Android.Packed.22791

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.Xiny.1.origin

Загружает из Интернета следующие детектируемые угрозы:

Android.Xiny.1.origin

Сетевая активность:

Подключается к:

go####.com
go####.nl
s####.####.net

Запросы HTTP GET:

go####.com/
go####.nl/xjs/_/js/k=xjs.qs.nl.pxuascHYE8A.O/m=sx,c,sb_mob,bct,cdos,elog...

Запросы HTTP POST:

s####.####.net/browser/search

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/app_appcache/ApplicationCache.db-journal
<Package Folder>/app_appcache/ApplicationCache.db-journal (deleted)
<Package Folder>/app_databases/####/http_www.google.nl_0.localstorage-journal (deleted)
<Package Folder>/app_geolocation/CachedGeoposition.db
<Package Folder>/app_geolocation/CachedGeoposition.db-journal (deleted)
<Package Folder>/app_geolocation/GeolocationPermissions.db-journal (deleted)
<Package Folder>/app_icons/WebpageIcons.db-journal
<Package Folder>/app_icons/WebpageIcons.db-journal (deleted)
<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/f_000001
<Package Folder>/cache/####/f_000002
<Package Folder>/cache/####/f_000003
<Package Folder>/cache/####/f_000004
<Package Folder>/cache/####/f_000005
<Package Folder>/cache/####/f_000006
<Package Folder>/cache/####/f_000007
<Package Folder>/cache/####/f_000008
<Package Folder>/cache/####/f_000009
<Package Folder>/cache/####/f_00000a
<Package Folder>/cache/####/f_00000b
<Package Folder>/cache/####/f_00000c
<Package Folder>/cache/####/f_00000d
<Package Folder>/cache/####/index
<Package Folder>/databases/bat_statistics.db-journal
<Package Folder>/databases/browsermain.db
<Package Folder>/databases/browsermain.db-journal
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
<Package Folder>/databases/webviewCookiesChromiumPrivate.db-journal (deleted)
<Package Folder>/files/olmiddleware.jar
<Package Folder>/files/olmiddleware.so
<Package Folder>/shared_prefs/browser_setting.xml
<Package Folder>/shared_prefs/browser_setting.xml.bak
<Package Folder>/shared_prefs/sharedpreferences_batmobi_settings.xml
<Package Folder>/shared_prefs/sharedpreferences_batmobi_third_priorities.xml