I have an apk xc501 (722) on virustotal it accused 2 malwares an Android:Banker someone who would replace another one or something and it was solved by recompiling, can you help me to remove it or if it is possible the one from the banker? or can I modify a default 722 to connect to the panel
Question accusing xc722 malware
- Thread starter rgs17
- Start date
-
When asking for help or guidance - please ensure to check the `Question` box before completing your New Thread.
This enables yourself and other users to vote for the best answer given and will help people find the best answer quicker in future!
- Brain
Solution
@tealcavalon
Respected
A lot of these self changed apps with panel have a lot of backdoors and some don't even show up on virustotal, nevertheless I would like to state that it's really important that everyone check these apps for virus like @rgs17 did.
What I could recommend @rgs17 and everyone that would like, is to contact @trol750 about this
What I could recommend @rgs17 and everyone that would like, is to contact @trol750 about this
Ian
🤷
APK:RepMalware is reputation based, so it could be the apps package name or the libraries used are known to be used along side malicious apps. In otherwords it may just be a false positive.
Try using a Sandbox VM in your phone and installing, and watch the traffic to/from the app to see if its talking to any C2 server.
Im doubtful though.
Try using a Sandbox VM in your phone and installing, and watch the traffic to/from the app to see if its talking to any C2 server.
Im doubtful though.
