Android.Packed.20179

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.Xiny.65.origin

Сетевая активность:

Подключается к:

s####.####.com
c####.####.com

Запросы HTTP POST:

c####.####.com/pop/gd
c####.####.com/pop/up
s####.####.com/cxpt/ncp.action?requestId=####
c####.####.com/pop/gc

Изменения в файловой системе:

Создает следующие файлы:

/data/data/####/shared_prefs/ki.xml
/data/data/####/files/snail_data/ar-IWnNfy6ETh_pY/cAxY5kEtnA9aAxkcPKKnGJ7S1uc=
/data/data/####/shared_prefs/fsappnfo_pre.xml.bak
/data/data/####/files/snail_data/GS17B0Iaw5miZ3PIUouskQ==/apk_app_inter/com.droid.snailw/lib/libsnail_x.so
/data/data/####/databases/eca.db-journal
/data/data/####/shared_prefs/vgp_id.xml
/data/data/####/shared_prefs/fstrategy_pre.xml
/data/data/####/shared_prefs/vgp_id.xml.bak
/sdcard/Download/cxc/time.dat
/data/data/####/files/snail_data/GS17B0Iaw5miZ3PIUouskQ==/apk_app/com.droid.snailw/com.droid.snailw.apk
/data/data/####/files/snail_data/GS17B0Iaw5miZ3PIUouskQ==/APK_RUNNER_DB-journal
/data/data/####/files/snail_data/GS17B0Iaw5miZ3PIUouskQ==/apk_app_data/com.droid.snailw/shared_prefs/cc1.xml
/data/data/####/app_l/n
/data/data/####/shared_prefs/fsappnfo_pre.xml
/data/data/####/shared_prefs/fsconf_pre.xml.bak
/data/data/####/shared_prefs/eck.xml
/data/data/####/.lock
/data/data/####/app_r/c.jar
/data/data/####/shared_prefs/fsinfo_pre.xml
/sdcard/Android/data/code/CX.DAT
/data/data/####/shared_prefs/eck.xml.bak
/data/data/####/files/snail_data/KEfZCdOKUz82ENpr/c1.r0
/data/data/####/databases/cxcdownloads
/data/data/####/databases/fs_download.db-journal
/data/data/####/files/snail_data/GS17B0Iaw5miZ3PIUouskQ==/apk_app/com.droid.snailw/app_ext_info.prop
/data/data/####/files/j.jar
/data/data/####/files/snail_data/GS17B0Iaw5miZ3PIUouskQ==/apk_app/com.droid.snailw/lib/libsnail_x.so
/data/data/####/daemon
/data/data/####/databases/cxcdownloads-journal
/data/data/####/files/snail_data/ar-IWnNfy6ETh_pY/tYDDNm8S8PJmBHVCxbe9QVp4nLOjmMYU
/data/data/####/shared_prefs/fsconf_pre.xml
/data/data/####/files/snail_data/GS17B0Iaw5miZ3PIUouskQ==/apk_app/com.droid.snailw/com.droid.snailw.dex
/data/data/####/databases/ecd.db-journal
/data/data/####/app_r/t