The following Yara rule can be used to detect the malware:
The Android operating system has become a popular target for malware and other types of cyber threats. One of the ways that attackers distribute malware is through shortcut files, which are small files that contain a link to a website or an application. In this paper, we will investigate the Play GSpace shortcut file download for Android and explore the potential risks associated with it. play gspace shortcut file download for android link
rule Play_GSpace_Shortcut_File { meta: description = "Detects Play GSpace shortcut file download" strings: $shortcut_file = "play gspace shortcut file" $malware_url = "https://www example.com/play-gspace-shortcut-file.apk" condition: $shortcut_file and $malware_url } The following Yara rule can be used to
098f6bbcd4621d373cade4e832627b4f