Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.1.origin
Сетевая активность:
Подключается к:
- g####.####.cn
- x####.####.mobi
- i####.####.com
- recom####.####.mobi
- a####.####.mobi
- adma####.####.com
Запросы HTTP GET:
- a####.####.mobi/images/icon3/liveleak-2.png
- a####.####.mobi/images/icon3/dailytube-2.png
- i####.####.com/vi/XIuBENnJ_j4/mqdefault.jpg
- a####.####.mobi/images/icon3/mobango-2.png
- a####.####.mobi/images/icon3/whatsappdaily-2.png
- a####.####.mobi/images/icon3/tumblr-2.png
- a####.####.mobi/images/icon3/goplay-2.png
- a####.####.mobi/images/icon3/freeappstore-2.png
- a####.####.mobi/images/gift_icon20161118.png
- a####.####.mobi/images/icon3/mrvideo-2.png
- a####.####.mobi/images/icon3/mp3jugaad-2.png
- a####.####.mobi/images/icon3/vine-2.png
- a####.####.mobi/images/icon3/songmazaa-2.png
- a####.####.mobi/images/icon3/imdb-2.png
- a####.####.mobi/images/icon3/instagram-2.png
- i####.####.com/vi/Ix8DCqMVjxM/mqdefault.jpg
- a####.####.mobi/images/icon3/tubidy-2.png
Запросы HTTP POST:
- adma####.####.com/usetting/v1/fetch_config
- a####.####.mobi/update_list
- a####.####.mobi/url_check
- a####.####.mobi/update_get
- a####.####.mobi/check_nav
- a####.####.mobi/gcm_conf_get
- a####.####.mobi/signin
- x####.####.mobi/allhotkey
- a####.####.mobi/setup
- a####.####.mobi/domain
- g####.####.cn/collect?zip=####&pf=####&pn=####&ve=####&vc=####&sdk_ve=####&sdk_vc=####&sf=####&app=####&uuid=####&vno=####&chk=####
- a####.####.mobi/welcome_get2
- a####.####.mobi/pingv2
- recom####.####.mobi/video_recommend_list
- a####.####.mobi/get_nav
Изменения в файловой системе:
Создает следующие файлы:
- /sdcard/VidMate/data/bin.-1544841859
- /data/data/####/files/VMDataList.db
- /sdcard/VidMate/data/bin.-412544119
- /sdcard/Android/data/####/cache/1111478581.tmp
- /sdcard/VidMate/data/bin.-800672761
- /data/data/####/shared_prefs/Alvin2.xml
- /sdcard/VidMate/data/bin.-1026730799
- /sdcard/VidMate/data/bin.-1782377034
- /data/data/####/cache/webviewCacheChromium/data_3
- /sdcard/Android/data/####/cache/1621214789
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/databases/pushmessage-journal
- /sdcard/VidMate/data/bin.-1472237808
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /sdcard/VidMate/data/bin.919189290
- /sdcard/VidMate/data/bin.-1224419390
- /sdcard/VidMate/data/bin.-278146126
- /sdcard/VidMate/data/bin.1010072486
- /sdcard/Android/data/####/cache/2119557456.tmp
- /sdcard/VidMate/data/bin.-513665842
- /data/data/####/shared_prefs/multidex.version.xml
- /sdcard/VidMate/data/bin.230529367
- /sdcard/VidMate/data/bin.-1444304893
- /data/data/####/files/stash/ECPMD-2083-1485417897005
- /sdcard/Android/data/####/cache/-1725509009
- /sdcard/.DataStorage/ContextData.xml
- /sdcard/VidMate/data/bin.1389311627
- /data/data/####/files/www.sss.file
- /data/data/####/shared_prefs/p_vidmate.xml
- /data/data/####/databases/webview.db-journal
- /sdcard/VidMate/data/bin.-1574310414
- /sdcard/VidMate/data/bin.-741659545
- /sdcard/VidMate/cache/597493799
- /data/data/####/files/history.db
- /data/data/####/files/gaClientId
- /sdcard/VidMate/data/bin.2100872772
- /sdcard/Android/data/####/cache/1390306468.tmp
- /sdcard/VidMate/data/bin.570895930
- /sdcard/Android/data/####/cache/241514297.tmp
- /sdcard/VidMate/data/bin.-2070460954
- /sdcard/Android/data/####/cache/-2142868300.tmp
- /sdcard/VidMate/log/1485417899063
- /sdcard/VidMate/data/bin.1610459767
- /sdcard/VidMate/data/bin.1716934100
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /sdcard/Android/data/####/cache/1108095220
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/cache/webviewCacheChromium/f_00000e
- /data/data/####/cache/webviewCacheChromium/f_00000d
- /data/data/####/cache/webviewCacheChromium/f_00000f
- /sdcard/VidMate/data/bin.-671658460
- /sdcard/VidMate/data/bin.2076957192
- /sdcard/VidMate/data/bin.693631636
- /data/data/####/cache/webviewCacheChromium/data_2
- /sdcard/Android/data/####/cache/-2008801442.tmp
- /sdcard/Android/data/####/cache/1454644443.tmp
- /data/data/####/databases/vidmate.db
- /sdcard/.UTSystemConfig/Global/Alvin2.xml
- /data/data/####/files/stash/PBUD-2083-1485417897005
- /sdcard/VidMate/cache/-2088103286
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/cache/webviewCacheChromium/f_000008
- /sdcard/VidMate/data/bin.578088182
- /data/data/####/cache/webviewCacheChromium/f_000001
- /sdcard/VidMate/data/bin.1364668828
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /sdcard/VidMate/data/bin.-883123340
- /data/data/####/cache/webviewCacheChromium/f_000006
- /sdcard/Android/data/####/cache/.nomedia
- /sdcard/Android/data/####/cache/394014458.tmp
- /data/data/####/code_cache/secondary-dexes/MultiDex.lock
- /data/data/####/shared_prefs/p_vidmate.xml.bak
- /data/data/####/cache/webviewCacheChromium/index
- /sdcard/Android/data/####/cache/1015478807.tmp
- /sdcard/VidMate/data/bin.-1648247619
- /sdcard/VidMate/data/bin.289312685
- /sdcard/VidMate/data/bin.-1793725307
- /sdcard/VidMate/data/bin.42982088
- /sdcard/VidMate/data/bin.859628415
- /data/data/####/cache/webviewCacheChromium/f_000012
- /data/data/####/cache/webviewCacheChromium/f_000013
- /data/data/####/cache/webviewCacheChromium/f_000010
- /data/data/####/cache/webviewCacheChromium/f_000011
- /data/data/####/files/observedFile
- /sdcard/Android/data/####/cache/2028145440.tmp
- /data/data/####/cache/webviewCacheChromium/f_000007
- /sdcard/VidMate/data/bin.686532630
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /sdcard/VidMate/data/bin.-1730210793
- /sdcard/VidMate/data/bin.2125480456
- /sdcard/VidMate/data/bin.965183625
- /sdcard/VidMate/data/bin.-1906250314
- /sdcard/VidMate/data/bin.-531083186
- /data/data/####/files/menu.db
- /sdcard/VidMate/data/bin.284768489
- /data/data/####/databases/google_analytics_v2.db-journal
- /sdcard/VidMate/data/bin.-1918398835
- /data/data/####/code_cache/secondary-dexes/tmp-####-1.apk.classes-1154545547.zip
- /sdcard/Android/data/####/cache/-948674819.tmp
- /data/data/####/shared_prefs/SMD####.xml
- /sdcard/VidMate/data/bin.293957621
- /sdcard/VidMate/data/2119837495
- /data/data/####/shared_prefs/####_preferences.xml
- /data/data/####/shared_prefs/com.google.android.gcm.xml
- /sdcard/VidMate/cache/2092946091
- /sdcard/VidMate/data/bin.-197998865
- /sdcard/Android/data/####/cache/-610032638.tmp
- /data/data/####/app_app_apk/vidmatefree.dat.jar
- /sdcard/VidMate/cache/1165619162
- /sdcard/VidMate/config/task-journal
- /data/data/####/shared_prefs/VidMate.xml.bak
- /sdcard/VidMate/data/bin.-1481878012
- /sdcard/VidMate/data/bin.-1256009472
- /sdcard/VidMate/data/bin.1120611423
- /data/data/####/shared_prefs/ContextData.xml
- /sdcard/Android/data/####/cache/1311859226
- /sdcard/VidMate/data/bin.660386629
- /data/data/####/shared_prefs/VidMate.xml
- /data/data/####/shared_prefs/AppD####.xml
- /sdcard/VidMate/data/bin.-2070376201
- /sdcard/VidMate/log/sub/1485417902246
- /data/data/####/shared_prefs/####_preferences.xml.bak
- /sdcard/Android/data/####/cache/-1551657241.tmp
- /sdcard/VidMate/data/bin.-1960654866
- /sdcard/VidMate/data/bin.-1115310979
- /sdcard/VidMate/data/bin.1535183609
- /sdcard/VidMate/data/bin.1077858207
- /data/data/####/databases/vidmate.db-journal
- /sdcard/VidMate/data/bin.-1769046480
- /sdcard/VidMate/data/bin.801553237
Другие:
Может автоматически отправлять СМС-сообщения.
