Android.DownLoader.2740

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.Xiny.20

Загружает из Интернета следующие детектируемые угрозы:

Android.Xiny.20

Сетевая активность:

Подключается к:

s####.####.com
n####.####.cn
gameboo####.####.com
i####.####.com
t####.####.net
d####.####.cn
a####.####.cn
gray####.####.com
a####.####.cn:8080
n####.####.cn:8080
h####.####.com

Запросы HTTP GET:

h####.####.com/img/0eac656cb45f6459ae1213b611650e58265b37f8.jpg@200w_50Q...
gameboo####.####.com/prefs/wifirec
d####.####.cn/jarFile/SDKAutoUpdate/hyjwan.jar
a####.####.cn:8080/GoodSupport/gurlicon
gray####.####.com/beauty_logo.png
i####.####.com/mms/icon/v1/2/f4/7b95f43f82a9cc022280a73351453f42_256_256...
n####.####.cn/goodsupport/querynews?size=####&page=####
n####.####.cn:8080/goodsupport/queryhots
a####.####.cn/GoodSupport/gamelist/switch

Запросы HTTP POST:

s####.####.com/cw/interface!u2.action?protocol=####&version=####&cid=####
t####.####.net/g/d

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/shared_prefs/TalingDataConfigD0045110FA235BA6725A9D84E7F3C5F1.xml
<Package Folder>/shared_prefs/pref_longtime.xml.bak
<Package Folder>/shared_prefs/analytics_agent_header_.xml
<Package Folder>/files/gamelist
<Package Folder>/cache/volley/1945985776-1782855598
<Package Folder>/cache/volley/16451338581336246537
<Package Folder>/files/TDtcagent.db
<Package Folder>/shared_prefs/rec_config.xml.bak
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/tdid.xml
<Package Folder>/cache/volley/1645133858-1806453783
<Package Folder>/cache/volley/333985744962273371
<Package Folder>/cache/volley/-16137146851039832359
<Package Folder>/files/td.lock
<Package Folder>/files/gamepkglist
<Package Folder>/cache/volley/1616582872-557267498
<Package Folder>/files/TDtcagent.db-journal
<Package Folder>/shared_prefs/a.xml
<Package Folder>/cache/volley/1645133858-1799287999
<Package Folder>/shared_prefs/W_Key.xml.bak
<Package Folder>/databases/downloadswc-journal
<Package Folder>/shared_prefs/config.xml
<Package Folder>/cache/volley/1451031699-1000533475
<Package Folder>/shared_prefs/pref_shorttime.xml.bak
<Package Folder>/databases/mc_info_db-journal
<Package Folder>/databases/apkdownloader.db-journal
<Package Folder>/cache/volley/333985744924410184
<Package Folder>/shared_prefs/pref_shorttime.xml
<Package Folder>/databases/downloadswc
<Package Folder>/shared_prefs/st.xml
<Package Folder>/cache/volley/1645133858-1866097991
<Package Folder>/shared_prefs/W_Key.xml
<Package Folder>/cache/volley/333985744-1271011292
<Package Folder>/cache/volley/1645133858-1241470507
<Package Folder>/cache/volley/1645133858-2033355915
<Package Folder>/files/whitelist
<Package Folder>/shared_prefs/rec_config.xml
<Package Folder>/databases/game_db-journal
<Package Folder>/shared_prefs/umeng_general_config.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/shared_prefs/pref_longtime.xml
<Package Folder>/app_plugin/PlayerUIApk.apk