Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.Loki.15.origin
- Android.Loki.10.origin
Сетевая активность:
Подключается к:
- trac####.####.com
- 5####.####.183
- lo####.####.net
- i####.####.com
- t####.####.net
- apxadtr####.net
- y####.####.co
- a####.####.net
- e####.####.com
- set####.####.com
- sc####.####.com
- cdn####.####.com
- lo####.####.com
- n####.####.com
- c####.####.net
- a####.####.com
Запросы HTTP GET:
- c####.####.net/default/icon/100/100/cloudmobi/icon.png
- c####.####.net/games/icons/001/004/767/dimension_150x150.jpg?2017041####
- i####.####.com/7269053_offer_icon_image?version=####
- a####.####.net/api/v2/template/get?slot_id=####&update_time=####
- cdn####.####.com/cdn-adn/17/02/08/23/02/589b32eb4ea28.mp4
- 5####.####.183/ttc?h=####&p=####&q=####
- lo####.####.com/android/v1/click?slot=####&city=####®ion=####&adtype=...
- cdn####.####.com/cdn-adn/16/08/23/57bc509cb4018.mp4
- trac####.####.com/click?mb_pl=####&mb_nt=####&mb_campid=####&aff_sub=###...
- set####.####.com/rewardsetting?app_id=####&sign=####&platform=####&os_ve...
- a####.####.net/api/v2/native/get?dml=####&dt=####&nt=####&mcc=####&bast=...
- y####.####.co/media_center/1180ea2e-2242-43e7-b0d3-09212efbabf7692099831...
- a####.####.com/mpapi/ad?model=####&fomat=####&mcc=####&os_v=####&directi...
- c####.####.net/games/icons/001/018/235/dimension_150x150.jpg?2017041####
- c####.####.net/games/icons/001/013/426/dimension_150x150.jpg?2017041####
- set####.####.com/setting?app_id=####&sign=####&platform=####&os_version=...
- c####.####.net/games/icons/001/009/820/dimension_150x150.jpg?2017041####
- lo####.####.com/android/v1/impression?slot=####&city=####®ion=####&ad...
- c####.####.net/games/icons/001/012/172/dimension_150x150.jpg?2017041####
- e####.####.com/cfimp/kNhr9AIZZEbrDTbOxcSREaLq1-H3CFDC2OFuY4JkHngEyQYRttf...
- a####.####.net/api/v2/cache/get?dml=####&dt=####&nt=####&mcc=####&bast=#...
- t####.####.net/click/bulk?aid=####&aaid=####&pid=####&nid=####&puid=####...
- c####.####.net/games/icons/001/018/736/dimension_150x150.jpg?2017041####
- a####.####.com/v2/clickAd.jsp?siteId=####&cv1n=####&cv1v=####&campaignId...
- sc####.####.com/v1/scheme/app?model=####&mcc=####&os_v=####&direction=##...
- set####.####.com/appwall/setting?app_id=####&sign=####&platform=####&os_...
- n####.####.com/openapi/ad/v3?app_id=####&unit_id=####&sign=####&reqtype=...
- apxadtr####.net/iclk/redirect.php?apxcode=####&id=####&dv1=####&nw_sub_a...
- c####.####.net/games/icons/001/007/263/dimension_150x150.jpg?2017041####
- c####.####.net/games/icons/001/015/455/dimension_150x150.jpg?2017041####
- set####.####.com/rewardsetting?app_id=####&sign=####&unit_ids=####&platf...
- n####.####.com/openapi/ad/v3?app_id=####&unit_id=####&category=####&req_...
- y####.####.co/media_center/70a16146-e78c-437c-a3f5-4b532b1b8d2a195762731...
Запросы HTTP POST:
- a####.####.com/app_logs
- lo####.####.net/debug/v2/android
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/cache/imageLoader-cache/44e79f289822e63d93787664dd6fd472.1.tmp
- /data/data/####/files/VideoCache/88676699cb635606d194bbe2fb907b2b.mp4
- /data/data/####/app_indicators/indicator_p
- /data/data/####/databases/cc.db-journal
- /data/data/####/cache/imageLoader-cache/44e79f289822e63d93787664dd6fd472.0.tmp
- /data/data/####/cache/imageLoader-cache/3600246b6717bfa00acfc3969f91feb6.1.tmp
- /data/data/####/cache/imageLoader-cache/f5dac67d2d1ffd0a20bba0c79f5cc761.0.tmp
- /data/data/####/databases/ua.db
- /data/data/####/cache/imageLoader-cache/2c0779473fb4746263572ae1c6e9ddad.1.tmp
- /data/data/####/cache/imageLoader-cache/d0a98a8e2d910d5cfa2c4c6266f86b9e.0.tmp
- /data/data/####/files/VoRokqrfRWQGfgLddynamicloader.jar
- /data/data/####/files/unjwqrl/libVoRokqrfRWQGfgLddynamicloader.so
- /data/data/####/databases/cc.db
- /data/data/####/shared_prefs/mobvista.xml.bak
- /sdcard/VideoCache/6d9aab6cd242094bcd6fea511752a6d2.mp4
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/files/xyusUTVhUENJEEMidaemon.so
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/databases/mobpower.db-journal
- /data/data/####/cache/imageLoader-cache/8ea9d7aa6d7ad32885814e9bd8e2b071.0.tmp
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/cache/imageLoader-cache/journal.tmp
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/files/libiCbKoWheUCymZhxSbootstrap.so
- /data/data/####/cache/imageLoader-cache/f5dac67d2d1ffd0a20bba0c79f5cc761.1.tmp
- /data/data/####/cache/imageLoader-cache/913cb6c9d8f31b5dc59b7df2385743b4.1.tmp
- /data/data/####/databases/sp_db-journal
- /data/data/####/files/VideoCache/6d9aab6cd242094bcd6fea511752a6d2.mp4
- /data/data/####/shared_prefs/umeng_general_config.xml
- /data/data/####/files/unjwqrl/libHqGsvUJdJfBwCbhslala.so
- /data/data/####/files/.umeng/exchangeIdentity.json
- /data/data/####/shared_prefs/ct_default.xml
- /data/data/####/files/.imprint
- /data/data/####/shared_prefs/com.mobpower.xml.bak
- /data/data/####/cache/imageLoader-cache/d0a98a8e2d910d5cfa2c4c6266f86b9e.1.tmp
- /data/data/####/cache/imageLoader-cache/21670534532b4fcef888bb9445f4f119.0.tmp
- /data/data/####/cache/imageLoader-cache/624bb8860ad56ba924acced0463d0e2b.0.tmp
- /data/data/####/cache/imageLoader-cache/ec2ba9a9f8f5654c87a54d4c72e30f9c.1.tmp
- /data/data/####/files/HqGsvUJdJfBwCbhslala.jar
- /data/data/####/shared_prefs/TOKEN.xml
- /data/data/####/files/exid.dat
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/databases/mobvista.msdk.db-journal
- /data/data/####/cache/imageLoader-cache/a5f21ce783bcce2028c3ede31d4587d3.0.tmp
- /data/data/####/cache/imageLoader-cache/d776acd985114153e6a46018629f7f28.1.tmp
- /data/data/####/cache/imageLoader-cache/21670534532b4fcef888bb9445f4f119.1.tmp
- /data/data/####/cache/imageLoader-cache/913cb6c9d8f31b5dc59b7df2385743b4.0.tmp
- /data/data/####/shared_prefs/mobvista.xml
- /data/data/####/cache/imageLoader-cache/8ea9d7aa6d7ad32885814e9bd8e2b071.1
- /data/data/####/files/log/agent_log
- /data/data/####/files/blKljnTRtKVjcnAbbt.jar
- /data/data/####/shared_prefs/umeng_general_config.xml.bak
- /data/data/####/cache/imageLoader-cache/3600246b6717bfa00acfc3969f91feb6.0.tmp
- /data/data/####/databases/ua.db-journal
- /data/data/####/databases/bat_statistics.db-journal
- /data/data/####/cache/imageLoader-cache/ec2ba9a9f8f5654c87a54d4c72e30f9c.0.tmp
- /data/data/####/databases/webview.db-journal
- /data/data/####/files/umeng_it.cache
- /data/data/####/shared_prefs/com.mobpower.xml
- /data/data/####/cache/imageLoader-cache/ce8aba74b9c81c160aef80322369b7ac.1.tmp
- /data/data/####/cache/imageLoader-cache/a5f21ce783bcce2028c3ede31d4587d3.1.tmp
- /data/data/####/files/dkTRIxWAfNNBYEKjzxc.jar
- /data/data/####/cache/imageLoader-cache/624bb8860ad56ba924acced0463d0e2b.1.tmp
- /data/data/####/shared_prefs/postTime.xml
- /data/data/####/cache/imageLoader-cache/2c0779473fb4746263572ae1c6e9ddad.0.tmp
- /data/data/####/files/blKljnTRtKVjcnAbbt.dex
- /data/data/####/cache/imageLoader-cache/d776acd985114153e6a46018629f7f28.0.tmp
- /data/data/####/files/unjwqrl/libblKljnTRtKVjcnAbbt.so
- /data/data/####/files/log/crash_log
- /data/data/####/shared_prefs/sharedpreferences_batmobi_settings.xml
- /data/data/####/files/unjwqrl/libdkTRIxWAfNNBYEKjzxc.so
- /data/data/####/cache/webviewCacheChromium/index
- /data/data/####/cache/imageLoader-cache/ce8aba74b9c81c160aef80322369b7ac.0.tmp
- /data/data/####/app_indicators/indicator_d
Другие:
Может автоматически отправлять СМС-сообщения.
