Android.Packed.22419

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.MobiDash.1.origin

Сетевая активность:

Подключается к:

d####.####.com
a####.####.com

Запросы HTTP GET:

a####.####.com/request/banner?ad_space_id=####&dm_ver=####&dm_ver=####&b...
a####.####.com/request/video?ad_space_id=####&dm_ver=####&bidfloor=####&...
d####.####.com/cgi-bin/i.pl?app=####&subapp=####&eventtype=####&ts=####
a####.####.com/request/banner?ad_space_id=####&dm_ver=####&bidfloor=####...

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/shared_prefs/game_prefs.xml
<Package Folder>/shared_prefs/appodeal.xml.bak
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/app_working/flurry.dex
<Package Folder>/app_app_apk/uloldirtymind.dat.jar
<Package Folder>/code_cache/secondary-dexes/tmp-<Package>-1.apk.classes1805443963.zip
<Package Folder>/files/file
<Package Folder>/shared_prefs/multidex.version.xml
<Package Folder>/app_working/adcolony.dex
<Package Folder>/shared_prefs/Appodeal.xml
<Package Folder>/shared_prefs/freq.xml
<Package Folder>/cache/webviewCacheChromium/index
<Package Folder>/shared_prefs/Appodeal.xml.bak
<Package Folder>/files/.YFlurrySenderIndex.info.AnalyticsData_C43JN2W7835HZWBKBH5T_237
<Package Folder>/databases/installtracker.db-journal
<Package Folder>/files/.yflurrydatasenderblock.21587ac6-433d-4219-9fe3-d1914c0f9a91
<Package Folder>/cache/1470286953684.jar
<Package Folder>/files/.YFlurrySenderIndex.info.AnalyticsMain
<Package Folder>/app_working/yandex.dex
<Package Folder>/shared_prefs/appodeal.xml
<Package Folder>/app_working/revmob.dex
<Package Folder>/shared_prefs/install_tracker_preferences.xml
<Package Folder>/shared_prefs/FLURRY_SHARED_PREFERENCES.xml
<Package Folder>/code_cache/secondary-dexes/tmp-<Package>-1.apk.classes-369385973.zip
<Package Folder>/files/.yflurryprotonconfig.-4fb9453990748f6
<Package Folder>/cache/1470286953684.tmp
<Package Folder>/code_cache/secondary-dexes/MultiDex.lock
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/shared_prefs/game_prefs.xml.bak
<Package Folder>/databases/installtracker.db
<Package Folder>/cache/ApplicationCache.db-journal
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/cache/webviewCacheChromium/data_3
<Package Folder>/cache/webviewCacheChromium/data_2
<Package Folder>/cache/webviewCacheChromium/data_1
<Package Folder>/cache/webviewCacheChromium/data_0