Техническая информация
Вредоносные функции:
Скрывает свою иконку с экрана устройства.
Сетевая активность:
Подключается к:
- a####.####.com
- a####.####.net
- cdn####.####.com
- d####.####.com
- hy####.####.com
- n####.####.com
- p####.####.com
- sc####.####.com
- set####.####.com
- trac####.####.com
Запросы HTTP GET:
- a####.####.com/mpapi/ad?model=####&fomat=####&mcc=####&os_v=####&directi...
- a####.####.net/api/v2/template/get?slot_id=####&update_time=####
- cdn####.####.com/cdn-adn/offersync/17/06/08/12/26/5938d1fe71350.jpg
- d####.####.com/ttc?h=####&p=####&q=####
- hy####.####.com/offerwall/img/star_w.png
- n####.####.com/openapi/ad/v3?app_id=####&unit_id=####&category=####&req_...
- sc####.####.com/v1/scheme/placement?model=####&mcc=####&os_v=####&direct...
- set####.####.com/setting?unit_ids=####&app_id=####&sign=####&platform=##...
- trac####.####.com/click?mb_pl=####&mb_nt=####&mb_campid=####&mb_package=...
Запросы HTTP POST:
- p####.####.com/myservercb/api/1800
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/cache/####/data_0
- <Package Folder>/cache/####/data_1
- <Package Folder>/cache/####/data_2
- <Package Folder>/cache/####/data_3
- <Package Folder>/cache/####/f_000001
- <Package Folder>/cache/####/index
- <Package Folder>/databases/mobpower.db-journal
- <Package Folder>/databases/mobvista.msdk.db-journal
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/databases/webviewCookiesChromium.db-journal
- <Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
- <Package Folder>/files/####/agent_log
- <Package Folder>/shared_prefs/PancouCacheData_ztop.xml
- <Package Folder>/shared_prefs/TOKEN.xml
- <Package Folder>/shared_prefs/com.mobpower.xml
- <Package Folder>/shared_prefs/com.mobpower.xml.bak
- <Package Folder>/shared_prefs/ct_default.xml
- <Package Folder>/shared_prefs/mobvista.xml
- <Package Folder>/shared_prefs/share_data.xml
- <Package Folder>/shared_prefs/share_date.xml
- <Package Folder>/shared_prefs/share_date.xml.bak
- <SD-Card>/.mobvista700/####/-1281087799.temp
- <SD-Card>/.mobvista700/####/-1708673771.temp
- <SD-Card>/.mobvista700/####/-43076249.temp
- <SD-Card>/.mobvista700/####/2103913252
