Android.DownLoader.2889

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.Xiny.20

Загружает из Интернета следующие детектируемые угрозы:

Android.Xiny.20

Сетевая активность:

Подключается к:

a####.####.com
d####.####.cn
d####.####.kr
googl####.####.net
pag####.####.com
placem####.####.com
ts####.####.kr
y####.####.cn

Запросы HTTP GET:

a####.####.com/us/r30/Purple/v4/c2/39/42/c23942dc-9078-2bfa-8a83-0760a2a...
d####.####.cn/jarFile/SDKAutoUpdate/wet4.jar
d####.####.kr/cms/android/201311/24/IF1423000044020090904161621/00002739...
googl####.####.net/mads/static/mad/sdk/native/sdk-core-v40.js
pag####.####.com/activeview?avi=####&id=####&mtos=####&tos=####&p=####&m...
ts####.####.kr/android4/201207/27/IF1423000044020090904161621/0000298437...

Запросы HTTP POST:

placem####.####.com/v1/apps/aefe6694-50cb-4d05-b1b8-5fe543a683d6/content
y####.####.cn/k1?requestId=####&g=####&ua=####

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/app_BitmapCache/http%3A%2F%2Fdev.tstore.co.kr%2Fcms%2Fandroid%2F201311%2F24%2FIF1423000044020090904161621%2F0000273901%2Fimg%2Foriginal%2F0000273901_DP000101.png
<Package Folder>/app_BitmapCache/http%3A%2F%2Fwww.tstore.co.kr%2Fandroid4%2F201207%2F27%2FIF1423000044020090904161621%2F0000298437%2Fimg%2Fthumbnail%2F0000298437_180_180_0_68.PNG
<Package Folder>/app_BitmapCache/http%3A%2F%2Fwww.tstore.co.kr%2Fimages%2FIF1423000044020090904161621%2F0000133100%2Fthumbnail%2F0000133100_180_180_0_68.PNG
<Package Folder>/app_fiverocks/events2-journal
<Package Folder>/app_fiverocks/install
<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/f_000001
<Package Folder>/cache/####/f_000002
<Package Folder>/cache/####/f_000003
<Package Folder>/cache/####/f_000004
<Package Folder>/cache/####/f_000005
<Package Folder>/cache/####/f_000006
<Package Folder>/cache/####/f_000007
<Package Folder>/cache/####/f_000008
<Package Folder>/cache/####/f_000009
<Package Folder>/cache/####/f_00000a
<Package Folder>/cache/####/f_00000b
<Package Folder>/cache/####/index
<Package Folder>/cache/ApplicationCache.db-journal (deleted)
<Package Folder>/cache/ads1405286364.jar
<Package Folder>/databases/####/http_googleads.g.doubleclick.net_0.localstorage-journal (deleted)
<Package Folder>/databases/downloadswc
<Package Folder>/databases/downloadswc-journal
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
<Package Folder>/shared_prefs/101r.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/shared_prefs/W_Key.xml
<Package Folder>/shared_prefs/a.xml
<Package Folder>/shared_prefs/a.xml.bak
<Package Folder>/shared_prefs/applaunching.xml
<Package Folder>/shared_prefs/checkData00.xml
<Package Folder>/shared_prefs/com.google.android.gcm.xml
<Package Folder>/shared_prefs/fiverocks.xml
<Package Folder>/shared_prefs/fiverocks.xml.bak
<Package Folder>/shared_prefs/st.xml
<Package Folder>/shared_prefs/tjcPrefrences.xml
<SD-Card>/Download/####/4.8_wet4.jar.tmp
<SD-Card>/dt/restime.dat