Trojan.Linux.IPSTORM.USELVJ420
Avast	MacOS:IPStorm-A [Trj]
Kaspersky	HEUR:Trojan.Linux.Alien.a
BitDefender	Trojan.Linux.IPStorm.A
NANO-Antivirus	Trojan.Elf32.Alien.hylufh
MicroWorld-eScan	Trojan.Linux.IPStorm.A
Ad-Aware	Trojan.Linux.IPStorm.A
Emsisoft	Trojan.Linux.IPStorm.A (B)
TrendMicro	Trojan.Linux.IPSTORM.USELVJ420
FireEye	Trojan.Linux.IPStorm.A
Sophos	Linux/IPStorm-A
Ikarus	Trojan.Linux.Ipstorm
Jiangmin	Trojan.Linux.arx
MAX	malware (ai score=99)
Antiy-AVL	Trojan/Linux.Alien
Microsoft	Trojan:Linux/IPStorm.A!MTB
ViRobot	Linux.S.Agent.16343040
ZoneAlarm	HEUR:Trojan.Linux.Alien.a
GData	Trojan.Linux.IPStorm.A
ALYac	Trojan.Linux.IPStorm
Fortinet	Linux/IPStorm.A!tr
AVG	MacOS:IPStorm-A [Trj]
Qihoo-360	Linux/Trojan.834