Android.Hidden.3059

Техническая информация

Вредоносные функции:

Скрывает свою иконку с экрана устройства.

Сетевая активность:

Подключается к:

taiho####.net

Запросы HTTP GET:

taiho####.net/app/com.toanhoc.admob?mobileId=####&country=####&androidVe...

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/index
<Package Folder>/cache/1459442732877.jar
<Package Folder>/cache/1459442732877.tmp
<Package Folder>/cache/ApplicationCache.db-journal
<Package Folder>/cache/ApplicationCache.db-journal (deleted)
<Package Folder>/databases/easySwipe.db-journal
<Package Folder>/databases/google_analytics_v4.db-journal
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
<Package Folder>/files/####/592E79340214-0001-0836-9AB750678EA0BeginSession.cls
<Package Folder>/files/####/592E79340214-0001-0836-9AB750678EA0SessionApp.cls
<Package Folder>/files/####/592E79340214-0001-0836-9AB750678EA0SessionDevice.cls
<Package Folder>/files/####/592E79340214-0001-0836-9AB750678EA0SessionOS.cls
<Package Folder>/files/####/com.crashlytics.settings.json
<Package Folder>/files/####/initialization_marker
<Package Folder>/files/####/session_analytics.tap
<Package Folder>/files/AppEventsLogger.persistedsessioninfo
<Package Folder>/files/gaClientId
<Package Folder>/shared_prefs/<Package>.xml
<Package Folder>/shared_prefs/<Package>.xml.bak
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/FBAdPrefs.xml
<Package Folder>/shared_prefs/LioneMessi10.xml
<Package Folder>/shared_prefs/SDKIDFA.xml
<Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
<Package Folder>/shared_prefs/com.crashlytics.prefs.xml
<Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
<Package Folder>/shared_prefs/com.facebook.sdk.appEventPreferences.xml
<Package Folder>/shared_prefs/com.facebook.sdk.attributionTracking.xml
<Package Folder>/shared_prefs/com.google.android.gms.analytics.prefs.xml
<Package Folder>/shared_prefs/com.google.android.gms.analytics.prefs.xml.bak
<Package Folder>/shared_prefs/io.fabric.sdk.android;fabric;a.a.a.a.m.xml
<Package Folder>/shared_prefs/multidex.version.xml