Android.Hidden.3326

Техническая информация

Вредоносные функции:

Скрывает свою иконку с экрана устройства.

Осуществляет доступ к приватному интерфейсу телефонии (ITelephony)

Сетевая активность:

Подключается к:

appo####.####.com
i####.####.com
im####.####.com
r####.####.com
startap####.com

Запросы HTTP GET:

appo####.####.com/ep/url
i####.####.com/InApp/resources/info_ex_l.png
im####.####.com/static/images/fullpage_dynamite_bomb/clock.png
r####.####.com/1.4/gethtmlad?productId=####&os=####&sdkVersion=####&flav...
startap####.com/1.4/trackdownload?productId=####&os=####&sdkVersion=####...

Изменения в файловой системе:

Создает следующие файлы:

/data/anr/traces.txt
<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/f_000001
<Package Folder>/cache/####/f_000002
<Package Folder>/cache/####/f_000003
<Package Folder>/cache/####/index
<Package Folder>/cache/1478228129219.dex
<Package Folder>/cache/1478228129219.jar
<Package Folder>/cache/1478228129219.tmp
<Package Folder>/cache/ApplicationCache.db-journal (deleted)
<Package Folder>/databases/####/https_googleads.g.doubleclick.net_0.localstorage-journal (deleted)
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/files/StartappAdInfoMetadata
<Package Folder>/files/StartappBannerMetadata
<Package Folder>/files/StartappCacheMetadata
<Package Folder>/files/StartappMetadata
<Package Folder>/files/StartappSplashMetadata
<Package Folder>/files/back_.png
<Package Folder>/files/back_dark.png
<Package Folder>/files/browser_icon_dark.png
<Package Folder>/files/close_button.png
<Package Folder>/files/empty_star.png
<Package Folder>/files/filled_star.png
<Package Folder>/files/forward_.png
<Package Folder>/files/forward_dark.png
<Package Folder>/files/half_star.png
<Package Folder>/files/logo.png
<Package Folder>/files/shared_prefs_sdk_ad_prefs
<Package Folder>/files/x_dark.png
<Package Folder>/shared_prefs/<Package>.xml
<Package Folder>/shared_prefs/admob.xml
<Package Folder>/shared_prefs/com.startapp.android.publish.CookiePrefsFile.xml
<Package Folder>/shared_prefs/com.startapp.android.publish.CookiePrefsFile.xml.bak
<Package Folder>/shared_prefs/com.startapp.android.publish.xml
<Package Folder>/shared_prefs/com.startapp.android.publish.xml.bak