Android.Packed.26810

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.MobiDash.2.origin

Сетевая активность:

Подключается к:

4####.####.162
4####.####.31
a####.####.com
googl####.####.net

Запросы HTTP GET:

4####.####.31/pi/c0e1f1f5-c088-3792-9364-a129a902630f.png
googl####.####.net/mads/static/sdk/native/sdk-core-v40.js

Запросы HTTP POST:

4####.####.162/cells/report.php
a####.####.com/app_logs
a####.####.com/cells/data.php

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/app_app_apk/barcodescan.dat.jar
<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/f_000001
<Package Folder>/cache/####/f_000002
<Package Folder>/cache/####/f_000003
<Package Folder>/cache/####/f_000004
<Package Folder>/cache/####/index
<Package Folder>/cache/ads1752452765.jar
<Package Folder>/code_cache/####/MultiDex.lock
<Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes1007166261.zip
<Package Folder>/databases/####/http_googleads.g.doubleclick.net_0.localstorage-journal (deleted)
<Package Folder>/databases/barcode_scanner_history.db
<Package Folder>/databases/barcode_scanner_history.db-journal
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
<Package Folder>/files/WjhjZHqRa
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/shared_prefs/MobCells.xml
<Package Folder>/shared_prefs/MobCells.xml.bak
<Package Folder>/shared_prefs/MobCellsCache.xml
<Package Folder>/shared_prefs/MobCellsConfig.xml
<Package Folder>/shared_prefs/MobCellsConfig.xml.bak
<Package Folder>/shared_prefs/_has_set_default_values.xml
<Package Folder>/shared_prefs/mobclick_agent_header_<Package>.xml
<Package Folder>/shared_prefs/mobclick_agent_state_<Package>.xml
<Package Folder>/shared_prefs/mobclick_agent_state_<Package>.xml.bak
<Package Folder>/shared_prefs/multidex.version.xml
<SD-Card>/mbstph/246ce0ed1e801fca5eaacd180eef473a
<SD-Card>/mbstph/521c29b29de67abe108ac55842d229a9
<SD-Card>/mbstph/59188028a7daedd96d8000297dff3c80
<SD-Card>/mbstph/70fad65c9820947ace50213251e13519
<SD-Card>/mbstph/85304245aa4a6adc208a3cb759f2d0b6
<SD-Card>/mbstph/b4003519f421f73bc1bc754824522df4
<SD-Card>/mbstph/dee0351813adfa1d67f49db382f977a7