Android.Packed.22241

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.MobiDash.1.origin

Сетевая активность:

Подключается к:

a####.####.mobi
adverti####.####.us
a####.####.com

Запросы HTTP GET:

a####.####.mobi/getAd?apid=####&ua=####&hswd=####&hsht=####&uip=####&ven...

Запросы HTTP POST:

adverti####.####.us/adInfo
a####.####.com/admax/sdk/playlist/1

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/shared_prefs/com.facebook.internal.preferences.APP_SETTINGS.xml
<Package Folder>/no_backup/com.google.android.gms.appid-no-backup
<Package Folder>/code_cache/secondary-dexes/tmp-<Package>-1.apk.classes122132637.zip
<Package Folder>/databases/webview.db-journal
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/appsflyer-data.xml.bak
<Package Folder>/files/ad_data
<Package Folder>/files/.YFlurrySenderIndex.info.AnalyticsData_T3NJ4X58VBTWGZZGYNQF_226
<Package Folder>/code_cache/secondary-dexes/tmp-<Package>-1.apk.classes-537509917.zip
<Package Folder>/files/.com.millennialmedia/.reporting/siteid
<Package Folder>/files/file
<Package Folder>/files/Level.ini
<Package Folder>/shared_prefs/appsflyer-data.xml
<Package Folder>/shared_prefs/com.facebook.ads.FEATURE_CONFIG.xml
<Package Folder>/files/ni_config
<Package Folder>/cache/webviewCacheChromium/index
<Package Folder>/app_app_apk/JewelsStar3.dat.jar
<Package Folder>/shared_prefs/sql.xml
<Package Folder>/cache/1470286953684.jar
<Package Folder>/files/.YFlurrySenderIndex.info.AnalyticsMain
<Package Folder>/files/.yflurrydatasenderblock.a4c3e415-6c17-459c-9672-8d87584de6d6
<Package Folder>/shared_prefs/SDKIDFA.xml
<Package Folder>/files/Config.ini
<Package Folder>/shared_prefs/FBAdPrefs.xml
<Package Folder>/files/JewelStar.ini
<Package Folder>/shared_prefs/multidex.version.xml
<Package Folder>/cache/1470286953684.tmp
<Package Folder>/code_cache/secondary-dexes/MultiDex.lock
<Package Folder>/files/.com.millennialmedia/.reporting/request_0a9a29fd-b932-41f6-b9d4-e0374bfd2ba5.tmp
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/shared_prefs/com.google.android.gms.appid.xml
<Package Folder>/files/.com.millennialmedia/handshake.json
<Package Folder>/cache/ApplicationCache.db-journal
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/cache/webviewCacheChromium/data_3
<Package Folder>/cache/webviewCacheChromium/data_2
<Package Folder>/cache/webviewCacheChromium/data_1
<Package Folder>/cache/webviewCacheChromium/data_0