Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.SmsSpy.2599
Сетевая активность:
Подключается к:
- 2####.####.105
- d####.####.com
- 2####.####.105:83
- v####.com:81
- v####.com
Запросы HTTP GET:
- 2####.####.105/res/upload/contents/201606/30/201606301553156429/309_1.jpg?1467273####
- 2####.####.105/res/upload/contents/201606/30/201606301553113657/309_1.jpg?1467273####
- 2####.####.105/res/upload/contents/201606/30/20160630155313977/309_1.jpg?1467273####
- 2####.####.105/res/upload/contents/201606/30/201606301553087495/309_1.jpg?1467273####
- 2####.####.105/res/upload/contents/201606/30/201606301553227014/309_1.jpg?1467273####
- 2####.####.105/mediacontents/upload/contents/201606/30/201606301553202538/7.mp4?n=####
- 2####.####.105/res/upload/contents/201606/30/201606301553182653/309_1.jpg?1467273####
- 2####.####.105/res/upload/contents/201505/29/20150529173434875/308.jpg?1446098####
- 2####.####.105/res/upload/contents/201606/30/201606301553202538/309_1.jpg?1467273####
- 2####.####.105:83/res/upload/contents/201606/30/201606301553034680/309_1.jpg?1467273####
- 2####.####.105/mediacontents/upload/contents/201606/30/20160630155313977/7.mp4?n=####
- 2####.####.105/mediacontents/upload/contents/201606/30/201606301553182653/7.mp4?n=####
- 2####.####.105/mediacontents/upload/contents/201606/30/201606301553156429/7.mp4?n=####
- 2####.####.105/res/upload/contents/201606/30/201606301553068533/309_1.jpg?1467273####
- v####.com/vt/py/xyzplay?sv=####&ch=####&ont=####&cproid=####&btid=####&cid=####&wbid=####&loop=####&f=####&cipher=####&w=####&h=####&nt=####&xx=####&n...
- 2####.####.105/mediacontents/upload/contents/201606/30/201606301553087495/7.mp4?n=####
- v####.com:81/vt/py/preln?cipher=####&uflag=####&w=####&h=####&nt=####&xx=####&ntg=####&tmv=####&ua=####&fmt=####&sv=####
- 2####.####.105/mediacontents/upload/contents/201606/30/201606301553113657/7.mp4?n=####
Запросы HTTP POST:
- d####.####.com/
Изменения в файловой системе:
Создает следующие файлы:
- /sdcard/moonvideo/20160630155313977.mp4
- /data/data/####/files/image-1326525898
- /data/data/####/shared_prefs/####_preferences.xml
- /data/data/####/files/vs_filter.txt
- /sdcard/moonvideo/201606301553182653.mp4
- /data/data/####/files/image-2070185270
- /data/data/####/files/b1/yong.dat
- /data/data/####/files/b1/main/aknfile_standalone_ptl.dat
- /data/data/####/files/image-1583276421
- /data/data/####/files/image1131715371
- /sdcard/moonvideo/201606301553113657.mp4
- /data/data/####/shared_prefs/statistics_soft_list_time.xml
- /data/data/####/shared_prefs/AUTO_UPDATE_DICT.xml
- /data/data/####/shared_prefs/iapppay_config.xml
- /data/data/####/files/vs_num.txt
- /data/data/####/files/image752895236
- /data/data/####/files/image-1238884650
- /data/data/####/files/image-1981291394
- /sdcard/moonvideo/201606301553087495.mp4
- /data/data/####/shared_prefs/device_id.xml
- /data/data/####/files/image-2113868866
- /sdcard/moonvideo/201606301553202538.mp4
- /data/data/####/shared_prefs/leku.xml
- /data/data/####/files/image-232831694
- /sdcard/moonvideo/201606301553156429.mp4
- /data/data/####/shared_prefs/user_profile.xml
- /data/data/####/files/image754040851
- /data/data/####/databases/downloadProvider.db-journal
- /data/data/####/shared_prefs/mService.xml
Другие:
Может автоматически отправлять СМС-сообщения.
