Android.Packed.23072

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.SmsSpy.677.origin

Загружает из Интернета следующие детектируемые угрозы:

Android.SmsSpy.677.origin

Сетевая активность:

Подключается к:

1####.####.224
a####.####.com
p####.####.com

Запросы HTTP POST:

1####.####.224/amb/rhi.html
a####.####.com/ad-service/ad/mark
p####.####.com/api/q/a/315432f0c34a6005ff1c18a57a27f742e

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/.jiagu/libjiagu.so
<Package Folder>/app_jgls/.log.lock
<Package Folder>/app_jgls/.log.ls
<Package Folder>/databases/sms_db
<Package Folder>/databases/sms_db-journal
<Package Folder>/databases/talkingdata_app.db-journal
<Package Folder>/files/####/.jg.ic
<Package Folder>/files/####/back.png
<Package Folder>/files/####/baidu
<Package Folder>/files/####/clickGame.png
<Package Folder>/files/####/fengmian.png
<Package Folder>/files/####/fmdh.ExportJson
<Package Folder>/files/####/fmdh0.plist
<Package Folder>/files/####/fmdh0.png
<Package Folder>/files/####/front.png
<Package Folder>/files/####/gameBlock.png
<Package Folder>/files/####/gameRole.ExportJson
<Package Folder>/files/####/gameRole0.plist
<Package Folder>/files/####/gameRole0.png
<Package Folder>/files/####/jifei_0.png
<Package Folder>/files/####/jifei_1.png
<Package Folder>/files/####/jifei_2.png
<Package Folder>/files/####/kfdh.png
<Package Folder>/files/####/point.png
<Package Folder>/files/####/return_btn.png
<Package Folder>/files/####/shuzi.png
<Package Folder>/files/####/tips.png
<Package Folder>/files/####/tips2.png
<Package Folder>/files/####/title.png
<Package Folder>/files/####/ui_giftclear0.plist
<Package Folder>/files/####/ui_giftclear0.png
<Package Folder>/files/####/ui_giftclear_1.ExportJson
<Package Folder>/files/####/ui_giftfuzzy0.plist
<Package Folder>/files/####/ui_giftfuzzy0.png
<Package Folder>/files/####/ui_giftfuzzy_1.ExportJson
<Package Folder>/files/####/ui_infomation0.plist
<Package Folder>/files/####/ui_infomation0.png
<Package Folder>/files/####/ui_infomation_1.ExportJson
<Package Folder>/files/####/yg_tips.png
<Package Folder>/files/mj.apk
<Package Folder>/files/mj.dex (deleted)
<Package Folder>/files/talkingdata_app_process_preferences_file
<Package Folder>/files/talkingdata_app_version_preferences_file
<Package Folder>/shared_prefs/315432f0c34a6005ff1c18a57a27f742e|account_file.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/TD_app_pefercen_profile.xml
<Package Folder>/shared_prefs/TD_app_pefercen_profile.xml.bak
<Package Folder>/shared_prefs/jg_app_update_settings_random.xml
<Package Folder>/shared_prefs/pref_file.xml
<Package Folder>/shared_prefs/pref_file.xml.bak
<Package Folder>/shared_prefs/qihoo_jiagu_crash_report.xml
<Package Folder>/shared_prefs/sdk.xml
<Package Folder>/shared_prefs/td_pefercen_profile.xml
<Package Folder>/shared_prefs/td_pefercen_profile.xml.bak
<Package Folder>/shared_prefs/tdid.xml
<SD-Card>/.tcookieid