Android.Packed.22980

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.MobiDash.1.origin

Загружает из Интернета следующие детектируемые угрозы:

Android.MobiDash.1.origin

Сетевая активность:

Подключается к:

a####.####.com
aca####.####.com
cleando####.com
f####.####.com
go####.####.space
plat####.####.com
portabl####.mobi

Запросы HTTP GET:

a####.####.com/app/js/api.min.js?ver=####
aca####.####.com/
cleando####.com/images/sprite.png
f####.####.com/css?family=####&subset=####
go####.####.space/htCrTy
plat####.####.com/in.js
portabl####.mobi/?sl=####&data1=####&data2=####

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/app_app_apk/ClashofClans2.dat.jar
<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/f_000001
<Package Folder>/cache/####/f_000002
<Package Folder>/cache/####/f_000003
<Package Folder>/cache/####/f_000004
<Package Folder>/cache/####/f_000005
<Package Folder>/cache/####/f_000006
<Package Folder>/cache/####/f_000007
<Package Folder>/cache/####/f_000008
<Package Folder>/cache/####/f_000009
<Package Folder>/cache/####/f_00000a
<Package Folder>/cache/####/f_00000b
<Package Folder>/cache/####/f_00000c
<Package Folder>/cache/####/f_00000d
<Package Folder>/cache/####/f_00000e
<Package Folder>/cache/####/f_00000f
<Package Folder>/cache/####/f_000010
<Package Folder>/cache/####/f_000011
<Package Folder>/cache/####/f_000012
<Package Folder>/cache/####/f_000013
<Package Folder>/cache/####/f_000014
<Package Folder>/cache/####/index
<Package Folder>/code_cache/####/MultiDex.lock
<Package Folder>/databases/db_metrica_<Package>-journal
<Package Folder>/databases/db_metrica_<Package>_13-journal
<Package Folder>/databases/db_metrica_<Package>_20799a27-fa80-4b36-b2db-0f8141f24180-journal
<Package Folder>/databases/metrica_client_data.db-journal
<Package Folder>/databases/metrica_data.db-journal
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
<Package Folder>/files/credentials.dat
<Package Folder>/files/file
<Package Folder>/shared_prefs/<Package>_boundentrypreferences.xml
<Package Folder>/shared_prefs/<Package>_migrationpreferences.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak (deleted)
<Package Folder>/shared_prefs/<Package>_servertimeoffset.xml
<Package Folder>/shared_prefs/<Package>_startupserviceinfopreferences.xml
<Package Folder>/shared_prefs/multidex.version.xml