Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.Xiny.20
Загружает из Интернета следующие детектируемые угрозы:
- Android.Xiny.20
Сетевая активность:
Подключается к:
- 2####.####.35
- 3####.####.com
- a####.####.com
- d####.####.cn
- e####.####.cn
- fc####.####.com
- k####.####.com
- m####.####.com
- m####.####.com:8757
- o####.####.com
- s####.####.cn
- s####.####.com
Запросы HTTP GET:
- 2####.####.35/d.xiongjiong.com.cn/jarFile/SDKAutoUpdate/lvs.jar?wsiphost...
- d####.####.cn/jarFile/SDKAutoUpdate/lvs.jar
- fc####.####.com/store_raw_download?buid=####&uuid=####&key=####
- m####.####.com/sdk.html
- s####.####.cn/bb_small/DhduwiaBa7ld0TJpI1BeuCYsUvQrlGeJsbKq1Jn3j8vibuIMy...
- s####.####.com/store_raw_download?buid=####&uuid=####
Запросы HTTP POST:
- 3####.####.com/BabyTingPicAudio/changwei/changwei_config.txt
- a####.####.com/app_logs
- e####.####.cn/cw/interface!u2.action?protocol=####&version=####&cid=####
- k####.####.com/
- m####.####.com:8757/sdk.html
- o####.####.com/v2/check_config_update
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/databases/downloadswc
- <Package Folder>/databases/downloadswc-journal
- <Package Folder>/files/.imprint
- <Package Folder>/files/umeng_it.cache
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/<Package>_preferences.xml.bak
- <Package Folder>/shared_prefs/W_Key.xml
- <Package Folder>/shared_prefs/a.xml
- <Package Folder>/shared_prefs/a.xml.bak
- <Package Folder>/shared_prefs/babyting_shared.xml
- <Package Folder>/shared_prefs/mobclick_agent_online_setting_<Package>.xml
- <Package Folder>/shared_prefs/st.xml
- <Package Folder>/shared_prefs/umeng_general_config.xml
- <Package Folder>/shared_prefs/umeng_general_config.xml.bak
- <SD-Card>/Android/####/.nomedia
- <SD-Card>/Android/####/1064iwddgouqh1x3f2sma6i6o
- <SD-Card>/Android/####/18xtsmij501347ajrugh78v8
- <SD-Card>/Android/####/1b29uqb4l36kiz0o06o2lnb9p
- <SD-Card>/Android/####/1fpz63zvtlc7e9s2uug0utpe1
- <SD-Card>/Android/####/1j3ovrq5v4ocjuq0cbxpo320o
- <SD-Card>/Android/####/1jgvs5fctvr2fnvauwqtllm9m
- <SD-Card>/Android/####/1sjsjfddkegvg3e5djwkt2jjo
- <SD-Card>/Android/####/1vnz6uyqj07mwlfjqwrxmrlj4
- <SD-Card>/Android/####/1wpl55xhcmfq055k2d2pnmq6s
- <SD-Card>/Android/####/24qbwh0tlc8yzsxisvbznslma
- <SD-Card>/Android/####/2ak960fq5zwvy61wvq6utnjwz
- <SD-Card>/Android/####/2cdn904ymqjivxhmr7mki74gs
- <SD-Card>/Android/####/2ercfu5d8iwnz36rb4a27pxaz
- <SD-Card>/Android/####/2khmlhyjuidxn69zbvtmaz95n
- <SD-Card>/Android/####/2oxi37g4qy8wjngi44g5tnp6z
- <SD-Card>/Android/####/2xi2431i93se0ivs4ugs9d9kn
- <SD-Card>/Android/####/32qvqdzohull6641ov9p34by0
- <SD-Card>/Android/####/3e5jbbh9izorz1bf7zn2y1ram
- <SD-Card>/Android/####/3gph82a9m8bnswrb8katft6q7
- <SD-Card>/Android/####/3hnzrdg24y1j8cfbbq44wktc4
- <SD-Card>/Android/####/3jeihzl5upa08dk2fs384fe3f
- <SD-Card>/Android/####/3ucn78cwgvw7tf93igig4r4gh
- <SD-Card>/Android/####/43ti59yzh4oy5oxze7vxjjy35
- <SD-Card>/Android/####/45amcwt5tpn4d8z04o2auzxku
- <SD-Card>/Android/####/49sog1ctjqxq2w8ml6ijejjk6
- <SD-Card>/Android/####/4aw6gfnsqcs9ocow3l2czpfvo
- <SD-Card>/Android/####/4fzybvzetd1asc5ohm0kdd6bj
- <SD-Card>/Android/####/4g2ac0ihtl6nxfa6trzu6dfwj
- <SD-Card>/Android/####/4lfsiibj45stppko9bbfhd97x
- <SD-Card>/Android/####/4mto6py1y5ttvfi2lh6qmq10c
- <SD-Card>/Android/####/4sy5p4ph7w178uwk34emyuv69
- <SD-Card>/Android/####/4t6g0wzu0w5pxex5va407wrse
- <SD-Card>/Android/####/4zcluutpcj1q3fg6lhz1dlk11
- <SD-Card>/Android/####/5132vl1ge8ggmn3x2cod96u6g
- <SD-Card>/Android/####/5fj4ciyccngpykopc9ew5j5dm
- <SD-Card>/Android/####/5ik4lvety45zn5n8zswkqulz
- <SD-Card>/Android/####/5nekyfrnt0o8p7tr2p5idaxky
- <SD-Card>/Android/####/5o2tmqd0h5nh4cozv715b4wco
- <SD-Card>/Android/####/5yiwu8kg5zhwoy5mcglhsdlx0
- <SD-Card>/Android/####/614dcz9e6ffco292bpik0l55u
- <SD-Card>/Android/####/667fklu5bik06ho1hxvazomxy
- <SD-Card>/Android/####/6aqz9sggho77xh996z1eelvjb
- <SD-Card>/Android/####/6cmk59br3b4302d4jwue6go5s
- <SD-Card>/Android/####/6dczii8rzct8fvbz9ko97y902
- <SD-Card>/Android/####/6g1hwgyve5ht2yxp6crgwrhcz
- <SD-Card>/Android/####/6hsbilt1lkfi7ip54jzcoi3jn
- <SD-Card>/Android/####/6pdvfwh634iuy3obway6jzdv8
- <SD-Card>/Android/####/6pn0wz6ts2awf474wznaise6e
- <SD-Card>/Android/####/6xpfh2yafuwxpgxnzg2a0bwy8
- <SD-Card>/Android/####/72sz8swkd18e6ojwf0yvmqq82
- <SD-Card>/Android/####/77bca8m4kzx2t8u2es66im8qs
- <SD-Card>/Android/####/77tt6mciuwvbv0k35a4ftgfsi
- <SD-Card>/Android/####/7ek10vx9fq5dj7jnsgt85tkz7
- <SD-Card>/Android/####/7ru32jlhkcxm3gb3igarnq9r
- <SD-Card>/Android/####/f3sep8sfheov78objw6ngnrp
- <SD-Card>/Android/####/ghr7qi4wtdmkd9d7k05hywr9
- <SD-Card>/Android/####/oujudv3dpwzpmejn6knlggv9
- <SD-Card>/Android/####/piuks6sjkopv0ehtcwhc3j10
- <SD-Card>/Android/####/r3shj3ll3j4n9rwwm73popoe
- <SD-Card>/Download/####/4.6_lvs.jar.tmp
- <SD-Card>/dt/restime.dat
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
