Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.1.origin
Сетевая активность:
Подключается к:
- google-####.com
- pro-tan####.ru
- cou####.####.ru
- p####.####.org
- googlet####.com
- a####.####.org
- pag####.####.com
Запросы HTTP GET:
- a####.####.org/androidgame_img/masters_of_elements/real/en/10_masters_of_elements.jpg
- a####.####.org/artists/50x50/848_adele_ringtone.jpg
- cou####.####.ru/hit;m_mob_org?q;t42.3####
- a####.####.org/pic/v2/gallery/111x185/cvety-rasteniya-39324.jpg
- a####.####.org/androidgame_img/super_heroes_junior/thumbs/super_heroes_junior.jpg
- a####.####.org/pic/v2/gallery/111x185/devushki-fentezi-39325.jpg
- a####.####.org/androidgame_img/assassins_creed_identity/110_300_1/1_assassins_creed_identity.jpg
- a####.####.org/pic/v2/gallery/111x185/ozera-pejzazh-39327.jpg
- a####.####.org/androidgame_img/werther_quest/thumbs/werther_quest.jpg
- a####.####.org/androidgame_img/geometry_dash/110_300_1/4_geometry_dash.jpg
- a####.####.org/_/img/youtube-bg.jpg
- p####.####.org/tag=holiday/
- a####.####.org/pic/v2/gallery/111x185/eda-frukty-klubnika-39319.jpg
- a####.####.org/artists/50x50/1407_enrique_iglesias_ringtone.jpg
- google-####.com/r/collect?v=####&_v=####&a=####&t=####&_s=####&dl=####&ul=####&de=####&dt=####&sd=####&sr=####&vp=####&je=####&_u=####&jid=####&cid=##...
- a####.####.org/androidgame_img/minecraft/110_300_1/1_minecraft.jpg
- p####.####.org/sort_popular_down/
- a####.####.org/androidgame_img/the_amazing_spider_man_2/thumbs/the_amazing_spider_man_2.jpg
- a####.####.org/androidgame_img/bully_anniversary_edition/110_300_1/1_bully_anniversary_edition.jpg
- a####.####.org/androidgame_img/grand_theft_auto_san_andreas/thumbs/grand_theft_auto_san_andreas.jpg
- p####.####.org/
- pag####.####.com/pagead/js/r20170201/r20170110/show_ads_impl.js
- a####.####.org/androidgame_img/geometry_dash/thumbs/geometry_dash.jpg
- a####.####.org/pic/v2/gallery/111x185/apple-brendy-38763.jpg
- a####.####.org/pic/v2/gallery/111x185/gonki-motocikly-sport-transport-39212.jpg
- pag####.####.com/pagead/show_ads.js
- google-####.com/collect?v=####&_v=####&a=####&t=####&_s=####&dl=####&dr=####&ul=####&de=####&dt=####&sd=####&sr=####&vp=####&je=####&_u=####&jid=####&...
- p####.####.org/p457-android-4.3.1/
- a####.####.org/androidgame_img/minecraft/thumbs/minecraft.jpg
- a####.####.org/androidgame_img/masters_of_elements/real/en/7_masters_of_elements.jpg
- a####.####.org/androidgame_img/nba_2k17/110_300_1/1_nba_2k17.jpg
- a####.####.org/artists/50x50/3651_michael_jackson_ringtone.jpg
- a####.####.org/pic/v2/gallery/111x185/obekty-oruzhie-38920.jpg
- a####.####.org/artists/50x50/2031_louis_armstrong_ringtone.jpg
- a####.####.org/pic/v2/gallery/111x185/fon-novyj_god_new_year-prazdniki-39063.jpg
- a####.####.org/pic/v2/gallery/111x185/sobaki-yumor-zhivotnye-37547.jpg
- a####.####.org/androidgame_img/need_for_speed_most_wanted/110_300_1/1_need_for_speed_most_wanted.jpg
- a####.####.org/androidgame_img/angry_mafia_fighter_attack_3d/thumbs/angry_mafia_fighter_attack_3d.jpg
- a####.####.org/_/img/youtube-bg-frame.png
- p####.####.org/p457-android-431/
- a####.####.org/pic/v2/gallery/111x185/fon-39328.jpg
- a####.####.org/androidgame_img/wwe_2k/thumbs/wwe_2k.jpg
- a####.####.org/pic/v2/gallery/111x185/risunki-sobaki-zhivotnye-39191.jpg
- a####.####.org/androidgame_img/bit_heroes/thumbs/bit_heroes.jpg
- a####.####.org/androidgame_img/grand_theft_auto_iii/thumbs/grand_theft_auto_iii.jpg
- pag####.####.com/pagead/js/adsbygoogle.js
- pro-tan####.ru/tds/YYfKZ5
- a####.####.org/pic/v2/gallery/111x185/multfilmy-38334.jpg
- a####.####.org/androidgame_img/grand_theft_auto_vice_city/110_300_1/3_grand_theft_auto_vice_city.jpg
- a####.####.org/pic/v2/gallery_blur/111x185/devushki-erotika-lyudi-39316.jpg
- a####.####.org/androidgame_img/masters_of_elements/real/en/9_masters_of_elements.jpg
- a####.####.org/pic/v2/gallery/111x185/arhitektura-mosty-noch-pejzazh-39127.jpg
- googlet####.com/tag/js/gpt.js
- google-####.com/collect?v=####&_v=####&a=####&t=####&_s=####&dl=####&ul=####&de=####&dt=####&sd=####&sr=####&vp=####&je=####&_u=####&jid=####&cid=####...
- a####.####.org/androidgame_img/infinity_trick/thumbs/infinity_trick.jpg
- a####.####.org/pic/v2/gallery/111x185/avto-transport-39306.jpg
- a####.####.org/pic/v2/gallery/111x185/fon-kino-38862.jpg
- a####.####.org/artists/50x50/1071_beyonce_ringtone.jpg
- google-####.com/analytics.js
- cou####.####.ru/hit;m_mob_org?t42.3;r####
- a####.####.org/pic/v2/gallery/111x185/oshki_oty_otiki-zhivotnye-39321.jpg
- a####.####.org/androidgame_img/grand_theft_auto_iii/110_300_1/1_grand_theft_auto_iii.jpg
- a####.####.org/pic/v2/gallery/111x185/anime-devushki-39326.jpg
- a####.####.org/_/img/youtube-bg-filler.png
- a####.####.org/pic/v2/gallery/111x185/abstrakciya-fon-39124.jpg
- a####.####.org/androidgame_img/masters_of_elements/real/en/8_masters_of_elements.jpg
- a####.####.org/androidgame_img/wwe_2k/110_300_1/1_wwe_2k.jpg
- a####.####.org/androidgame_img/grand_theft_auto_vice_city/thumbs/grand_theft_auto_vice_city.jpg
- a####.####.org/artists/50x50/1397_eminem_ringtone.jpg
- a####.####.org/androidgame_img/pes_2012_pro_evolution_soccer/thumbs/pes_2012_pro_evolution_soccer.jpg
- a####.####.org/pic/v2/gallery/111x185/ara_roft_ashititelnica_robnic_lara_croft_tomb_raider-igry-39302.jpg
- a####.####.org/artists/50x50/2293_rihanna_ringtone.jpg
- a####.####.org/artists/50x50/10860_psy_ringtone.jpg
- a####.####.org/pic/v2/gallery_blur/111x185/anime-devushki-erotika-39315.jpg
- cou####.####.ru/hit;mob-org?t44.1;r####
- a####.####.org/androidgame_img/need_for_speed_most_wanted/thumbs/need_for_speed_most_wanted.jpg
- a####.####.org/pic/v2/gallery/111x185/avto-transport-39308.jpg
- a####.####.org/androidgame_img/grand_theft_auto_san_andreas/110_300_1/1_grand_theft_auto_san_andreas.jpg
- a####.####.org/androidgame_img/gangstar_rio_city_of_saints/thumbs/gangstar_rio_city_of_saints.jpg
- a####.####.org/artists/50x50/1932_lady_gaga_ringtone.png
- a####.####.org/pic/v2/gallery/111x185/bozhi_korovki-nasekomye-39293.jpg
Запросы HTTP POST:
- p####.####.org/xrequest/phonePanel/getPlatformList/
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/cache/webviewCacheChromium/f_00002f
- /data/data/####/cache/webviewCacheChromium/f_00002e
- /data/data/####/cache/webviewCacheChromium/f_00002d
- /data/data/####/cache/webviewCacheChromium/f_00002c
- /data/data/####/cache/webviewCacheChromium/f_00002b
- /data/data/####/cache/webviewCacheChromium/f_00002a
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/cache/webviewCacheChromium/f_00000e
- /data/data/####/cache/webviewCacheChromium/f_00000d
- /data/data/####/cache/webviewCacheChromium/f_00000f
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/f_000030
- /data/data/####/cache/webviewCacheChromium/f_000031
- /data/data/####/cache/webviewCacheChromium/f_000018
- /data/data/####/cache/webviewCacheChromium/f_000019
- /data/data/####/cache/webviewCacheChromium/f_000016
- /data/data/####/cache/webviewCacheChromium/f_000017
- /data/data/####/cache/webviewCacheChromium/f_000014
- /data/data/####/cache/webviewCacheChromium/f_000015
- /data/data/####/cache/webviewCacheChromium/f_000012
- /data/data/####/cache/webviewCacheChromium/f_000013
- /data/data/####/cache/webviewCacheChromium/f_000010
- /data/data/####/cache/webviewCacheChromium/f_000011
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/code_cache/secondary-dexes/####-1.apk.classes2037573823.zip
- /data/data/####/files/asdfg
- /data/data/####/cache/webviewCacheChromium/f_000029
- /data/data/####/databases/webview.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/shared_prefs/multidex.version.xml
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/f_00001f
- /data/data/####/shared_prefs/####_preferences.xml
- /data/data/####/cache/webviewCacheChromium/f_00001d
- /data/data/####/cache/webviewCacheChromium/f_00001e
- /data/data/####/cache/webviewCacheChromium/f_00001b
- /data/data/####/cache/webviewCacheChromium/f_00001c
- /data/data/####/cache/webviewCacheChromium/f_00001a
- /data/data/####/cache/webviewCacheChromium/f_000027
- /data/data/####/cache/webviewCacheChromium/f_000026
- /data/data/####/cache/webviewCacheChromium/f_000025
- /data/data/####/cache/webviewCacheChromium/f_000024
- /data/data/####/cache/webviewCacheChromium/f_000023
- /data/data/####/cache/webviewCacheChromium/f_000022
- /data/data/####/cache/webviewCacheChromium/f_000021
- /data/data/####/cache/webviewCacheChromium/f_000020
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000028
- /data/data/####/shared_prefs/####_preferences.xml.bak
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/cache/webviewCacheChromium/index
- /data/data/####/app_app_apk/qdwlbpjxyuui.dat.jar
Другие:
Использует права администратора.
Может автоматически отправлять СМС-сообщения.
