Android.Hidden.2834

Техническая информация

Вредоносные функции:

Скрывает свою иконку с экрана устройства.

Сетевая активность:

Подключается к:

1####.####.151:8080
territo####.####.com
a####.####.com

Запросы HTTP GET:

territo####.####.com/load.bat

Запросы HTTP POST:

a####.####.com/search.php?sid=####&sdk_v=####&geo=####&network=####&time...
1####.####.151:8080/absSdk/absAction/api.GetUpUrlInfo

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/files/.flurryagent.1cf0e5d6
<Package Folder>/files/.flurrydatasenderblock.15e33bd6-f969-44c6-952e-d5e1c53e9cf5
<Package Folder>/files/td_database2SaaS/1495006112407_2210
<Package Folder>/files/.FlurrySenderIndex.info.AnalyticsData_JVDDFSTMG4XXTHF9D82N_159
<Package Folder>/databases/tb<Package>-journal
<Package Folder>/shared_prefs/SolitairePreferences.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/tdid.xml
<Package Folder>/shared_prefs/share_<Package>.xml
<Package Folder>/shared_prefs/TDpref_shorttime0.xml
<Package Folder>/shared_prefs/TD_app_pefercen_profile.xml
<Package Folder>/files/td_database0SaaS/1495006107420_2128
<Package Folder>/shared_prefs/TDpref_longtime.xml
<Package Folder>/files/td_database2SaaS/1495006107338_2128
<Package Folder>/shared_prefs/abs.xml
<Package Folder>/shared_prefs/SOLITAIRE.xml
<Package Folder>/shared_prefs/TDpref_shorttime.xml
<Package Folder>/files/.FlurrySenderIndex.info.AnalyticsMain
<Package Folder>/files/td_database0SaaS/1495006112409_2210
<Package Folder>/files/sdk.jar
<Package Folder>/shared_prefs/1280|account_file.xml.bak
<Package Folder>/files/td_database2SaaS/1495006107253_2128
<Package Folder>/shared_prefs/share_<Package>.xml.bak
<Package Folder>/shared_prefs/TD_app_pefercen_profile.xml.bak
<Package Folder>/files/td_database0SaaS/1495006107285_2128
<Package Folder>/app_tfile/fields.jar
<Package Folder>/shared_prefs/TDpref_longtime.xml.bak
<Package Folder>/databases/webview.db-journal
<Package Folder>/shared_prefs/STORE_MAIN.xml
<Package Folder>/shared_prefs/1280|account_file.xml
<Package Folder>/shared_prefs/<Package>_set.xml
<Package Folder>/shared_prefs/TDpref_longtime0.xml