Android.Packed.21605

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.DownLoader.455.origin

Сетевая активность:

Подключается к:

mo####.####.com
7j####.####.com

Запросы HTTP GET:

mo####.####.com/cpro/ui/mads.php?code2=####&b1495005900748=####
mo####.####.com/ads/js/c.js
mo####.####.com/cpro/ui/mads.php?code2=####&b1495005895426=####
mo####.####.com/ads/css/min/main.css
mo####.####.com/cpro/ui/mads.php?code2=####&b1495005896131=####
mo####.####.com/ads/pa/8/__pasys_remote_banner.php??bdr=####&os=####&v=#...
mo####.####.com/cpro/ui/mads.php?code2=####&b1495005901239=####
mo####.####.com/cpro/ui/mads.php?code2=####&b=####
mo####.####.com/cpro/ui/mads.php?code2=####&b1495005900540=####
mo####.####.com/ads/js/ads.trunk.js
mo####.####.com/cpro/ui/mads.php?code2=####&b1495005888480=####
mo####.####.com/ads/js/ads.trunk.exp.js
mo####.####.com/cpro/ui/mads.php?code2=####&b1495005870274=####
mo####.####.com/ads/pa/8/__xadsdk__remote__8.56.jar
mo####.####.com/ads/ads.appcache
mo####.####.com/ads/index.htm
mo####.####.com/cpro/ui/mads.php?code2=####&b1495005887818=####
7j####.####.com/sztdz.txt
mo####.####.com/ads/js/c.exp.js
mo####.####.com/cpro/ui/mads.php?code2=####&b1495005867892=####
mo####.####.com/ads/js/main.js

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/shared_prefs/i_fionf_pre<IMEI>.xml.bak
<Package Folder>/shared_prefs/__xadsdk_downloaded__version__.xml
<Package Folder>/app_baidu_ad_sdk/__xadsdk__remote__final__e26237e2-7063-4ecd-9930-fabef2471b03.jar
<Package Folder>/app_database/ApplicationCache.db-journal
<Package Folder>/app_baidu_ad_sdk/__xadsdk__remote__final__e27d7715-4a18-48d4-b9a1-280932dd0e17.jar
<Package Folder>/shared_prefs/i_fionf_pre<IMEI>.xml
<Package Folder>/shared_prefs/i.xml
<Package Folder>/app_baidu_ad_sdk/__xadsdk__remote__final__builtin__.jar
<Package Folder>/cache/webviewCacheChromium/index
<Package Folder>/cache/webviewCacheChromium/f_000001
<Package Folder>/cache/webviewCacheChromium/f_000003
<Package Folder>/cache/webviewCacheChromium/f_000002
<Package Folder>/cache/webviewCacheChromium/f_000005
<Package Folder>/cache/webviewCacheChromium/f_000004
<Package Folder>/cache/webviewCacheChromium/f_000006
<Package Folder>/shared_prefs/com.baidu.mobads.loader.xml
<Package Folder>/files/14950058522659.jar
<Package Folder>/databases/E_ID<IMEI>.db-journal
<Package Folder>/cache/webviewCacheChromium/data_3
<Package Folder>/databases/webview.db-journal
<Package Folder>/cache/webviewCacheChromium/data_2
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/app_database/localstorage/http_mobads.baidu.com_0.localstorage-journal
<Package Folder>/databases/webviewCookiesChromiumPrivate.db-journal
<Package Folder>/shared_prefs/__x_adsdk_agent_header__.xml
<Package Folder>/cache/webviewCacheChromium/data_1
<Package Folder>/cache/webviewCacheChromium/data_0