Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.1.origin
Сетевая активность:
Подключается к:
- adw####.####.com
- z####.by
- 1####.####.220
- bi####.####.com
- r####.####.com
Запросы HTTP GET:
- r####.####.com/sound_off.png
- r####.####.com/nad?v1=####&model=####&dx=####&dy=####&accept=####&slot_count=####&v2=####&api_did=####&locale=####&app_version=####&network=####&revis...
- r####.####.com/2.0/ad?v1=####&model=####&etf=####&dx=####&dy=####&accept=####&v2=####&api_did=####&locale=####&app_version=####&network=####&revision=...
- r####.####.com/playable/RTB_Single_p_01.js
- r####.####.com/playable/playable_fallback.png
- r####.####.com/2.0/ad?v1=####&model=####&dx=####&dy=####&accept=####&v2=####&api_did=####&locale=####&app_version=####&network=####&revision=####&prel...
- 1####.####.220/ma/1.0/arj?af=####&app.bundle=####&app.name=####&auid=####&aus=####&c.appbundle=####&c.gender=####&crr=####&did.adid=####&ip=####&ju=##...
- r####.####.com/playable/KoA_V1_p_01.js
- r####.####.com/vid?clcode=####&event=####&placement=####&pv=####
- z####.by/mods/gunsmod.zip
- r####.####.com/playable/playable_loader.gif
- r####.####.com/imp?clcode=####&placement=####
- r####.####.com/1477689804_1024x768.mp4
- r####.####.com/playable/playable_close.png
- r####.####.com/jquery-2.1.1.min.js
- r####.####.com/playable/KoA_V1_l_01.js
- r####.####.com/playable/RTB_Single_l_01.js
- r####.####.com/sound_on.png
- r####.####.com/playable/c2_pathfind_02.min.js
- r####.####.com/nad?v1=####&model=####&dx=####&dy=####&accept=####&slot_count=####&v2=####&api_did=####&locale=####&app_version=####&ntfw=####&network=...
Запросы HTTP POST:
- bi####.####.com/bid
- r####.####.com/device?api_key=####
- r####.####.com/bidder/auction/appodeal
- adw####.####.com/api/v1/impressions/submit
- r####.####.com/pix?event=####&ts=####&platform=####&model=####&package_name=####&sdk_key=####&idfa=####&dnt=####&ia=####&api_did=####&brand=####&model...
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/shared_prefs/fiverocks.xml
- /data/data/####/files/Tapjoy/Cache/f2389f076324d476fca6986e4c026c94005b1cebbbad2eec4b1e695b9ddea1c1
- /data/data/####/shared_prefs/Appodeal.xml
- /data/data/####/files/metrica_client_data.db.lock
- /data/data/####/databases/metrica_client_data.db-journal
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/app_working/vungle.dex
- /data/data/####/shared_prefs/Appodeal.xml.bak
- /data/data/####/shared_prefs/####_servertimeoffset.xml
- /data/data/####/files/Tapjoy/Cache/170e6911596d9ba5eac01e3a20785818fec2e34de0ee553c6eefe5ee2696ba08
- /data/data/####/shared_prefs/freq.xml
- /sdcard/Android/data/####/files/al/playable_RTB_Single_l_01.js
- /data/data/####/shared_prefs/multidex.version.xml
- /data/data/####/databases/metrica_data.db-journal
- /data/data/####/databases/webview.db-journal
- /data/data/####/cache/1470286953684.jar
- /data/data/####/shared_prefs/tapjoyCacheData.xml.bak
- /sdcard/.appodeal
- /sdcard/Android/data/####/files/al/.nomedia
- /data/data/####/app_working/facebook.dex
- /sdcard/Android/data/####/files/al/playable_RTB_Single_p_01.js
- /data/data/####/shared_prefs/com.applovin.sdk.1.xml.bak
- /sdcard/Android/data/####/files/al/sound_on.png
- /data/data/####/cache/webviewCacheChromium/index
- /data/data/####/files/Tapjoy/Cache/bd610cffc3e0656f49ed1798a872c28ab7080613f46afc9e75212d1a92a5c4f6
- /sdcard/Android/data/####/files/al/1477689804_1024x768.mp4
- /data/data/####/files/file
- /data/data/####/files/Tapjoy/Cache/720f1c13bb5f274a42c765e1531f80cbfe3b9f2f173e0884a7251342ba52aca8
- /data/data/####/shared_prefs/####_startupserviceinfopreferences.xml
- /data/data/####/shared_prefs/####_migrationpreferences.xml
- /data/data/####/files/Tapjoy/Cache/9ecd3c9aa955cd01231e02151609196e302948deaa58643bf541ee180b0522d4
- /data/data/####/databases/db_metrica_####_20799a27-fa80-4b36-b2db-0f8141f24180-journal
- /data/data/####/shared_prefs/####_boundentrypreferences.xml
- /data/data/####/files/Tapjoy/Cache/ce474ca9929115d27d111456840875861155d65ed2597440016c9d821b1a88dc
- /data/data/####/files/Tapjoy/Cache/f9027d6142eee7f05b9477d1be4013394dc6dfb8ed10b2bf1876deb2e1aa16bd
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/databases/metrica_client_data.db
- /data/data/####/app_working/yandex.dex
- /data/data/####/files/Tapjoy/Cache/d4df85a13557f81dec31fa4f3e36410449fd46a0feeae980494f063eec9e1836
- /sdcard/Android/data/####/files/al/sound_off.png
- /data/data/####/code_cache/secondary-dexes/MultiDex.lock
- /data/data/####/app_fiverocks/install
- /data/data/####/files/Tapjoy/Cache/fcb4c0267f2b358bd223e03ea8b1f34d1571bf9d12bf0d0217b82a9ea11f9b69
- /data/data/####/files/credentials.dat
- /data/data/####/files/Tapjoy/Cache/6c974ead6b403a4ccc27ff1980e8b1f385e335f617df38276ae7fd36a13b45bd
- /data/data/####/cachegunsmod.zip
- /sdcard/Android/data/####/files/al/jquery-2.1.1.min.js
- /data/data/####/files/Tapjoy/Cache/90ae4ffba57afb37cb7e671ce2d5a8d80685ace9bf970bef13599833b5088e69
- /data/data/####/files/Tapjoy/Cache/ae6bc38af361a64d34222516d61ce883a148f02af1cbe74b3828dcd36dcdf205
- /data/data/####/shared_prefs/com.applovin.sdk.1.xml
- /data/data/####/app_working/tapjoy.dex
- /data/data/####/shared_prefs/com.applovin.sdk.impl.postbackQueue.domain.xml.bak
- /sdcard/Android/data/.nomedia
- /data/data/####/files/Tapjoy/Cache/c536f32f5f9f27437a094bebc7dccd76307ede5f715040e14fa75448ee9eb1cc
- /data/data/####/app_working/flurry.dex
- /data/data/####/shared_prefs/tapjoyCacheData.xml
- /data/data/####/app_working/adcolony.dex
- /sdcard/Android/data/####/files/al/playable_KoA_V1_p_01.js
- /data/data/####/shared_prefs/fiverocks.xml.bak
- /data/data/####/shared_prefs/appodeal.xml
- /data/data/####/files/Tapjoy/Cache/363fd2a890cfb629dc7aa8febfe5d4371581d327dde4ab5a080a24f27fbbfb83
- /data/data/####/app_fiverocks/events2-journal
- /data/data/####/cache/1470286953684.tmp
- /data/data/####/databases/db_metrica_####_13-journal
- /sdcard/games/MCPEmods/DesnoGuns_Mod.modpkg
- /data/data/####/shared_prefs/####_preferences.xml
- /data/data/####/app_working/revmob.dex
- /sdcard/Android/data/####/files/al/playable_KoA_V1_l_01.js
- /data/data/####/shared_prefs/com.applovin.interstitial.sharedpreferences.xml
- /sdcard/Android/data/####/files/al/playable_playable_fallback.png
- /data/data/####/code_cache/secondary-dexes/tmp-####-1.apk.classes-552799397.zip
- /sdcard/Android/data/####/files/al/playable_playable_close.png
- /data/data/####/shared_prefs/com.applovin.sdk.impl.postbackQueue.domain.xml
- /sdcard/Android/data/####/files/al/playable_c2_pathfind_02.min.js
- /data/data/####/code_cache/secondary-dexes/tmp-####-1.apk.classes2093793135.zip
- /data/data/####/files/Tapjoy/Cache/d4680d455a95c9ff6822ab0dc2f91dada368ce4c14ac1da5df9508dc2c85908f
- /sdcard/Android/data/####/files/al/playable_playable_loader.gif
- /data/data/####/databases/db_metrica_####-journal
- /data/data/####/shared_prefs/com.applovin.interstitial.sharedpreferences.xml.bak
- /data/data/####/files/Tapjoy/Cache/25e8b8ab02eccf9915da4e770222c806ac0e4d51640ce9a32191412ccfc6e83b
- /data/data/####/shared_prefs/tjcPrefrences.xml
- /data/data/####/shared_prefs/####_preferences.xml.bak
- /data/data/####/files/Tapjoy/Cache/b2dbf695282cf51e2a9df8b14b68d70b6bad94eed347aa291a697128a08c5640
- /data/data/####/app_app_apk/gqstudio.dat.jar
- /data/data/####/cache/ApplicationCache.db-journal
Другие:
Может автоматически отправлять СМС-сообщения.
