Android.Packed.22398

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.Click.136.origin

Сетевая активность:

Подключается к:

p####.####.com:8066
l####.####.cn
l####.####.cn:88

Запросы HTTP GET:

l####.####.cn/m/7vW52mta4PPv2SPsX1A8G-U73d0WMsNRVxPZJQ
l####.####.cn/t?r=####&p=####

Запросы HTTP POST:

p####.####.com:8066/s/
l####.####.cn:88/i/nu/v1/8400628858702098916?t=####
l####.####.cn/g?r=####
l####.####.cn/i/lv/v1/8400628858702098916?t=####
l####.####.cn/i/ls/v1/8400628858702098916?t=####

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/files/.snail_temp/73f2d996-00b3-4853-9ac3-90724e8406d8.a.de
<Package Folder>/.snail/shared_prefs/lconfig.bak
<Package Folder>/.snail/databases/apk_install_tip.db
<Package Folder>/.snail/shared_prefs/main.prefs
<Package Folder>/.snail/shared_prefs/sconfig
<Package Folder>/files/.snail_temp/73f2d996-00b3-4853-9ac3-90724e8406d8.a
<Package Folder>/files/.snail_data/.73f2d996-00b3-4853-9ac3-90724e8406d8.a.zip
<Package Folder>/.snail/databases/apk_install_tip.db-journal
<Package Folder>/.snail/files/ad_data/download_temp/73f2d996-00b3-4853-9ac3-90724e8406d8.a
<Package Folder>/.snail/databases/app_track.db-journal
<Package Folder>/.snail/databases/app_stats.db-journal
<Package Folder>/.snail/databases/win_ad.db
<Package Folder>/.snail/shared_prefs/extra
<Package Folder>/.snail/shared_prefs/sconfig.bak
<Package Folder>/.snail/databases/app_stats.db
<Package Folder>/.snail/snail_lib/libsnail_a4_b2_zip.so
<Package Folder>/.snail/shared_prefs/common_cfg.prefs
<Package Folder>/.snail/shared_prefs/locconfig
<Package Folder>/shared_prefs/loader_snail.xml
<Package Folder>/.snail/databases/apk_install_sc_db-journal
<Package Folder>/.snail/databases/statistics.db-journal
<Package Folder>/.snail/databases/win_ad.db-journal
<Package Folder>/.snail/databases/app_track.db
<Package Folder>/.snail/databases/log_temp.db
<Package Folder>/.snail/databases/download.db-journal
<Package Folder>/files/.snail_data/.a4.b2.zip
<Package Folder>/.snail/databases/apk_install_sc_db
<Package Folder>/.snail/shared_prefs/lconfig
<Package Folder>/.snail/shared_prefs/common_rundata.prefs
<Package Folder>/.snail/databases/download.db
<Package Folder>/files/qdcycz
<Package Folder>/.snail/files/ad_temp/server_req_hb_response.gz
<Package Folder>/.snail/files/prop_file/phone_dataer.prop
<Package Folder>/.snail/databases/log_index.db-journal
<Package Folder>/.snail/databases/log_temp.db-journal
<Package Folder>/.snail/files/ad_temp/run_status_hb_response.gz
<Package Folder>/.snail/databases/statistics.db
<Package Folder>/.snail/databases/log_index.db
<Package Folder>/.snail/files/ext4-snail-5
<Package Folder>/.snail/files/ad_temp/run_status_hb_request.gz
<Package Folder>/.snail/shared_prefs/exception
<Package Folder>/.snail/shared_prefs/log_cfg.prefs
<Package Folder>/.snail/shared_prefs/run_status.prefs