Android.Packed.19882

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.MobiDash.1.origin

Сетевая активность:

Подключается к:

d239g0z####.####.net
newfeat####.####.com
f####.####.com
s####.####.com
cdn-hig####.####.com

Запросы HTTP GET:

d239g0z####.####.net/featurescreen/3DBowling_l.jpg
cdn-hig####.####.com/impact/images/117070/1e44af830e424cd1/600x800.jpg
cdn-hig####.####.com/store-icons/66d6ab55-c614-4702-a032-9514f3248735.png
d239g0z####.####.net/icons/icon_3DPoolBall.png
cdn-hig####.####.com/impact/images/117070/3b1a2e25089d889f/800x600.jpg
cdn-hig####.####.com/impact/videos/117070/079846e7f8bd43e3/20170315/m31-1000.mp4

Запросы HTTP POST:

f####.####.com/feature_server/geo-ip/test.php
s####.####.com/HWStats.cgi
f####.####.com/feature_server/fullScreen/get.php
newfeat####.####.com/featureview/getfeatureview/
newfeat####.####.com/featureview/gettime/

Изменения в файловой системе:

Создает следующие файлы:

/data/data/####/files/UnityAdsWebApp.html
/data/data/####/files/UnityAdsTest.txt
/data/data/####/app_sslcache/h.online-metrix.net.443
/data/data/####/files/UnityAdsCache-2e56195b8dda2aa95f8ba374191b00aaca99ff6ebf509f07e6d308ab3cd15b38.png
/data/data/####/files/file
/data/data/####/files/.flurrydatasenderblock.00c6c782-a404-4b65-8517-d7f52a58e8b7
/data/data/####/files/.FlurrySenderIndex.info.AnalyticsData_FTPNKYT6VNT2R536HD4G_172
/data/data/####/files/.FlurrySenderIndex.info.AnalyticsMain
/data/data/####/files/aHR0cDovL2QyMzlnMHo2N2pjdGVkLmNsb3VkZnJvbnQubmV0L2ZlYXR1cmVzY3JlZW4vM0RCb3dsaW5nX2wuanBn
/data/data/####/shared_prefs/SponsorPayAdvertiserState.xml
/data/data/####/cache/webviewCacheChromium/data_3
/data/data/####/cache/webviewCacheChromium/data_2
/data/data/####/cache/webviewCacheChromium/data_1
/data/data/####/cache/webviewCacheChromium/data_0
/data/data/####/databases/webviewCookiesChromium.db-journal
/data/data/####/code_cache/secondary-dexes/tmp-####-1.apk.classes1483538099.zip
/data/data/####/files/UnityAdsCache-4c1b7761c1b2a7f798c4d6f84cc3e1ace834149b2c99ae81ca9908ecd56d944b.mp4
/data/data/####/files/.flurryagent.37adca07
/data/data/####/shared_prefs/com.google.android.gms.analytics.prefs.xml.bak
/data/data/####/files/aHR0cDovL2QyMzlnMHo2N2pjdGVkLmNsb3VkZnJvbnQubmV0L2ljb25zL2ljb25fM0RQb29sQmFsbC5wbmc=
/data/data/####/files/UnityAdsStorage-public-data.json
/data/data/####/shared_prefs/com.google.android.gms.analytics.prefs.xml
/data/data/####/shared_prefs/####_preferences.xml
/data/data/####/app_doodlemobile/analytics/1485417841821.log
/data/data/####/databases/webview.db-journal
/data/data/####/cache/ads-1085675228.jar
/data/data/####/shared_prefs/SponsorPayPublisherState.xml
/data/data/####/shared_prefs/####.xml
/data/data/####/shared_prefs/.dmgames_prefs.xml
/data/data/####/files/UnityAdsCache-7a16508c5e45be9ca21a6fd3d25b67868a7b5cbcab566b243bdba5b7803bf840.jpg
/data/data/####/shared_prefs/####_preferences.xml.bak
/data/data/####/files/gaClientId
/data/data/####/files/UnityAdsStorage-private-data.json
/data/data/####/app_app_apk/tennis.dat.jar
/data/data/####/code_cache/secondary-dexes/MultiDex.lock
/data/data/####/shared_prefs/ThreatMetrixMobileSDK.xml
/data/data/####/databases/google_analytics_v4.db-journal
/data/data/####/cache/ApplicationCache.db-journal
/data/data/####/shared_prefs/multidex.version.xml
/data/data/####/cache/webviewCacheChromium/index
/data/data/####/shared_prefs/.dmgames_prefs.xml.bak
/data/data/####/files/UnityAdsCache-207e0b9ddf9f01d48d7bf650ec2802bf71372f5cb11e6729f5c149801019592c.jpg