Android.Packed.22555

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.MobiDash.1.origin

Сетевая активность:

Подключается к:

d####.####.com
ser####.####.com

Запросы HTTP GET:

ser####.####.com/api/kingouser/config
ser####.####.com/api/v3/kingouser/upgrade?&locale=####&channel=####&andr...
ser####.####.com/kingouser/apps/superbattery.png
d####.####.com/ads/icon/purecleaner.png
ser####.####.com/api/su-whitelist
ser####.####.com/api/kingouser/recommend-apps?channel=####&lang-str=####...

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/databases/su.sqlite
<Package Folder>/shared_prefs/weather_on_resume.xml
<Package Folder>/databases/su.sqlite-journal
<Package Folder>/databases/app.sqlite-journal
<Package Folder>/files/systemoruser/1496213208503
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/weather_report_install_channel.xml
<Package Folder>/shared_prefs/com.google.android.gms.analytics.prefs.xml.bak
<Package Folder>/files/update/1496213260688
<Package Folder>/files/update/1496213209456
<Package Folder>/files/update/1496213258651
<Package Folder>/files/file
<Package Folder>/files/gaClientId
<Package Folder>/code_cache/secondary-dexes/tmp-<Package>-1.apk.classes11184568.zip
<Package Folder>/files/supersu.cfg
<Package Folder>/shared_prefs/mainactivity_local_language.xml
<Package Folder>/shared_prefs/aboutactivity_local_language.xml
<Package Folder>/databases/logs.db-journal
<Package Folder>/databases/whitelist.sqlite-journal
<Package Folder>/databases/logs.db
<Package Folder>/files/request_log
<Package Folder>/shared_prefs/SDKIDFA.xml
<Package Folder>/files/config
<Package Folder>/shared_prefs/FBAdPrefs.xml
<Package Folder>/files/systemoruser/1496213208531
<Package Folder>/files/update/1496213224594
<Package Folder>/files/busybox
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/shared_prefs/KingoAnalyticsSharedPreferences.xml
<Package Folder>/files/update/1496213238805
<Package Folder>/files/systemoruser/1496213209105
<Package Folder>/code_cache/secondary-dexes/MultiDex.lock
<Package Folder>/files/update/1496213222554
<Package Folder>/shared_prefs/deletefragment_local_language.xml
<Package Folder>/shared_prefs/multidex.version.xml
<Package Folder>/files/app/list
<Package Folder>/databases/google_analytics_v4.db-journal
<Package Folder>/app_app_apk/com.dat.jar
<Package Folder>/shared_prefs/active_time.xml
<Package Folder>/shared_prefs/com.google.android.gms.analytics.prefs.xml