Android.Packed.21939

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.MobiDash.1.origin

Сетевая активность:

Подключается к:

d####.####.com
newfeat####.####.com
d239g0z####.####.net
f####.####.com
googl####.####.net

Запросы HTTP GET:

d239g0z####.####.net/featurescreen/FidgetSpinner_l.jpg
googl####.####.net/mads/static/sdk/native/sdk-core-v40.js
d239g0z####.####.net/icons/icon_FidgetSpinner.png

Запросы HTTP POST:

f####.####.com/feature_server/geo-ip/test.php
d####.####.com/aap.do
f####.####.com/feature_server/fullScreen/get.php
newfeat####.####.com/featureview/getfeatureview/
newfeat####.####.com/featureview/gettime/

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/shared_prefs/ThreatMetrixMobileSDK.xml
<Package Folder>/files/.flurryagent.7b3db56
<Package Folder>/shared_prefs/sniper.xml
<Package Folder>/shared_prefs/.dmgames_prefs.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/SponsorPayPublisherState.xml
<Package Folder>/files/file
<Package Folder>/files/gaClientId
<Package Folder>/shared_prefs/tjcPrefrences.xml
<Package Folder>/cache/webviewCacheChromium/index
<Package Folder>/app_app_apk/armysniper.dat.jar
<Package Folder>/cache/ads9372416.jar
<Package Folder>/cache/webviewCacheChromium/f_000001
<Package Folder>/cache/webviewCacheChromium/f_000003
<Package Folder>/cache/webviewCacheChromium/f_000002
<Package Folder>/app_sslcache/h.online-metrix.net.443
<Package Folder>/cache/webviewCacheChromium/f_000004
<Package Folder>/databases/com.google.android.gms.ads.db/localstorage/http_googleads.g.doubleclick.net_0.localstorage-journal
<Package Folder>/code_cache/secondary-dexes/tmp-<Package>-1.apk.classes-1359977183.zip
<Package Folder>/shared_prefs/multidex.version.xml
<Package Folder>/shared_prefs/SponsorPayAdvertiserState.xml
<Package Folder>/code_cache/secondary-dexes/MultiDex.lock
<Package Folder>/databases/webview.db-journal
<Package Folder>/shared_prefs/.dmgames_prefs.xml.bak
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/app_doodlemobile/analytics/1495005880499.log
<Package Folder>/databases/google_analytics_v4.db-journal
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/cache/webviewCacheChromium/data_3
<Package Folder>/cache/webviewCacheChromium/data_2
<Package Folder>/cache/webviewCacheChromium/data_1
<Package Folder>/cache/webviewCacheChromium/data_0