Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.SmsSend.1877.origin
Сетевая активность:
Подключается к:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) image####.online####.net:80
- TCP(HTTP/1.1) web.online####.net:80
- TCP(HTTP/1.1) r####.sdkce####.com:80
- TCP(HTTP/1.1) i####.online####.net:80
- TCP(HTTP/1.1) j####.sdkce####.com:80
Запросы DNS:
- i####.online####.net
- image####.online####.net
- j####.sdkce####.com
- r####.sdkce####.com
- web.online####.net
Запросы HTTP GET:
- image####.online####.net/upload/2017/headpicture/1.png
- image####.online####.net/upload/2017/headpicture/2.png
- image####.online####.net/upload/2017/headpicture/3.png
- image####.online####.net/upload/2017/headpicture/4.png
- image####.online####.net/upload/2017/headpicture/5.png
- image####.online####.net/upload/2017/headpicture/6.png
- web.online####.net/api/album/112608ffb326d9edb82c59ccaa34cd05/picture?us...
- web.online####.net/api/album/54d204cd6adc6f3ecaa359ccae5362ed/picture?us...
- web.online####.net/api/album/b9d255d20fcea376b9bb59c9e48dd6c0/picture?us...
- web.online####.net/api/album/list/
- web.online####.net/api/album/putawaytime?pageSize=####
- web.online####.net/api/comment/112608ffb326d9edb82c59ccaa34cd05/list?use...
- web.online####.net/api/comment/54d204cd6adc6f3ecaa359ccae5362ed/list?use...
- web.online####.net/api/comment/b9d255d20fcea376b9bb59c9e48dd6c0/list?use...
- web.online####.net/api/tag/getalbum/banner
- web.online####.net/api/tag/getalbum/bestgoddess
- web.online####.net/api/tag/getalbum/cyberreds
- web.online####.net/api/tag/getalbum/streetsnap
- web.online####.net/api/user/devnum?userId=####&deviceNumber=####
- web.online####.net/api/version/check
- web.online####.net/api/vip/getPayAmount?meal=####
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/cache/####/0170e53afe05407e2daccec2bb0cd8f4393....0.tmp
- <Package Folder>/cache/####/067c42743e063e003c65c1a2395456f4684....0.tmp
- <Package Folder>/cache/####/0a81eb3965dc32174d124ddea92a5de08d5....0.tmp
- <Package Folder>/cache/####/18a4070de83f6b9b214318d35c4fe96b18f....0.tmp
- <Package Folder>/cache/####/219f3a6f058f5734f2728fea89155684333....0.tmp
- <Package Folder>/cache/####/2211cd2e7558d1ec0b3795e00e3ea802311....0.tmp
- <Package Folder>/cache/####/4200171b0c3d2e0fe374ea6daaa62b7d297....0.tmp
- <Package Folder>/cache/####/4e57a3b79f22d100e5578086ff720562113....0.tmp
- <Package Folder>/cache/####/53522aeccf516121d59d710bc8e4a84384b....0.tmp
- <Package Folder>/cache/####/5ea00916f312d5de247639642f22040df98....0.tmp
- <Package Folder>/cache/####/5eb41e3447e9b81e1ea10457a5233af57b9....0.tmp
- <Package Folder>/cache/####/6343bf9a7dbe4820be618e095344056c2e1....0.tmp
- <Package Folder>/cache/####/677e500531d9f15dcad8c6fd83977e4a050....0.tmp
- <Package Folder>/cache/####/7030e47846bbeb4779ee9db55ed1344d9fd....0.tmp
- <Package Folder>/cache/####/735ff9ad674c9bd18167023947838f0c022....0.tmp
- <Package Folder>/cache/####/7b58583a397393dd50be9891a9a9f9f5227....0.tmp
- <Package Folder>/cache/####/7cac3c6c5162cfeba334d436c073aac46bf....0.tmp
- <Package Folder>/cache/####/819a0d148aebff4df3c99ed7cb204dec3bb....0.tmp
- <Package Folder>/cache/####/99ba51179e2acb7f9cfe097b4917249912b....0.tmp
- <Package Folder>/cache/####/9c373832c1312b18c717e4ac5f3252cd0f7....0.tmp
- <Package Folder>/cache/####/9e0601b682667aa9d2ce9fc09e7db4f775f....0.tmp
- <Package Folder>/cache/####/a35c3d0cd4828dd5dee197a76fe5b0bd4c2....0.tmp
- <Package Folder>/cache/####/aa40421c2a88c6dbac3ac74b96e9e1816db....0.tmp
- <Package Folder>/cache/####/aab80bb04535113561849e8feb03e551fff....0.tmp
- <Package Folder>/cache/####/acdf65bc9ee5f2ca651eb67a7f25eb744b6....0.tmp
- <Package Folder>/cache/####/b2b57b6c7179bf473492c4a278ab7c0c49f....0.tmp
- <Package Folder>/cache/####/ba59e95123a18dc8f083ca78c1b6c659a3d....0.tmp
- <Package Folder>/cache/####/bc8c4f51fed570df66c3c2a1f8ca1cb8aed....0.tmp
- <Package Folder>/cache/####/c0c3fe9ea5953c097abbf3d7d463a65b132....0.tmp
- <Package Folder>/cache/####/c3fecd2c5930e8b03b48cb42ae016788376....0.tmp
- <Package Folder>/cache/####/d02b89fcac78706a99ac146eb4c720d8d54....0.tmp
- <Package Folder>/cache/####/d792909c8979af44e0ed14ee4dd166d59f7....0.tmp
- <Package Folder>/cache/####/f23c0c08944a46e6f7c3b47eef6afaa3609....0.tmp
- <Package Folder>/cache/####/f4f9c59315774c8b70ccd4cebf157e29248....0.tmp
- <Package Folder>/cache/####/f685dea44fa9de5c61c82fcc0ac1e3e2493....0.tmp
- <Package Folder>/cache/####/f72fe6f7dc8ac4f196e71f7babe84d0c9a6....0.tmp
- <Package Folder>/cache/####/journal.tmp
- <Package Folder>/files/kdn.jar
- <Package Folder>/shared_prefs/database.xml
Другие:
Осуществляет доступ к информации о телефоне (номер, imei и тд.).
Отрисовывает собственные окна поверх других приложений.
Парсит информацию из смс сообщений.
