Android.Packed.21998

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.MobiDash.1.origin

Сетевая активность:

Подключается к:

prelan####.net
mobilep####.com
wireles####.mobi

Запросы HTTP GET:

prelan####.net/adult/dating/hardcore/en/1/v1/css/app.css
prelan####.net/adult/dating/hardcore/en/1/v1/images/logo.png
prelan####.net/adult/dating/hardcore/en/1/v1/images/girl_1_profile.png
prelan####.net/adult/dating/hardcore/en/1/v1/images/girl_1.jpg
mobilep####.com/?flux_action=####&flux_f=####&flux_ffn=####
prelan####.net/adult/dating/hardcore/en/1/v1/slider/slick/ajax-loader.gif
prelan####.net/adult/dating/hardcore/en/1/v1/slider/slick/slick-theme.css
prelan####.net/adult/dating/hardcore/en/1/v1/css/jqtransform.css
wireles####.mobi/?sl=####&data1=####&data2=####
prelan####.net/adult/dating/hardcore/en/1/v1/images/girl_4.JPG
prelan####.net/adult/dating/hardcore/en/1/v1/images/girl_2.jpg
prelan####.net/adult/dating/hardcore/en/1/v1/images/girl_2_profile.png
prelan####.net/adult/dating/hardcore/en/1/v1/bower_components/foundation...
mobilep####.com/?flux_fts=####&flux_fn=####&flux_cost=####&clickID=####&...
prelan####.net/adult/dating/hardcore/en/1/v1/images/girl_4_profile.png
prelan####.net/adult/dating/hardcore/en/1/v1/step2.html
prelan####.net/adult/dating/hardcore/en/1/v1/slider/slick/slick.js
prelan####.net/adult/dating/hardcore/en/1/v1/js/jquery.jqtransform.js
prelan####.net/adult/dating/hardcore/en/1/v1/bower_components/jquery/dis...
prelan####.net/adult/dating/hardcore/en/1/v1/bower_components/what-input...
prelan####.net/adult/dating/hardcore/en/1/v1/featherlight/release/feathe...
prelan####.net/adult/dating/hardcore/en/1/v1/images/girl_3.jpg
prelan####.net/adult/dating/hardcore/en/1/v1/slider/slick/slick.css
prelan####.net/adult/dating/hardcore/en/1/v1/js/app.js
prelan####.net/adult/dating/hardcore/en/1/v1/step1.html

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/cache/webviewCacheChromium/f_00000a
<Package Folder>/app_database/ApplicationCache.db-journal
<Package Folder>/code_cache/secondary-dexes/tmp-<Package>-1.apk.classes1057597726.zip
<Package Folder>/app_app_apk/vrikazecoavimse.dat.jar
<Package Folder>/files/file
<Package Folder>/cache/webviewCacheChromium/index
<Package Folder>/cache/webviewCacheChromium/f_000009
<Package Folder>/cache/webviewCacheChromium/f_000008
<Package Folder>/cache/webviewCacheChromium/f_000001
<Package Folder>/cache/webviewCacheChromium/f_000003
<Package Folder>/cache/webviewCacheChromium/f_000002
<Package Folder>/cache/webviewCacheChromium/f_000005
<Package Folder>/cache/webviewCacheChromium/f_000004
<Package Folder>/cache/webviewCacheChromium/f_000007
<Package Folder>/cache/webviewCacheChromium/f_000006
<Package Folder>/shared_prefs/multidex.version.xml
<Package Folder>/code_cache/secondary-dexes/MultiDex.lock
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/cache/webviewCacheChromium/data_3
<Package Folder>/cache/webviewCacheChromium/data_2
<Package Folder>/cache/webviewCacheChromium/data_1
<Package Folder>/cache/webviewCacheChromium/data_0