Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.DownLoader.455.origin
- Android.DownLoader.502.origin
Сетевая активность:
Подключается к:
- a####.####.com:8080
- f####.####.com
- o####.####.com
- a####.####.com
- f####.####.com:8080
Запросы HTTP GET:
- f####.####.com/apk/com.netease.dhxy.uc.apk
- a####.####.com/mutual/update?cpId=####
- f####.####.com:8080/logo/19992bb96f1741d8a65ed67c4a496731
- f####.####.com/thumbPic/5c2b12e4ad9b4dfd89b74b4d721ad950
- f####.####.com/logo/7f843032968a462cbc5985095449b59f
- f####.####.com/logo/fed7e6ac31634496adaef979f13015ef
- f####.####.com/ads/dbfe17faa2a942a3bc440737e6ab3b03
- f####.####.com/logo/236ec8375d684d07969a7308bc668e2b
- a####.####.com/home/recommendList?page=####
- a####.####.com/mutual/appRelated
- f####.####.com/thumbPic/42f9a34aa2a74ad68dd7e30498b39c12
- f####.####.com/thumbPic/086eb4a0d41d487c845c51ec830170b9
- f####.####.com/thumbPic/da6576cdc00a4b93b5d6c4d7c74b80e5
- a####.####.com/home/topAdvert
- a####.####.com/mutual/comments?page=####&appId=####
- f####.####.com/ads/ddc88fa77cc24498ad0497b72c3571a1
- f####.####.com/logo/cf4fe59e15fa4c748f1a53457ea51c82
- f####.####.com/thumbPic/9661911334934ba197718756f021d25d
- f####.####.com/logo/e4f39fa357604d29b8190e42d3ee698f
- f####.####.com/ads/3f886233b0ba457ebf5c80c0d594cea0
- a####.####.com/mutual/picInfo?appId=####
- f####.####.com/thumbPic/bf6d92b3f3e54414a89f037aca88c7ad
- f####.####.com/thumbPic/0c41de7f290f438dacbf52cbb40377e3
- f####.####.com/thumbPic/58c0fb212dd345498b601af1ad06ac7e
Запросы HTTP POST:
- a####.####.com:8080/mutual/openClient
- a####.####.com/app_logs
- a####.####.com/mutual/openClient
- o####.####.com/check_config_update
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/files/11485415602667.jar
- /data/data/####/databases/market_download_db-journal
- /data/data/####/shared_prefs/b1356507059351895.xml.bak
- /sdcard/Android/data/####/cache/uil-images/4pcxfjlumnzqe6cl2f8i84du7
- /sdcard/Android/data/####/cache/uil-images/1wbjkr4emxl4p6zqqe3ycrimb
- /data/data/####/databases/0000.db-journal
- /data/data/####/files/00.jar
- /sdcard/Android/data/####/cache/uil-images/70gn1yzgzwpr3umh4zysdq8u2
- /data/data/####/shared_prefs/i_fionf_pre356507059351895.xml.bak
- /sdcard/Android/data/####/cache/uil-images/3rxhq1rw7bmhcwyr5mkiy63fh
- /sdcard/Android/data/####/cache/uil-images/4twy03x1m869n8x4mudsf2wto
- /sdcard/Android/data/####/cache/uil-images/4qjlefsdp7uootp8lqua5odv9
- /sdcard/Android/data/####/cache/uil-images/z1wynz24njgzf3870asf2mvg
- /sdcard/Android/data/####/cache/uil-images/1mqlqr6lhmno7qcr74ger38i4
- /data/data/####/shared_prefs/umeng_general_config.xml
- /data/data/####/shared_prefs/c1356507059351895.xml
- /sdcard/Android/data/####/cache/uil-images/3e1x6n3ey7qmdvespqk1z8a4h
- /data/data/####/files/.imprint
- /data/data/####/shared_prefs/market.xml
- /sdcard/Android/data/####/cache/uil-images/7e7h18ceqtxiz1seyzpsk5l8z
- /sdcard/Android/data/####/cache/uil-images/38ljmcwfa7126ubsg1nndezyu
- /data/data/####/shared_prefs/b1356507059351895.xml
- /data/data/####/shared_prefs/mobclick_agent_online_setting_####.xml.bak
- /data/data/####/databases/E_ID356507059351895.db-journal
- /sdcard/Android/data/####/cache/uil-images/4tvgopctot0ck9ydfz9c5c6u
- /data/data/####/shared_prefs/i.xml
- /data/data/####/databases/downloads.db-journal
- /data/data/####/shared_prefs/a1356507059351895.xml
- /sdcard/Android/data/####/cache/uil-images/6owv85vczo33tvvi03p7h4ymv
- /data/data/####/shared_prefs/i_fionf_pre356507059351895.xml
- /data/data/####/shared_prefs/a1356507059351895.xml.bak
- /data/data/####/files/umeng_it.cache
- /data/data/####/shared_prefs/a1.xml
- /sdcard/Android/data/####/cache/.nomedia
- /data/data/####/shared_prefs/umeng_general_config.xml.bak
- /sdcard/Android/data/####/cache/uil-images/1ij8jmb57p05bohocgigvstfy
- /data/data/####/shared_prefs/c1356507059351895.xml.bak
- /data/data/####/shared_prefs/mobclick_agent_online_setting_####.xml
- /sdcard/Android/data/####/cache/uil-images/4ojgbc4kwr6fv7sscfq7tlw7w
- /data/data/####/shared_prefs/market.xml.bak
- /data/data/####/files/11485415594779.jar
- /sdcard/Android/data/####/cache/uil-images/4t4p21fcdssvgysgw0kjurlal
Другие:
Может автоматически отправлять СМС-сообщения.
