Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.DownLoader.192.origin
Загружает из Интернета следующие детектируемые угрозы:
- Android.Packed.21093
Сетевая активность:
Подключается к:
- h####.####.com
- i####.####.com
- d####.####.cn:6370
- d####.####.cn
- google-####.com
- d####.####.com
- con####.####.com
- con####.####.com:8080
- s####.####.net
- a####.####.com
Запросы HTTP GET:
- d####.####.com/md5_0ffbd52252418583521812499690987d.jpg
- con####.####.com:8080/social/misc/json_update?version=####&identifier=##...
- d####.####.cn/getspotad?key=####
- d####.####.cn/infocollect?key=####
- a####.####.com/m/imp?appid=####&cid=####&city=####&ckv=####&country_code...
- d####.####.com/md5_43f536973220877d6e250191369c5a55.apk
- i####.####.com/service/getIpInfo.php?ip=####
- d####.####.com/md5_9e447778393205259d3ce1290a8ae747.jpg
- d####.####.cn/view?key=####
- d####.####.cn:6370/getspotad?key=####
- a####.####.com/m/ad?v=####&id=####&nv=####&udid=####&q=####&z=####&o=###...
- google-####.com/__utm.gif?utmwv=####&utmn=####&utmcs=####&utmsr=####&utm...
- con####.####.com/social/json_login?db_version=####&model=####&api_key=##...
- a####.####.com/m/open?v=####&id=####&udid=####
- d####.####.cn/start?key=####
- d####.####.cn/click?key=####
- d####.####.com/admin/upload/assets/j_close.png
- d####.####.com/md5_2ef05d1f5d228152d66cfcc21d0a91c0.jpg
- d####.####.com/md5_d3f47aca904a2f97790e14ab0f07b6f1.jpg
Запросы HTTP POST:
- a####.####.com/app_logs
- a####.####.com/version.dex
- d####.####.com/aap.do
- h####.####.com/app.gif
- s####.####.net/version.dex
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/databases/oLog-journal
- <Package Folder>/databases/com.papaya.socialsdk.new.lite.174.webpage.db
- <Package Folder>/shared_prefs/D_D.xml
- <Package Folder>/files/savedata.xml
- <Package Folder>/databases/ODownload-journal
- <Package Folder>/shared_prefs/mobclick_agent_header_<Package>.xml
- <Package Folder>/shared_prefs/oconfig.xml
- <Package Folder>/shared_prefs/oconfig.xml.bak
- <Package Folder>/app_dex/oversion.dex
- <Package Folder>/shared_prefs/mopubSettings.xml
- <Package Folder>/app_dex/iversion2.dex
- <Package Folder>/shared_prefs/mobclick_agent_state_<Package>.xml
- <Package Folder>/databases/iAppData-journal
- <Package Folder>/shared_prefs/icacheCfg.xml.bak
- <Package Folder>/shared_prefs/ocacheCfg.xml.bak
- <Package Folder>/shared_prefs/iConfig.xml.bak
- <Package Folder>/databases/iLog-journal
- <Package Folder>/databases/oLog
- <Package Folder>/files/.flurryagent.-770adc55
- <Package Folder>/databases/google_analytics.db-journal
- <Package Folder>/shared_prefs/config.xml
- <Package Folder>/cache/webviewCacheChromium/index
- <Package Folder>/databases/_papaya_ga.db-journal
- <Package Folder>/shared_prefs/iConfig.xml
- <Package Folder>/shared_prefs/mobclick_agent_state_<Package>.xml.bak
- <Package Folder>/databases/com.papaya.socialsdk.new.lite.174.webpage.db-journal
- <Package Folder>/cache/webviewCacheChromium/f_000001
- <Package Folder>/shared_prefs/ocacheCfg.xml
- <Package Folder>/cache/webviewCacheChromium/f_000003
- <Package Folder>/cache/webviewCacheChromium/f_000002
- <Package Folder>/cache/webviewCacheChromium/f_000005
- <Package Folder>/cache/webviewCacheChromium/f_000004
- <Package Folder>/databases/iDownload-journal
- <Package Folder>/files/__local_stat_cache.json
- <Package Folder>/shared_prefs/config.xml.bak
- <Package Folder>/shared_prefs/icacheCfg.xml
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/databases/com.papaya.social.achievement-journal
- <Package Folder>/files/shell2.png
- <Package Folder>/databases/webviewCookiesChromium.db-journal
- <Package Folder>/databases/6.9eebf1b098e417d3e9a6ddcd4a524bc4.db-journal
- <Package Folder>/databases/ODownload
- <Package Folder>/databases/com.papaya.social.score-journal
- <Package Folder>/shared_prefs/__Baidu_Stat_SDK_SendRem.xml
- <Package Folder>/files/mobclick_agent_cached_<Package>
- <Package Folder>/cache/webviewCacheChromium/data_3
- <Package Folder>/cache/webviewCacheChromium/data_2
- <Package Folder>/cache/webviewCacheChromium/data_1
- <Package Folder>/cache/webviewCacheChromium/data_0
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
Может автоматически отправлять СМС-сообщения.
