Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.Triada.248.origin
- Android.Triada.226.origin
Сетевая активность:
Подключается к:
- statis####.####.com
- o####.####.com
- ser####.####.com
- a####.####.com
Запросы HTTP GET:
- ser####.####.com/res/ipingke/upload/theme/1431420656659..jpg
- ser####.####.com/res/ipingke/upload/theme/1407230885988..jpg
- ser####.####.com/res/ipingke/upload/theme/1434102291262..zip
- ser####.####.com/res/ipingke/upload/theme/1438591102514..jpg
- ser####.####.com/res/ipingke/upload/theme/1429079564019..jpg
- ser####.####.com/res/ipingke/upload/theme/1410923442135..jpg
- ser####.####.com/res/ipingke/upload/theme/1421138392471..jpg
- ser####.####.com/res/ipingke/upload/theme/1428048276179..jpg
- ser####.####.com/res/ipingke/upload/theme/1432800542030..jpg
- ser####.####.com/res/ipingke/upload/theme/1434102303743..jpg
- ser####.####.com/res/ipingke/upload/theme/1428632158339..jpg
- ser####.####.com/res/ipingke/upload/theme/1435226469993..jpg
- ser####.####.com/res/ipingke/upload/theme/1423812785468..jpg
- ser####.####.com/res/ipingke/upload/theme/1411456749668..jpg
- ser####.####.com/res/ipingke/upload/theme/1421979137238..jpg
- ser####.####.com/adsw/pk.html
- ser####.####.com/res/ipingke/upload/theme/1412250476755..jpg
Запросы HTTP POST:
- a####.####.com/app_logs
- ser####.####.com/doc/service/down/get_loading_config.json
- statis####.####.com/statistics/config.json
- ser####.####.com/doc/service/down/advertInfo.json
- ser####.####.com/doc/service/up/init.json
- statis####.####.com/statistics/init.json
- ser####.####.com/doc/service/down/lazy_suit_list.json
- statis####.####.com/statistics/oprdetail.json
- ser####.####.com/doc/service/down/user_info.json
- statis####.####.com/statistics/event.json
- o####.####.com/check_config_update
- ser####.####.com/doc/service/down/audit.json
- ser####.####.com/doc/service/down/loading_page.json
- ser####.####.com/doc/service/down/theme_classify_list.json
- statis####.####.com/statistics/pv_uv.json
- ser####.####.com/doc/service/down/theme_list_new.json
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/cache/volley/2040216336-537862227
- /data/data/####/databases/call_desk.db-journal
- /sdcard/syezon/pingke/show/v_cache/-96830522-484585506
- /data/data/####/style/preview/res/drawable/bird04.png
- /data/data/####/style/preview/res/drawable/pic01.png
- /data/data/####/style/preview/res/drawable/pic02.png
- /data/data/####/style/preview/res/drawable/refusal02.png
- /sdcard/syezon/pingke/show/v_cache/-96830522706666817
- /sdcard/syezon/pingke/show/list/cache/834c1b16bdcd232f497c28751a6649eb
- /data/data/####/style/preview/res/drawable/bird02.png
- /data/data/####/style/preview/res/drawable/bird03.png
- /data/data/####/style/preview/res/drawable/bg01.jpg
- /data/data/####/style/preview/res/drawable/pic03.png
- /data/data/####/style/preview/res/drawable/pic15.png
- /data/data/####/shared_prefs/umeng_general_config.xml
- /sdcard/syezon/call_plug/callshow/ringing/previewres/raw/theme_ring.mp3
- /data/data/####/style/preview/res/drawable/bg02.jpg
- /data/data/####/style/preview/res/drawable/answer01.png
- /data/data/####/style/preview/res/drawable/Keyboard02.png
- /data/data/####/files/1BRRcz0EwgdoykOMLOVFBTfNi1wTxXrL/nm1PNNcNxVr-IoQtHPYBdQ==.new
- /data/data/####/shared_prefs/####_preferences.xml.bak
- /data/data/####/shared_prefs/syezon_agent_online_setting_####.xml.bak
- /sdcard/syezon/pingke/show/list/cache/87f377cf77f3812755542238fbffb376
- /data/data/####/files/1BRRcz0EwgdoykOMLOVFBTfNi1wTxXrL/9fTRly18W2YI3Lyi0j132Q==/data.dat.tmp
- /sdcard/syezon/pingke/show/v_cache/-96830522-896359461
- /data/data/####/style/preview/res/drawable/Keyboard01.png
- /sdcard/syezon/pingke/show/list/cache/e31f9ca025aaace3182876e692f96ee0
- /data/data/####/shared_prefs/mobclick_agent_online_setting_####.xml
- /sdcard/syezon/pingke/show/list/cache/70571e9f592c866a3192648244350ee0
- /sdcard/syezon/pingke/show/v_cache/-968305221196529470
- /sdcard/syezon/pingke/show/v_cache/-96830522-1997201065
- /sdcard/syezon/pingke/show/v_cache/-968305221146954420
- /data/data/####/files/qrjuuw_d/qrjuuw_f.zip
- /sdcard/syezon/pingke/show/list/cache/eb8d5a60de18af820ddbdb88539f040a
- /data/data/####/style/preview/res/drawable/pic14.png
- /data/data/####/style/preview/res/drawable/bird01.png
- /sdcard/syezon/pingke/show/list/cache/ff045e2f631131eda66a459ed7c69509
- /sdcard/.android/mobclick_agent_cache/####/detail
- /sdcard/syezon/pingke/show/list/cache/.nomedia
- /data/data/####/files/rdata_comhuimaobobo.new
- /sdcard/syezon/pingke/show/list/cache/8dd27e73ed40408b1090008e39da5747
- /data/data/####/shared_prefs/call_config.xml
- /data/data/####/style/preview/res/drawable/pic13.png
- /sdcard/syezon/pingke/show/v_cache/-968305222091283162
- /sdcard/syezon/pingke/show/list/cache/618041eeacf2a3861b30ca44cd885ac4
- /data/data/####/files/umeng_it.cache
- /data/data/####/files/1BRRcz0EwgdoykOMLOVFBTfNi1wTxXrL/G2u6rCWjrU1icOpVBLAYvg==/G8XZhPykeB8vl1ky.zip
- /data/data/####/style/preview/res/drawable/ending01.png
- /data/data/####/style/preview/res/drawable/ending02.png
- /data/data/####/style/preview/res/drawable/Speaker02.png
- /data/data/####/style/preview/res/drawable/answer02.png
- /sdcard/.android/mobclick_agent_cache/####/flowadd
- /sdcard/syezon/pingke/show/style/1434102291262..zip
- /sdcard/syezon/pingke/show/v_cache/1211046363-639624189
- /sdcard/syezon/pingke/show/v_cache/-968305221344162461
- /data/data/####/shared_prefs/period_time.xml
- /sdcard/syezon/pingke/show/v_cache/-637334746714501632
- /sdcard/syezon/pingke/show/list/cache/ed827f2aa6bca5231ed7bd1961fa65bf
- /sdcard/syezon/pingke/show/list/cache/1677b5130aad00b184a3f32ec2414f07
- /data/data/####/files/1BRRcz0EwgdoykOMLOVFBTfNi1wTxXrL/2q3_zmzhLCFayojvxz7mDA==/UJbUriUKvsTrZlEN
- /sdcard/syezon/pingke/show/v_cache/-968305222074304533
- /sdcard/syezon/pingke/show/v_cache/-96830522186549244
- /data/data/####/files/1BRRcz0EwgdoykOMLOVFBTfNi1wTxXrL/2q3_zmzhLCFayojvxz7mDA==/xr60X1TPh4TH5n3rIQljDA==
- /sdcard/syezon/launcher/.nomedia
- /data/data/####/style/preview/res/drawable/pic12.png
- /data/data/####/style/preview/res/drawable/pic11.png
- /sdcard/syezon/pingke/show/list/cache/221da5078ae0e1481f58db48f8b13326
- /sdcard/syezon/pingke/show/v_cache/-96830522-1229311792
- /sdcard/syezon/pingke/show/v_cache/-96830522-1494881762
- /sdcard/syezon/pingke/show/list/cache/b608385cf15513369f83652d3f97530f
- /sdcard/syezon/pingke/show/list/cache/84c5700ee538f9963affbb5eff13dae2
- /data/data/####/style/preview/res/drawable/pic04.png
- /data/data/####/style/preview/res/drawable/pic05.png
- /data/data/####/style/preview/res/drawable/Speaker01.png
- /data/data/####/style/preview/ThemeHuaQianGu.jar
- /data/data/####/style/preview/res/drawable/refusal01.png
- /data/data/####/shared_prefs/####_preferences.xml
- /sdcard/syezon/pingke/show/v_cache/-968305221898848802
- /sdcard/syezon/pingke/show/v_cache/-1112268297-1985381114
- /data/data/####/files/1BRRcz0EwgdoykOMLOVFBTfNi1wTxXrL/JQsWOemRgsZxAt76RZy2iw==.new
- /data/data/####/files/.imprint
- /sdcard/syezon/pingke/show/list/cache/6f0d874bddc8844f32fe4df82daa757e
- /sdcard/.android/mobclick_agent_cache/####/event
- /data/data/####/shared_prefs/syezon_agent_online_setting_####.xml
- /data/data/####/shared_prefs/mobclick_agent_online_setting_####.xml.bak
- /sdcard/syezon/pingke/show/v_cache/-96830522-795785730
- /sdcard/syezon/pingke/show/.nomedia
- /data/data/####/shared_prefs/umeng_general_config.xml.bak
- /data/data/####/style/preview/res/drawable/pic06.png
- /sdcard/syezon/pingke/show/v_cache/-9683052287396242
- /sdcard/syezon/pingke/show/list/cache/9714bdcb90c12e3147645c4d0677e8f6
- /data/data/####/shared_prefs/call_config.xml.bak
Другие:
Может автоматически отправлять СМС-сообщения.
