Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.1.origin
Сетевая активность:
Подключается к:
- a####.####.com
Запросы HTTP GET:
- a####.####.com/m/open?v=####&id=####&av=####&udid=####&dnt=####
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/code_cache/secondary-dexes/MultiDex.lock
- <Package Folder>/shared_prefs/com.appboy.storage.triggers.local_assets.a1c2bf4b-b601-43aa-8632-8b742eeb7634.xml
- <Package Folder>/shared_prefs/com.appboy.storage.user_cache.v3.37a6259cc0c1dae299a7866489dff0bd.xml
- <Package Folder>/shared_prefs/com.appboy.support.stringutils.cachefilesuffix.xml
- <Package Folder>/shared_prefs/com.appboy.storage.feedstorageprovider.d41d8cd98f00b204e9800998ecf8427e.xml
- <Package Folder>/databases/nextplus
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/fiverocks.xml
- <Package Folder>/files/persisted_config
- <Package Folder>/shared_prefs/com.appboy.device.xml
- <Package Folder>/files/.yflurryreport.50a6d691b7110858
- <Package Folder>/shared_prefs/_has_set_default_values.xml
- <Package Folder>/code_cache/secondary-dexes/tmp-<Package>-1.apk.classes752905994.zip
- <Package Folder>/shared_prefs/mopubSettings.xml
- <Package Folder>/shared_prefs/com.appboy.override.configuration.cache.xml
- <Package Folder>/shared_prefs/com.google.android.gms.measurement.prefs.xml.bak
- <Package Folder>/app_app_apk/phonecalls.dat.jar
- <Package Folder>/files/file
- <Package Folder>/shared_prefs/oneaudience.xml
- <Package Folder>/databases/nextplus-journal
- <Package Folder>/shared_prefs/com.appboy.push_registration.xml
- <Package Folder>/shared_prefs/com.google.android.gms.measurement.prefs.xml
- <Package Folder>/shared_prefs/fiverocks.xml.bak
- <Package Folder>/shared_prefs/com.nextplus.storage.app_prefs.xml
- <Package Folder>/shared_prefs/com.appboy.storage.triggers.re_eligibility.d41d8cd98f00b204e9800998ecf8427e.a1c2bf4b-b601-43aa-8632-8b742eeb7634.xml
- <Package Folder>/code_cache/secondary-dexes/tmp-<Package>-1.apk.classes-217599819.zip
- <Package Folder>/files/.yflurryadlog.50a6d691b7110858
- <Package Folder>/shared_prefs/com.appboy.storage.serverconfigstorageprovider.a1c2bf4b-b601-43aa-8632-8b742eeb7634.xml
- <Package Folder>/files/.YFlurrySenderIndex.info.AnalyticsData_C4ZD783T97HGZJ9G74XV_240
- <Package Folder>/shared_prefs/cuebiq_preference.xml
- <Package Folder>/databases/google_app_measurement_local.db
- <Package Folder>/shared_prefs/com.appboy.storage.user_cache.push_token_store.37a6259cc0c1dae299a7866489dff0bd.xml
- <Package Folder>/shared_prefs/com.appboy.storage.session_storage.d41d8cd98f00b204e9800998ecf8427e.a1c2bf4b-b601-43aa-8632-8b742eeb7634.xml
- <Package Folder>/files/.YFlurrySenderIndex.info.AnalyticsMain
- <Package Folder>/databases/appboy.db-journal
- <Package Folder>/app_ajw/registry
- <Package Folder>/app_fiverocks/events2-journal
- <Package Folder>/no_backup/com.google.android.gms.appid-no-backup
- <Package Folder>/files/.yflurrydatasenderblock.21b51abc-2454-4194-bf2a-03f1a648c670
- <Package Folder>/databases/google_app_measurement_local.db-journal
- <Package Folder>/shared_prefs/FLURRY_SHARED_PREFERENCES.xml
- <Package Folder>/shared_prefs/com.appboy.storage.triggers.actions.d41d8cd98f00b204e9800998ecf8427e.a1c2bf4b-b601-43aa-8632-8b742eeb7634.xml
- <Package Folder>/shared_prefs/multidex.version.xml
- <Package Folder>/shared_prefs/cuebiq_preference.xml.bak
- <Package Folder>/files/.yflurryfreqcap.50a6d691b7110858
- <Package Folder>/shared_prefs/com.google.android.gms.appid.xml
- <Package Folder>/shared_prefs/com.appboy.storage.device_cache.v3.37a6259cc0c1dae299a7866489dff0bd.xml
- <Package Folder>/shared_prefs/<Package>_preferences.xml.bak
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
Может автоматически отправлять СМС-сообщения.
