Android.Packed.24515

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.DownLoader.420.origin
Android.HiddenAds.21

Загружает из Интернета следующие детектируемые угрозы:

Android.DownLoader.420.origin
Android.HiddenAds.21

Сетевая активность:

Подключается к:

a####.####.com
c####.####.com
k####.####.cn
mo####.####.com
mobads-####.####.com
o####.####.com
w####.####.com

Запросы HTTP GET:

c####.####.com/cpro/ui/noexpire/css/2.1.5/img/mob-logo_2x.png
mo####.####.com/ads/css/min/main.css
w####.####.com/adx.php?c=####

Запросы HTTP POST:

a####.####.com/app_logs
k####.####.cn/ts/list_icons/sec
mobads-####.####.com/brwhis.log
o####.####.com/check_config_update

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/app_baidu_ad_sdk/__xadsdk__remote__final__builtin__.jar
<Package Folder>/app_baidu_ad_sdk/__xadsdk__remote__final__c865aabe-863d-414b-8165-152709d871d4.jar
<Package Folder>/app_database/####/http_mobads.baidu.com_0.localstorage-journal
<Package Folder>/app_database/####/http_mobads.baidu.com_0.localstorage-journal (deleted)
<Package Folder>/app_database/ApplicationCache.db-journal
<Package Folder>/app_database/ApplicationCache.db-journal (deleted)
<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/f_000001
<Package Folder>/cache/####/f_000002
<Package Folder>/cache/####/f_000003
<Package Folder>/cache/####/f_000004
<Package Folder>/cache/####/f_000005
<Package Folder>/cache/####/f_000006
<Package Folder>/cache/####/f_000007
<Package Folder>/cache/####/index
<Package Folder>/databases/t_u.db-journal
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
<Package Folder>/databases/webviewCookiesChromiumPrivate.db-journal (deleted)
<Package Folder>/files/####/.jg.ic
<Package Folder>/files/libjiagu.so
<Package Folder>/files/v.jar
<Package Folder>/shared_prefs/__sdk_ral.xml
<Package Folder>/shared_prefs/__sdk_ral.xml.bak
<Package Folder>/shared_prefs/__x_adsdk_agent_header__.xml
<Package Folder>/shared_prefs/__xadsdk_downloaded__version__.xml
<Package Folder>/shared_prefs/com.baidu.mobads.loader.xml
<Package Folder>/shared_prefs/mobclick_agent_header_<Package>.xml
<Package Folder>/shared_prefs/mobclick_agent_online_setting_<Package>.xml
<Package Folder>/shared_prefs/mobclick_agent_online_setting_<Package>.xml.bak
<Package Folder>/shared_prefs/mobclick_agent_state_<Package>.xml
<Package Folder>/shared_prefs/music.xml
<Package Folder>/shared_prefs/shareFile.xml