Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.Xiny.20
Загружает из Интернета следующие детектируемые угрозы:
- Android.Xiny.20
Сетевая активность:
Подключается к:
- s####.####.com
- gaand####.####.net
- h####.####.com
- d####.####.cn
- l####.####.com
- t####.####.cn
Запросы HTTP GET:
- h####.####.com/UploadFile/Game/20161227/148281104070.jpg
- h####.####.com/games/kldhj/res/ui/UI_intro/UI_intro.ExportJson
- h####.####.com/View/Index/img/yw_logo.png
- h####.####.com/View/Index/img/link.png
- h####.####.com/games/kldhj/res/ui/UI_levelselection/UI_levelselection0.png
- h####.####.com/UploadFile/Game/20161203/1480748206989.jpg
- h####.####.com/View/Index/img/sina.png
- d####.####.cn/jarFile/SDKAutoUpdate/hyjwan.jar
- h####.####.com/UploadFile/Game/20170113/1484296600618.jpg
- h####.####.com/UploadFile/Game/20170113/1484297145504.jpg
- h####.####.com/View/Index/img/QQ.png
- h####.####.com/View/Index/css/pop.css
- h####.####.com/UploadFile/Game/20160113/1452692917843.jpg
- h####.####.com/View/Index/img/icon4.png
- h####.####.com/View/Index/img/sharebg.png
- h####.####.com/View/Index/js/quo.js
- h####.####.com/View/Index/img/gb2.png
- h####.####.com/UploadFile/Game/20160506/1462522746743.png
- h####.####.com/View/Index/img/gc7.png
- h####.####.com/games/kldhj/res/ui/UI_gp/UI_gp1.png
- h####.####.com/UploadFile/Game/20160401/1459500583825.png
- h####.####.com/View/Index/js/quo.gestures.js
- h####.####.com/games/kldhj/res/cifw/js/underscore.min.js
- h####.####.com/games/kldhj/res/ui/UI_gp/UI_gp.ExportJson
- h####.####.com/hm.gif?cc=####&cf=####&ck=####&cl=####&ds=####&ep=####&et...
- h####.####.com/View/Index/img/lixz.png
- h####.####.com/View/Index/img/qzone.png
- h####.####.com/games/kldhj/res/elements/tutorial/text_bubble.png
- h####.####.com/View/Index/img/weixin.png
- h####.####.com/View/Index/img/gc6.png
- h####.####.com/UploadFile/recommend/20160531/1464686348294.png
- h####.####.com/View/Index/js/swiper.min.js
- h####.####.com/View/Index/img/bg.jpg
- h####.####.com/View/Index/img/gc12.png
- h####.####.com/games/kldhj/res/elements/wind_particle.png
- h####.####.com/games/kldhj/src/game.min.js
- h####.####.com/games/kldhj/res/ui/UI_mainmenu/UI_mainmenu0.png
- h####.####.com/games/kldhj/gameapi/v1/images/RotateToLandscape.png
- h####.####.com/View/Index/img/ad_right2.png
- h####.####.com/games/kldhj/res/ui/UI_options/UI_options0.json
- h####.####.com/games/kldhj/res/loadingScreen/loading_bar.png
- h####.####.com/View/Index/img/gc11.png
- h####.####.com/View/Index/img/gc10.png
- h####.####.com/games/kldhj/res/cifw/css/styles.css
- h####.####.com/games/kldhj/gameapi/v1/images/RotateArrow.png
- h####.####.com/UploadFile/Game/20160127/1453884307781.jpg
- h####.####.com/games/kldhj/res/ui/UI_levelselection/UI_levelselection0.j...
- h####.####.com/UploadFile/Game/20150714/1436859607591.png
- h####.####.com/UploadFile/Game/20170109/1483954375815.png
- h####.####.com/games/kldhj/res/cifw/js/jquery-1.11.1.min.js
- h####.####.com/games/kldhj/res/ui/UI_confirmation/UI_confirmation0.json
- h####.####.com/games/kldhj/res/localization.json
- h####.####.com/games/kldhj/res/loadingScreen/loading_logo.png
- h####.####.com/games/kldhj/res/ui/UI_options/UI_options0.png
- h####.####.com/UploadFile/Game/20160401/1459499083439.png
- h####.####.com/games/kldhj/res/bg/mm_bg.png
- h####.####.com/View/Index/img/banner_bg.jpg
- h####.####.com/games/kldhj/res/ui/UI_confirmation/UI_confirmation.Export...
- h####.####.com/View/Index/img/hot.png
- h####.####.com/UploadFile/Game/20160112/1452584016271.png
- h####.####.com/View/Index/js/quo.query.js
- h####.####.com/games/kldhj/res/ui/UI_levelselection/UI_levelselection.Ex...
- h####.####.com/games/kldhj/res/ui/UI_levelcompleted/UI_levelcompleted.Ex...
- h####.####.com/View/Index/img/fl.png
- h####.####.com/games/kldhj/res/ui/UI_levelcompleted/UI_levelcompleted0.j...
- h####.####.com/games/kldhj/res/ui/UI_credits/UI_credits.ExportJson
- h####.####.com/View/Index/img/gc4.png
- h####.####.com/games/kldhj/res/audio/mainmenu.mp3
- h####.####.com/games/kldhj/res/ui/UI_mainmenu/UI_mainmenu.ExportJson
- h####.####.com/UploadFile/Game/20151113/1447408890624.jpg
- h####.####.com/View/Index/img/gc9.png
- h####.####.com/View/Index/js/scroll.js
- h####.####.com/View/Index/css/swiper.min.css
- h####.####.com/UploadFile/Game/20160902/1472809241535.jpg
- h####.####.com/View/Index/img/icon.png
- h####.####.com/games/kldhj/play.css
- h####.####.com/games/kldhj/gameapi.js
- h####.####.com/games/kldhj/res/ui/UI_gp/UI_gp0.json
- h####.####.com/games/kldhj/gameapi/v1.js?e=####
- h####.####.com/UploadFile/Game/20151110/1447135260698.png
- h####.####.com/View/Index/img/game_details.png
- h####.####.com/View/Index/font/fontawesome-webfont.ttf?v=####
- h####.####.com/games/kldhj/res/bg/gp_bg.png
- h####.####.com/games/kldhj/src/gameConfig.js
- h####.####.com/UploadFile/Game/20161129/1480409101561.png
- h####.####.com/View/Index/img/ad_left.png
- h####.####.com/View/Index/img/logo.png
- h####.####.com/View/Index/js/quo.events.js
- h####.####.com/UploadFile/Game/20170113/1484296512405.jpg
- h####.####.com/games/kldhj/res/audio/audiosprite.mp3
- h####.####.com/View/Index/img/gb1.png
- h####.####.com/View/Index/js/jquery.js
- h####.####.com/games/kldhj/?hmsr=####&hmpl=####&hmcu=####&hmkw=####&hmci...
- h####.####.com/UploadFile/Game/20160506/146252637634.png
- h####.####.com/UploadFile/Game/20151112/1447300130712.png
- h####.####.com/games/kldhj/res/ui/UI_credits/UI_credits0.png
- h####.####.com/UploadFile/Game/20160507/1462604684220.png
- h####.####.com/games/kldhj/res/ui/UI_levels/UI_levels.ExportJson
- h####.####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&et=####&ja=####&ln...
- h####.####.com/View/Index/css/h5-style.css
- h####.####.com/games/kldhj/res/ui/UI_options/UI_options.ExportJson
- h####.####.com/View/Index/css/h5-style.css?v####
- h####.####.com/hm.js?bf32848####
- h####.####.com/View/Index/img/play_now.png
- h####.####.com/games/kldhj/res/ui/UI_credits/UI_credits0.json
- h####.####.com/View/Index/js/pop.js
- h####.####.com/View/Index/css/bootstrap.min.css
- h####.####.com/View/Index/css/font-awesome.min.css
- l####.####.com/bootstrap/3.0.3/js/bootstrap.min.js
- h####.####.com/View/Index/img/gc3.png
- h####.####.com/index.php?m=####
- h####.####.com/View/Index/img/user_header.png
- h####.####.com/?hmsr=####&hmpl=####&hmcu=####&hmkw=####&hmci=####
- h####.####.com/games/kldhj/res/elements/tutorial/finger.png
- h####.####.com/games/kldhj/gameapi/v1/images/RotateToPortrait.png
- h####.####.com/games/kldhj/res/ui/UI_gp/UI_gp0.png
- h####.####.com/UploadFile/Game/20160722/1469176813588.jpg
- h####.####.com/games/kldhj/res/css/styles.css
- h####.####.com/games/kldhj/res/loadingScreen/loading_bar_bg.png
- h####.####.com/games/kldhj/res/ui/UI_mainmenu/UI_mainmenu0.json
- h####.####.com/UploadFile/Game/20151216/1450255222786.png
- h####.####.com/View/Index/img/blank.png
- h####.####.com/games/kldhj/res/elements/watermark.png
- h####.####.com/games/kldhj/6112a388-2bcc-4ce6-9ad9-40c907838b79?_locatio...
- h####.####.com/games/kldhj/gtm.js?id=####&l=####
- h####.####.com/games/kldhj/res/ui/UI_confirmation/UI_confirmation0.png
- h####.####.com/games/kldhj/res/ui/UI_levelcompleted/UI_levelcompleted0.png
- h####.####.com/hm.gif?cc=####&cf=####&ck=####&cl=####&ds=####&et=####&ja...
- h####.####.com/View/Index/img/g-btn.png
- h####.####.com/View/Index/img/icon3.png
- h####.####.com/View/Index/img/gc1.png
- h####.####.com/View/Index/img/xz_bgg.png
- h####.####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&ep=####&et=####&ja...
- h####.####.com/UploadFile/Game/20160902/1472784084602.png
Запросы HTTP POST:
- t####.####.cn/api/statis/302f13ac5ae648d100217e0d1bb529b5d/game-849B990D...
- gaand####.####.net/g/d?crc=####
- t####.####.cn/api/statis/302f13ac5ae648d100217e0d1bb529b5d
- h####.####.com/index.php?action=####
- s####.####.com/cw/cp.action?requestId=####&g=####
- s####.####.com/cw/interface!u2.action?protocol=####&version=####&cid=####
- t####.####.cn/api/collect/app/302f13ac5ae648d100217e0d1bb529b5d
- t####.####.cn/api/q/a/302f13ac5ae648d100217e0d1bb529b5d
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/cache/webviewCacheChromium/f_000030
- <Package Folder>/cache/webviewCacheChromium/f_000023
- <Package Folder>/cache/webviewCacheChromium/f_000031
- <Package Folder>/cache/webviewCacheChromium/f_000033
- <Package Folder>/cache/webviewCacheChromium/f_000034
- <Package Folder>/cache/webviewCacheChromium/f_000035
- <Package Folder>/cache/webviewCacheChromium/f_000018
- <Package Folder>/cache/webviewCacheChromium/f_000019
- <Package Folder>/cache/webviewCacheChromium/f_000016
- <Package Folder>/cache/webviewCacheChromium/f_000017
- <Package Folder>/cache/webviewCacheChromium/f_000014
- <Package Folder>/cache/webviewCacheChromium/f_000015
- <Package Folder>/cache/webviewCacheChromium/f_000012
- <Package Folder>/cache/webviewCacheChromium/f_000013
- <Package Folder>/cache/webviewCacheChromium/f_000010
- <Package Folder>/cache/webviewCacheChromium/f_000011
- <Package Folder>/cache/webviewCacheChromium/f_00002c
- <Package Folder>/cache/webviewCacheChromium/f_00002b
- <Package Folder>/cache/webviewCacheChromium/f_00002a
- <Package Folder>/cache/webviewCacheChromium/f_00002f
- <Package Folder>/cache/webviewCacheChromium/f_00002e
- <Package Folder>/cache/webviewCacheChromium/f_00002d
- <Package Folder>/cache/webviewCacheChromium/f_00000a
- <Package Folder>/cache/webviewCacheChromium/f_00000c
- <Package Folder>/cache/webviewCacheChromium/f_00000b
- <Package Folder>/cache/webviewCacheChromium/f_00000e
- <Package Folder>/cache/webviewCacheChromium/f_00000d
- <Package Folder>/files/mpush_gateway_preferences_file
- <Package Folder>/cache/webviewCacheChromium/f_00000f
- <Package Folder>/shared_prefs/td_pefercen_profile.xml
- <Package Folder>/cache/webviewCacheChromium/f_000036
- <Package Folder>/shared_prefs/pref_file.xml.bak
- <Package Folder>/cache/webviewCacheChromium/f_000037
- <Package Folder>/shared_prefs/tdid.xml
- <Package Folder>/shared_prefs/a.xml
- <Package Folder>/cache/webviewCacheChromium/f_000038
- <Package Folder>/databases/downloadswc-journal
- <Package Folder>/files/mpush_version_preferences_file
- <Package Folder>/cache/webviewCacheChromium/f_000029
- <Package Folder>/cache/webviewCacheChromium/f_000009
- <Package Folder>/cache/webviewCacheChromium/f_000008
- <Package Folder>/cache/webviewCacheChromium/f_000021
- <Package Folder>/cache/webviewCacheChromium/f_000020
- <Package Folder>/cache/webviewCacheChromium/f_000027
- <Package Folder>/cache/webviewCacheChromium/f_000026
- <Package Folder>/cache/webviewCacheChromium/f_000025
- <Package Folder>/cache/webviewCacheChromium/f_000024
- <Package Folder>/cache/webviewCacheChromium/f_000001
- <Package Folder>/databases/mpush_game.db-journal
- <Package Folder>/cache/webviewCacheChromium/f_000003
- <Package Folder>/cache/webviewCacheChromium/f_000002
- <Package Folder>/cache/webviewCacheChromium/f_000005
- <Package Folder>/cache/webviewCacheChromium/f_000004
- <Package Folder>/cache/webviewCacheChromium/f_000007
- <Package Folder>/cache/webviewCacheChromium/f_000006
- <Package Folder>/databases/downloadswc
- <Package Folder>/shared_prefs/st.xml
- <Package Folder>/shared_prefs/pref_file.xml
- <Package Folder>/cache/webviewCacheChromium/f_00001f
- <Package Folder>/shared_prefs/W_Key.xml
- <Package Folder>/cache/webviewCacheChromium/f_00001d
- <Package Folder>/cache/webviewCacheChromium/f_00001e
- <Package Folder>/cache/webviewCacheChromium/f_00001b
- <Package Folder>/cache/webviewCacheChromium/f_00001c
- <Package Folder>/cache/webviewCacheChromium/f_000022
- <Package Folder>/cache/webviewCacheChromium/f_00001a
- <Package Folder>/cache/webviewCacheChromium/f_000032
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/cache/webviewCacheChromium/index
- <Package Folder>/databases/webviewCookiesChromium.db-journal
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/302f13ac5ae648d100217e0d1bb529b5d|account_file.xml
- <Package Folder>/cache/webviewCacheChromium/f_000028
- <Package Folder>/shared_prefs/td_pefercen_profile.xml.bak
- <Package Folder>/shared_prefs/<Package>_preferences.xml.bak
- <Package Folder>/cache/webviewCacheChromium/data_3
- <Package Folder>/cache/webviewCacheChromium/data_2
- <Package Folder>/cache/webviewCacheChromium/data_1
- <Package Folder>/cache/webviewCacheChromium/data_0
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
Может автоматически отправлять СМС-сообщения.
