Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.HiddenAds.67.origin
Сетевая активность:
Подключается к:
- s####.####.com
- u####.####.com
- lo####.####.net
- o####.####.com
- a####.####.net
- p####.####.com
- c####.####.com
- a####.####.net:20001
- lo####.####.com
- a####.####.com
Запросы HTTP GET:
- a####.####.net/api/v2/native/get?dml=####&dt=####&nt=####&mcc=####&bast=####&aid=####&lang=####&adnum=####&screen_w=####&img_rule=####&icc=####&token=...
- lo####.####.com/android/v1/impression?slot=####&adtype=####&offer=####&imp=####&channel=####&server_id=####&sv=####&method=####&pck=####&doimp=####&pk...
- a####.####.com/adunion/slot/getSrcPrio?h=####&w=####&model=####&vendor=####&sdk=####&dpi=####&sv=####&svn=####&pkg=####&v=####&vn=####&op=####&locale=...
- u####.####.com/setting/grobal_strategy?p=####&hp=####&l=####&c=####&prod=####&svn=####
- c####.####.com/upload/pname_md5_version.zip
- a####.####.com/service/p2psearch.php?adnum=####&os=####&ngp=####&aid=####&sid=####&udid=####&icc=####&pk=####&v=####&qk=####&dmf=####&dml=####&dpd=###...
- a####.####.com/p2pconfig?slotId=####
- a####.####.com/detail/getOfferListNew?start=####&limit=####&picsize=####&minsdk=####&uuid=####&aaid=####&adid=####&product=####&sub_product=####&devel...
- lo####.####.com/android/v1/impression?country=####&pn=####&user_id=####&ran=####&platform=####&gaid=####&tz=####&osv=####&dt=####&nt=####&aid=####&ime...
- a####.####.net:20001/api/v2/template/get?slot_id=####&update_time=####
- a####.####.com/strategy/api/v1/rule/get?p=####&hp=####&l=####&c=####&prod=####&svn=####&sv=####&nv=####
- a####.####.net/api/v2/ad/get?dml=####&dt=####&nt=####&mcc=####&bast=####&aid=####&lang=####&adnum=####&adcat=####&screen_w=####&img_rule=####&icc=####...
- a####.####.com/p2psearch.php?adnum=####&os=####&ngp=####&aid=####&sid=####&udid=####&icc=####&pk=####&v=####&qk=####&dmf=####&dml=####&dpd=####&pb_cid...
Запросы HTTP POST:
- p####.####.com/service/rnew
- p####.####.com/nineapps/updateurl
- c####.####.com/switch
- lo####.####.net/android/v2/click_redirect
- s####.####.com/cgi-bin-py/ad_sdk.cgi?ty=####&enc=####&bt=####
- lo####.####.net/debug/v2/android
- o####.####.com/app/update
Изменения в файловой системе:
Создает следующие файлы:
- /sdcard/._system.dat
- /data/data/####/shared_prefs/####_dna.xml
- /data/data/####/shared_prefs/apsad.xml
- /data/data/####/cache/NanoHTTPD--1339136363
- /sdcard/._driver.dat
- /data/data/####/shared_prefs/####_prefs.xml.bak
- /data/data/####/shared_prefs/apsad.xml.bak
- /data/data/####/shared_prefs/aps.xml
- /data/data/####/shared_prefs/DailyCount.xml
- /data/data/####/shared_prefs/_toolbox_prefs.xml
- /data/data/####/shared_prefs/paxr_sh.xml.bak
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/shared_prefs/postTime.xml
- /sdcard/Android/data/System/local/_system.dat
- /data/data/####/databases/cc/cc.db
- /data/data/####/cache/webviewCacheChromium/data_2
- /sdcard/.androidsystem/.files/gads.db
- /sdcard/.aio.dat
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/files/du.lock
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /sdcard/Android/data/System/local/aio.dat
- /data/data/####/files/google.db
- /data/data/####/shared_prefs/AdsBusiness-data.xml
- /data/data/####/databases/cc/cc.db-journal
- /data/data/####/shared_prefs/umeng_general_config.xml
- /data/data/####/databases/du_ad_ts.db-journal
- /sdcard/.lut
- /sdcard/Android/data/System/local/_android.dat
- /data/data/####/shared_prefs/FBAdPrefs.xml
- /data/data/####/shared_prefs/apscomm.xml
- /sdcard/Download/ver_md_dir/pname_md5_version.txt
- /data/data/####/databases/historydatabases.db-journal
- /data/data/####/shared_prefs/TOKEN.xml
- /data/data/####/app_mbj/dex/classes.zip
- /data/data/####/shared_prefs/SDKIDFA.xml
- /data/data/####/shared_prefs/ct_default.xml
- /data/data/####/files/mobclick_agent_cached_####306
- /sdcard/Download/ver_md_dir/mv.ini
- /data/data/####/databases/webview.db-journal
- /sdcard/Download/D6FE2A06C5424F54805F4A1151DCDEB0
- /data/data/####/shared_prefs/aps.xml.bak
- /sdcard/baidu/AndroidStore/http_cache/journal.tmp
- /sdcard/._android.dat
- /sdcard/baidu/.cuid
- /sdcard/Android/data/System/local/_driver.dat
- /data/data/####/databases/search.db-journal
- /data/data/####/shared_prefs/####_prefs.xml
- /sdcard/Android/data/####/cache/.nomedia
- /data/data/####/shared_prefs/umeng_general_config.xml.bak
- /data/data/####/shared_prefs/andou_share.xml
- /data/data/####/shared_prefs/appsflyer-data.xml.bak
- /data/data/####/shared_prefs/paxr_sh.xml
- /sdcard/Android/data/System/local/lut
- /data/data/####/files/shuzilm.db
- /data/data/####/shared_prefs/appsflyer-data.xml
- /data/data/####/shared_prefs/AdsBusiness-data.xml.bak
- /data/data/####/shared_prefs/com.facebook.ads.FEATURE_CONFIG.xml
- /data/data/####/cache/webviewCacheChromium/index
- /data/data/####/shared_prefs/andou_share.xml.bak
Другие:
Может автоматически отправлять СМС-сообщения.
