Android.Packed.22030

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.MobiDash.1.origin

Сетевая активность:

Подключается к:

s####.####.com

Запросы HTTP POST:

s####.####.com/api/pb?action=####

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/shared_prefs/admob.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/_has_set_default_values.xml
<Package Folder>/files/file
<Package Folder>/files/gaClientId
<Package Folder>/shared_prefs/multidex.version.xml
<Package Folder>/shared_prefs/com.google.android.gms.analytics.prefs.xml.bak
<Package Folder>/cache/webviewCacheChromium/index
<Package Folder>/app_app_apk/widget.dat.jar
<Package Folder>/shared_prefs/ab_sdk_pref.xml.bak
<Package Folder>/files/com.appbrain.ping
<Package Folder>/cache/webviewCacheChromium/f_000001
<Package Folder>/databases/DB-journal
<Package Folder>/cache/webviewCacheChromium/f_000003
<Package Folder>/cache/webviewCacheChromium/f_000002
<Package Folder>/cache/webviewCacheChromium/f_000005
<Package Folder>/cache/webviewCacheChromium/f_000004
<Package Folder>/cache/ApplicationCache.db-journal
<Package Folder>/shared_prefs/ab_sdk_pref.xml
<Package Folder>/shared_prefs/ab_pref_int.xml
<Package Folder>/code_cache/secondary-dexes/tmp-<Package>-1.apk.classes444001496.zip
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/cache/ads2142106516.jar
<Package Folder>/code_cache/secondary-dexes/MultiDex.lock
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/databases/com.google.android.gms.ads.db/localstorage/https_googleads.g.doubleclick.net_0.localstorage-journal
<Package Folder>/databases/google_analytics_v4.db-journal
<Package Folder>/shared_prefs/com.google.android.gms.analytics.prefs.xml
<Package Folder>/cache/webviewCacheChromium/data_3
<Package Folder>/cache/webviewCacheChromium/data_2
<Package Folder>/cache/webviewCacheChromium/data_1
<Package Folder>/cache/webviewCacheChromium/data_0