Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.Mobifun.3.origin
Загружает из Интернета следующие детектируемые угрозы:
- Android.Mobifun.3.origin
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/.gpcache/gpmpclasses.jar
- <Package Folder>/app_dex/db2.dex
- <Package Folder>/files/####/level1.json
- <Package Folder>/files/####/level10.json
- <Package Folder>/files/####/level100.json
- <Package Folder>/files/####/level101.json
- <Package Folder>/files/####/level102.json
- <Package Folder>/files/####/level11.json
- <Package Folder>/files/####/level12.json
- <Package Folder>/files/####/level13.json
- <Package Folder>/files/####/level14.json
- <Package Folder>/files/####/level15.json
- <Package Folder>/files/####/level16.json
- <Package Folder>/files/####/level17.json
- <Package Folder>/files/####/level18.json
- <Package Folder>/files/####/level19.json
- <Package Folder>/files/####/level2.json
- <Package Folder>/files/####/level20.json
- <Package Folder>/files/####/level21.json
- <Package Folder>/files/####/level22.json
- <Package Folder>/files/####/level23.json
- <Package Folder>/files/####/level24.json
- <Package Folder>/files/####/level25.json
- <Package Folder>/files/####/level26.json
- <Package Folder>/files/####/level27.json
- <Package Folder>/files/####/level28.json
- <Package Folder>/files/####/level29.json
- <Package Folder>/files/####/level3.json
- <Package Folder>/files/####/level30.json
- <Package Folder>/files/####/level31.json
- <Package Folder>/files/####/level32.json
- <Package Folder>/files/####/level33.json
- <Package Folder>/files/####/level34.json
- <Package Folder>/files/####/level35.json
- <Package Folder>/files/####/level36.json
- <Package Folder>/files/####/level37.json
- <Package Folder>/files/####/level38.json
- <Package Folder>/files/####/level39.json
- <Package Folder>/files/####/level4.json
- <Package Folder>/files/####/level40.json
- <Package Folder>/files/####/level41.json
- <Package Folder>/files/####/level42.json
- <Package Folder>/files/####/level43.json
- <Package Folder>/files/####/level44.json
- <Package Folder>/files/####/level45.json
- <Package Folder>/files/####/level46.json
- <Package Folder>/files/####/level47.json
- <Package Folder>/files/####/level48.json
- <Package Folder>/files/####/level49.json
- <Package Folder>/files/####/level5.json
- <Package Folder>/files/####/level50.json
- <Package Folder>/files/####/level51.json
- <Package Folder>/files/####/level52.json
- <Package Folder>/files/####/level53.json
- <Package Folder>/files/####/level54.json
- <Package Folder>/files/####/level55.json
- <Package Folder>/files/####/level56.json
- <Package Folder>/files/####/level57.json
- <Package Folder>/files/####/level58.json
- <Package Folder>/files/####/level59.json
- <Package Folder>/files/####/level6.json
- <Package Folder>/files/####/level60.json
- <Package Folder>/files/####/level61.json
- <Package Folder>/files/####/level62.json
- <Package Folder>/files/####/level63.json
- <Package Folder>/files/####/level64.json
- <Package Folder>/files/####/level65.json
- <Package Folder>/files/####/level66.json
- <Package Folder>/files/####/level67.json
- <Package Folder>/files/####/level68.json
- <Package Folder>/files/####/level69.json
- <Package Folder>/files/####/level7.json
- <Package Folder>/files/####/level70.json
- <Package Folder>/files/####/level71.json
- <Package Folder>/files/####/level72.json
- <Package Folder>/files/####/level73.json
- <Package Folder>/files/####/level74.json
- <Package Folder>/files/####/level75.json
- <Package Folder>/files/####/level76.json
- <Package Folder>/files/####/level77.json
- <Package Folder>/files/####/level78.json
- <Package Folder>/files/####/level79.json
- <Package Folder>/files/####/level8.json
- <Package Folder>/files/####/level80.json
- <Package Folder>/files/####/level81.json
- <Package Folder>/files/####/level82.json
- <Package Folder>/files/####/level83.json
- <Package Folder>/files/####/level84.json
- <Package Folder>/files/####/level85.json
- <Package Folder>/files/####/level86.json
- <Package Folder>/files/####/level87.json
- <Package Folder>/files/####/level88.json
- <Package Folder>/files/####/level89.json
- <Package Folder>/files/####/level9.json
- <Package Folder>/files/####/level90.json
- <Package Folder>/files/####/level91.json
- <Package Folder>/files/####/level92.json
- <Package Folder>/files/####/level93.json
- <Package Folder>/files/####/level94.json
- <Package Folder>/files/####/level95.json
- <Package Folder>/files/####/level96.json
- <Package Folder>/files/####/level97.json
- <Package Folder>/files/####/level98.json
- <Package Folder>/files/####/level99.json
- <Package Folder>/files/####/levelGold1.json
- <Package Folder>/files/####/niao001.atlas
- <Package Folder>/files/####/niao001.atlas.tmp
- <Package Folder>/files/####/niao001.json
- <Package Folder>/files/####/niao001.json.tmp
- <Package Folder>/files/####/niao001.png.tmp
- <Package Folder>/files/####/niao002.atlas
- <Package Folder>/files/####/niao002.atlas.tmp
- <Package Folder>/files/####/niao002.json
- <Package Folder>/files/####/niao002.json.tmp
- <Package Folder>/files/####/niao002.png
- <Package Folder>/files/####/niao002.png.tmp
- <Package Folder>/files/####/niao003.atlas
- <Package Folder>/files/####/niao003.atlas.tmp
- <Package Folder>/files/####/niao003.json
- <Package Folder>/files/####/niao003.json.tmp
- <Package Folder>/files/####/niao003.png
- <Package Folder>/files/####/niao003.png.tmp
- <Package Folder>/files/db2.jar
- <Package Folder>/files/gaClientId
- <Package Folder>/files/gpmpsdk.so
- <Package Folder>/shared_prefs/315432f0c34a6005ff1c18a57a27f742e|account_file.xml
- <Package Folder>/shared_prefs/a000312.xml
- <Package Folder>/shared_prefs/pref_file.xml
- <Package Folder>/shared_prefs/pref_file.xml.bak
- <Package Folder>/shared_prefs/td_pefercen_profile.xml
- <Package Folder>/shared_prefs/tdid.xml
- <SD-Card>/.tcookieid
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
