Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.2.origin
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/app_app_apk/bandstars.dat.jar
- <Package Folder>/app_webview/Web Data
- <Package Folder>/app_webview/Web Data-journal
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes1556796415.zip
- <Package Folder>/databases/DownloadsDB-journal
- <Package Folder>/files/####/14eca5c123871c001ad94af7e3c5284967d00559
- <Package Folder>/files/####/14eca5c123871c001ad94af7e3c5284967d00559.sig
- <Package Folder>/files/####/16aa22e5ed929a27fc3119be5422807adf6a8a41.json
- <Package Folder>/files/####/1e14129059cc774d4527086831c767e28f8a9700
- <Package Folder>/files/####/1e14129059cc774d4527086831c767e28f8a9700.sig
- <Package Folder>/files/####/2abc98ec3366751d869542b0019a30d1b6f2b72e.json
- <Package Folder>/files/####/3be908dcd000a278d737f187c443de89ab4dfaf6.json
- <Package Folder>/files/####/3pl2i8jlhq800.product.bn.tl..dat
- <Package Folder>/files/####/3pl2i8jlhq800.product.bn.tl..sig
- <Package Folder>/files/####/71c270bf89e64de780fb8aad2fb295db371bcad5
- <Package Folder>/files/####/71c270bf89e64de780fb8aad2fb295db371bcad5.sig
- <Package Folder>/files/####/753549552c1ec40f56ffeab5274ed80410cba5de
- <Package Folder>/files/####/753549552c1ec40f56ffeab5274ed80410cba5de.sig
- <Package Folder>/files/####/7d8ec8dfe2620beb4f6b1ae802340df19d6eb152.json
- <Package Folder>/files/####/87a65e64a452e713219bb85b2dc360d2ea9450e6
- <Package Folder>/files/####/87a65e64a452e713219bb85b2dc360d2ea9450e6.sig
- <Package Folder>/files/####/8ad2f02813db349894a548ba93314642633ed5b6
- <Package Folder>/files/####/8ad2f02813db349894a548ba93314642633ed5b6.sig
- <Package Folder>/files/####/9be72d3eb28b3c437e6fb6b14921d2a2fcbacf2a.json
- <Package Folder>/files/####/DownloadManager.json
- <Package Folder>/files/####/LocalKeyStore.LocalUsers.txt
- <Package Folder>/files/####/StaticData.json
- <Package Folder>/files/####/Time.json
- <Package Folder>/files/####/UserData.json
- <Package Folder>/files/####/UserList.json
- <Package Folder>/files/####/UserLocalData.json
- <Package Folder>/files/####/UserProfileData.json
- <Package Folder>/files/####/UserTransactionsPending.json
- <Package Folder>/files/####/UserTransactionsSent.json
- <Package Folder>/files/####/UserTransactionsVerified.json
- <Package Folder>/files/####/a14aed9fe922d4309389bf9ad182368c96070243
- <Package Folder>/files/####/a14aed9fe922d4309389bf9ad182368c96070243.sig
- <Package Folder>/files/####/ae8366a3e9858dc8ad31d6345867c51ac58fa7b5
- <Package Folder>/files/####/ae8366a3e9858dc8ad31d6345867c51ac58fa7b5.sig
- <Package Folder>/files/####/c0160f10487c425812acf24841377fd8c9ea5b23
- <Package Folder>/files/####/c0160f10487c425812acf24841377fd8c9ea5b23.sig
- <Package Folder>/files/####/c247d69697856a925f02fdacc2eb71922a6346b2
- <Package Folder>/files/####/c247d69697856a925f02fdacc2eb71922a6346b2.sig
- <Package Folder>/files/####/cd680b9f5ceef7d42a078dfbaf477c6be0aaa0eb
- <Package Folder>/files/####/cd680b9f5ceef7d42a078dfbaf477c6be0aaa0eb.sig
- <Package Folder>/files/####/d4098c53c2cbefabef1db396815313879445e7bd
- <Package Folder>/files/####/d4098c53c2cbefabef1db396815313879445e7bd.sig
- <Package Folder>/files/####/e6556c91b5b15406adcc134b2277e1dcee3b7af7.json
- <Package Folder>/files/####/f04a68a0e29c4d0d8782ed494bbcf17c78b78e79
- <Package Folder>/files/####/f04a68a0e29c4d0d8782ed494bbcf17c78b78e79.sig
- <Package Folder>/files/####/f6436daec233cbd5fdaf0c21419e60aab45a47eb.json
- <Package Folder>/files/####/kontagent-precompiled.dat
- <Package Folder>/files/####/kontagent_app_installed
- <Package Folder>/files/####/news.json
- <Package Folder>/files/####/otherlevels_push.dat
- <Package Folder>/files/####/session_count.txt
- <Package Folder>/files/FQFUKItfW
- <Package Folder>/files/INSTALLATION
- <Package Folder>/shared_prefs/<Package>.UserStore.xml
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/VUNGLE_PUB_APP_INFO.xml
- <Package Folder>/shared_prefs/com.android.vending.licensing.APK...cy.xml
- <Package Folder>/shared_prefs/com.google.android.gcm.xml
- <Package Folder>/shared_prefs/multidex.version.xml
- <Package Folder>/shared_prefs/openudid_prefs.xml
Другие:
Загружает динамические библиотеки:
- FQFUKItfW
Добавляет задания в системный планировщик.
Отрисовывает собственные окна поверх других приложений.
