Android.Packed.21842

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.MobiDash.1.origin

Сетевая активность:

Подключается к:

n####.####.me
z####.ru
datat####.com
c####.####.net
google-####.com
c####.####.com
d####.####.com
t####.global
netw####.####.com
trackme####.com

Запросы HTTP GET:

d####.####.com/gw?url=####&vId=####&ef=####&ch=####&nid=####&sub=####&su...
t####.global/view/lHTqZDHhsyHUOrZ4ihSalSksXYxTJcakGSMaWKX0Cs784MU?c=####...
n####.####.me/wap/images/v84/arrow-left.png
n####.####.me/wap/images/v84/icons-mobile.png
datat####.com/gw?url=####&vId=####&ef=####&ch=####&nid=####&sub=####
n####.####.me/wap/images/v84/header-prelander.png
c####.####.net/g/bootstrap@3.3.6(css/bootstrap.min.css),animatecss@3.5.1
n####.####.me/wap/?prodsid=####&xsource_data=####&meaff_id=####&xsource_...
c####.####.com/jquery-1.11.3.min.js
google-####.com/r/collect?v=####&_v=####&a=####&t=####&_s=####&dl=####&u...
n####.####.me/wap/images/v84/bg-question.png
n####.####.me/wap/images/v84/chance-to-win-mobile_za.png
z####.ru/apkfff?keyword=####
trackme####.com/r/8c94005e-3e1d-11e7-bd9f-114193d79858/0/
t####.global/hrfp?url=####
google-####.com/analytics.js
datat####.com/d/28835593aa4714877?sub=####&sub2=####&do=####&test=####
c####.####.com/?a=####&c=####&p=####&E=####&s1=####&s2=####&s3=####
n####.####.me/wap/images/v84/bg-answer_hover.png
n####.####.me/wap/images/v84/chance-to-win.png
datat####.com/d/27743573e1ed2af321?sub=####&publisher_id=####
n####.####.me/wap/images/v84/icons.png
netw####.####.com/winmobinl/wap/?prodsid=####&xsource_data=####&meaff_id...
n####.####.me/wap/images/v84/phones-mobile.png
d####.####.com/d/28835593aa4714877?sub=####&sub2=####
n####.####.me/wap/images/v84/bg-answer.png
n####.####.me/wap/css/style_v84.css?v=####
n####.####.me/wap/images/v84/prelander-bg.jpg
n####.####.me/wap/images/v84/phones.png
n####.####.me/wap/images/v84/arrow-right.png
trackme####.com/r/8da5847c-3e1d-11e7-86fa-11413ddaa6f0/1/
trackme####.com/r/8da5847c-3e1d-11e7-86fa-11413ddaa6f0/0/
n####.####.me/wap/css/style_common_top.css
trackme####.com/r/8c94005e-3e1d-11e7-bd9f-114193d79858/1/

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/files/asdfg
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/cache/webviewCacheChromium/f_00000a
<Package Folder>/cache/webviewCacheChromium/data_0
<Package Folder>/cache/webviewCacheChromium/index
<Package Folder>/cache/webviewCacheChromium/f_000009
<Package Folder>/cache/webviewCacheChromium/f_000008
<Package Folder>/cache/webviewCacheChromium/f_000001
<Package Folder>/cache/webviewCacheChromium/f_000003
<Package Folder>/cache/webviewCacheChromium/f_000002
<Package Folder>/cache/webviewCacheChromium/f_000005
<Package Folder>/cache/webviewCacheChromium/f_000004
<Package Folder>/cache/webviewCacheChromium/f_000007
<Package Folder>/cache/webviewCacheChromium/f_000006
<Package Folder>/shared_prefs/multidex.version.xml
<Package Folder>/cache/webviewCacheChromium/data_3
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/code_cache/secondary-dexes/<Package>-1.apk.classes-531014260.zip
<Package Folder>/cache/webviewCacheChromium/data_2
<Package Folder>/cache/webviewCacheChromium/data_1
<Package Folder>/app_app_apk/vivavideo.dat.jar