Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.DownLoader.122.origin
- Android.Xiny.78.origin
Загружает из Интернета следующие детектируемые угрозы:
- Android.DownLoader.122.origin
- Android.Xiny.78.origin
Сетевая активность:
Подключается к:
- a####.####.com
Запросы HTTP GET:
- a####.####.com/push/init.jsp?appid=####
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/app_TiBk/classes.jar
- <Package Folder>/app_~Termination/1
- <Package Folder>/databases/dbgeTP-journal
- <Package Folder>/files/tcom
- <Package Folder>/files/wmonirensheng3zhongwenpojiefortx13.jar
- <Package Folder>/shared_prefs/FiksuConfigurationSharedPreferences.xml
- <Package Folder>/shared_prefs/FiksuSharedPreferences.xml
- <Package Folder>/shared_prefs/GamePrefsFile.xml
- <Package Folder>/shared_prefs/_mapp_cfg.xml
- <Package Folder>/shared_prefs/_mapp_cfg.xml.bak
- <Package Folder>/shared_prefs/dtnum.xml
- <SD-Card>/Android/####/.nomedia
- <SD-Card>/Android/####/<Package>.txt
- <SD-Card>/Android/####/CC_SeedData.bin
- <SD-Card>/Android/####/HelveticaRoundedLTStd-Bd.ttf
- <SD-Card>/Android/####/android_bootstrap.sb
- <SD-Card>/Android/####/arguments.ini.sample
- <SD-Card>/Android/####/asset_list_android_extra_large.txt
- <SD-Card>/Android/####/asset_list_android_large.txt
- <SD-Card>/Android/####/asset_list_android_small.txt
- <SD-Card>/Android/####/asset_list_iphone.txt
- <SD-Card>/Android/####/asset_list_iphone5.txt
- <SD-Card>/Android/####/asset_list_mtx.txt
- <SD-Card>/Android/####/asset_list_published.txt
- <SD-Card>/Android/####/asset_list_published_models.txt
- <SD-Card>/Android/####/asset_list_published_models_character.txt
- <SD-Card>/Android/####/asset_list_published_music.txt
- <SD-Card>/Android/####/asset_list_published_sound.txt
- <SD-Card>/Android/####/asset_list_published_textures_loose.txt
- <SD-Card>/Android/####/asset_list_published_thumbnails.txt
- <SD-Card>/Android/####/asset_list_texture_atc.txt
- <SD-Card>/Android/####/asset_list_texture_atc_cas.txt
- <SD-Card>/Android/####/asset_list_texture_atc_cas_alpha_sf.txt
- <SD-Card>/Android/####/asset_list_texture_atc_cas_alpha_sm.txt
- <SD-Card>/Android/####/asset_list_texture_atc_cas_paintover_sf.txt
- <SD-Card>/Android/####/asset_list_texture_atc_cas_paintover_sm.txt
- <SD-Card>/Android/####/asset_list_texture_atc_indprop.txt
- <SD-Card>/Android/####/asset_list_texture_atc_object.txt
- <SD-Card>/Android/####/asset_list_texture_dxt5.txt
- <SD-Card>/Android/####/asset_list_texture_dxt5_cas.txt
- <SD-Card>/Android/####/asset_list_texture_dxt5_cas_alpha_sf.txt
- <SD-Card>/Android/####/asset_list_texture_dxt5_cas_alpha_sm.txt
- <SD-Card>/Android/####/asset_list_texture_dxt5_cas_paintover_sf.txt
- <SD-Card>/Android/####/asset_list_texture_dxt5_cas_paintover_sm.txt
- <SD-Card>/Android/####/asset_list_texture_dxt5_indprop.txt
- <SD-Card>/Android/####/asset_list_texture_dxt5_object.txt
- <SD-Card>/Android/####/asset_list_texture_etc.txt
- <SD-Card>/Android/####/asset_list_texture_etc_cas.txt
- <SD-Card>/Android/####/asset_list_texture_etc_cas_alpha_sf.txt
- <SD-Card>/Android/####/asset_list_texture_etc_cas_alpha_sm.txt
- <SD-Card>/Android/####/asset_list_texture_etc_cas_paintover_sf.txt
- <SD-Card>/Android/####/asset_list_texture_etc_cas_paintover_sm.txt
- <SD-Card>/Android/####/asset_list_texture_etc_indprop.txt
- <SD-Card>/Android/####/asset_list_texture_etc_object.txt
- <SD-Card>/Android/####/asset_list_texture_pvrtc.txt
- <SD-Card>/Android/####/asset_list_texture_pvrtc_cas.txt
- <SD-Card>/Android/####/asset_list_texture_pvrtc_cas_alpha_sf.txt
- <SD-Card>/Android/####/asset_list_texture_pvrtc_cas_alpha_sm.txt
- <SD-Card>/Android/####/asset_list_texture_pvrtc_cas_paintover_sf.txt
- <SD-Card>/Android/####/asset_list_texture_pvrtc_cas_paintover_sm.txt
- <SD-Card>/Android/####/asset_list_texture_pvrtc_indprop.txt
- <SD-Card>/Android/####/asset_list_texture_pvrtc_object.txt
- <SD-Card>/Android/####/bootstrap.m3g
- <SD-Card>/Android/####/bootstrap_layouts.sb
- <SD-Card>/Android/####/fonts.sb
- <SD-Card>/Android/####/locales.sb
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
