Adware.Adpush.335

Техническая информация

Вредоносные функции:

Осуществляет доступ к приватному интерфейсу телефонии (ITelephony).

Сетевая активность:

Подключается к:

UDP(DNS) <Google DNS>
TCP(TLS/1.0) e.crashly####.com:443
TCP(TLS/1.0) rep####.crashly####.com:443
TCP(TLS/1.0) sett####.crashly####.com:443
TCP(TLS/1.0) 2####.58.211.110:443
TCP(TLS/1.0) onesi####.com:443
TCP(TLS/1.0) js.a####.ir:443

Запросы DNS:

ca.p####.ir
e.crashly####.com
js.a####.ir
mt####.go####.com
onesi####.com
rep####.crashly####.com
sett####.crashly####.com

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/code_cache/####/<Package>-1.apk.classes60219346.zip
<Package Folder>/databases/__pushe_base_lib_db-journal
<Package Folder>/databases/commlockinfo-journal
<Package Folder>/databases/evernote_jobs.db
<Package Folder>/databases/evernote_jobs.db-journal
<Package Folder>/databases/faviterApps
<Package Folder>/databases/faviterApps-journal
<Package Folder>/databases/webview.db-journal
<Package Folder>/files/####/5A0D7C87015C-0001-080F-064606C89A74...S.json
<Package Folder>/files/####/5A0D7C87015C-0001-080F-064606C89A74...e.json
<Package Folder>/files/####/5A0D7C87015C-0001-080F-064606C89A74...n.json
<Package Folder>/files/####/5A0D7C87015C-0001-080F-064606C89A74...p.json
<Package Folder>/files/####/5A0D7C87015C-0001-080F-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7C87015C-0001-080F-064606C89A74.cls_temp
<Package Folder>/files/####/5A0D7C880045-0002-080F-064606C89A74...S.json
<Package Folder>/files/####/5A0D7C880045-0002-080F-064606C89A74...e.json
<Package Folder>/files/####/5A0D7C880045-0002-080F-064606C89A74...n.json
<Package Folder>/files/####/5A0D7C880045-0002-080F-064606C89A74...p.json
<Package Folder>/files/####/5A0D7C880045-0002-080F-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7C880239-0001-0855-064606C89A74...S.json
<Package Folder>/files/####/5A0D7C880239-0001-0855-064606C89A74...e.json
<Package Folder>/files/####/5A0D7C880239-0001-0855-064606C89A74...n.json
<Package Folder>/files/####/5A0D7C880239-0001-0855-064606C89A74...p.json
<Package Folder>/files/####/5A0D7C880239-0001-0855-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7C880239-0001-0855-064606C89A74.cls_temp
<Package Folder>/files/####/5A0D7C890167-0002-0855-064606C89A74...S.json
<Package Folder>/files/####/5A0D7C890167-0002-0855-064606C89A74...e.json
<Package Folder>/files/####/5A0D7C890167-0002-0855-064606C89A74...n.json
<Package Folder>/files/####/5A0D7C890167-0002-0855-064606C89A74...p.json
<Package Folder>/files/####/5A0D7C890167-0002-0855-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7C89035B-0001-0893-064606C89A74...S.json
<Package Folder>/files/####/5A0D7C89035B-0001-0893-064606C89A74...e.json
<Package Folder>/files/####/5A0D7C89035B-0001-0893-064606C89A74...n.json
<Package Folder>/files/####/5A0D7C89035B-0001-0893-064606C89A74...p.json
<Package Folder>/files/####/5A0D7C89035B-0001-0893-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7C89035B-0001-0893-064606C89A74.cls_temp
<Package Folder>/files/####/5A0D7C8A0278-0002-0893-064606C89A74...S.json
<Package Folder>/files/####/5A0D7C8A0278-0002-0893-064606C89A74...e.json
<Package Folder>/files/####/5A0D7C8A0278-0002-0893-064606C89A74...n.json
<Package Folder>/files/####/5A0D7C8A0278-0002-0893-064606C89A74...p.json
<Package Folder>/files/####/5A0D7C8A0278-0002-0893-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7C8D0361-0001-08D1-064606C89A74...S.json
<Package Folder>/files/####/5A0D7C8D0361-0001-08D1-064606C89A74...e.json
<Package Folder>/files/####/5A0D7C8D0361-0001-08D1-064606C89A74...n.json
<Package Folder>/files/####/5A0D7C8D0361-0001-08D1-064606C89A74...p.json
<Package Folder>/files/####/5A0D7C8D0361-0001-08D1-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7C8D0361-0001-08D1-064606C89A74.cls_temp
<Package Folder>/files/####/5A0D7C8E0269-0002-08D1-064606C89A74...S.json
<Package Folder>/files/####/5A0D7C8E0269-0002-08D1-064606C89A74...e.json
<Package Folder>/files/####/5A0D7C8E0269-0002-08D1-064606C89A74...n.json
<Package Folder>/files/####/5A0D7C8E0269-0002-08D1-064606C89A74...p.json
<Package Folder>/files/####/5A0D7C8E0269-0002-08D1-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7C950207-0001-0914-064606C89A74...S.json
<Package Folder>/files/####/5A0D7C950207-0001-0914-064606C89A74...e.json
<Package Folder>/files/####/5A0D7C950207-0001-0914-064606C89A74...n.json
<Package Folder>/files/####/5A0D7C950207-0001-0914-064606C89A74...p.json
<Package Folder>/files/####/5A0D7C950207-0001-0914-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7C950207-0001-0914-064606C89A74.cls_temp
<Package Folder>/files/####/5A0D7C9600FF-0002-0914-064606C89A74...S.json
<Package Folder>/files/####/5A0D7C9600FF-0002-0914-064606C89A74...e.json
<Package Folder>/files/####/5A0D7C9600FF-0002-0914-064606C89A74...n.json
<Package Folder>/files/####/5A0D7C9600FF-0002-0914-064606C89A74...p.json
<Package Folder>/files/####/5A0D7C9600FF-0002-0914-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CA00208-0001-096C-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CA00208-0001-096C-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CA00208-0001-096C-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CA00208-0001-096C-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CA00208-0001-096C-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CA00208-0001-096C-064606C89A74.cls_temp
<Package Folder>/files/####/5A0D7CA10184-0002-096C-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CA10184-0002-096C-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CA10184-0002-096C-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CA10184-0002-096C-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CA10184-0002-096C-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CA303E4-0001-09AF-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CA303E4-0001-09AF-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CA303E4-0001-09AF-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CA303E4-0001-09AF-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CA303E4-0001-09AF-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CA303E4-0001-09AF-064606C89A74.cls_temp
<Package Folder>/files/####/5A0D7CA40308-0002-09AF-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CA40308-0002-09AF-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CA40308-0002-09AF-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CA40308-0002-09AF-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CA40308-0002-09AF-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CA500F9-0001-09ED-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CA500F9-0001-09ED-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CA500F9-0001-09ED-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CA500F9-0001-09ED-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CA500F9-0001-09ED-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CA500F9-0001-09ED-064606C89A74.cls_temp
<Package Folder>/files/####/5A0D7CA5039D-0002-09ED-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CA5039D-0002-09ED-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CA5039D-0002-09ED-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CA5039D-0002-09ED-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CA5039D-0002-09ED-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CA60190-0001-0A2B-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CA60190-0001-0A2B-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CA60190-0001-0A2B-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CA60190-0001-0A2B-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CA60190-0001-0A2B-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CA60190-0001-0A2B-064606C89A74.cls_temp
<Package Folder>/files/####/5A0D7CA700AF-0002-0A2B-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CA700AF-0002-0A2B-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CA700AF-0002-0A2B-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CA700AF-0002-0A2B-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CA700AF-0002-0A2B-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CA90127-0001-0A6A-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CA90127-0001-0A6A-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CA90127-0001-0A6A-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CA90127-0001-0A6A-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CA90127-0001-0A6A-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CA90127-0001-0A6A-064606C89A74.cls_temp
<Package Folder>/files/####/5A0D7CAA0019-0002-0A6A-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CAA0019-0002-0A6A-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CAA0019-0002-0A6A-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CAA0019-0002-0A6A-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CAA0019-0002-0A6A-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CAF0323-0001-0AB2-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CAF0323-0001-0AB2-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CAF0323-0001-0AB2-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CAF0323-0001-0AB2-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CAF0323-0001-0AB2-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CAF0323-0001-0AB2-064606C89A74.cls_temp
<Package Folder>/files/####/5A0D7CB00247-0002-0AB2-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CB00247-0002-0AB2-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CB00247-0002-0AB2-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CB00247-0002-0AB2-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CB00247-0002-0AB2-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CB600D1-0001-0B08-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CB600D1-0001-0B08-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CB600D1-0001-0B08-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CB600D1-0001-0B08-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CB600D1-0001-0B08-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CB600D1-0001-0B08-064606C89A74.cls_temp
<Package Folder>/files/####/5A0D7CB60369-0002-0B08-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CB60369-0002-0B08-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CB60369-0002-0B08-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CB60369-0002-0B08-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CB60369-0002-0B08-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CBC016D-0001-0B4A-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CBC016D-0001-0B4A-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CBC016D-0001-0B4A-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CBC016D-0001-0B4A-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CBC016D-0001-0B4A-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CBC016D-0001-0B4A-064606C89A74.cls_temp
<Package Folder>/files/####/5A0D7CBD00C8-0002-0B4A-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CBD00C8-0002-0B4A-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CBD00C8-0002-0B4A-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CBD00C8-0002-0B4A-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CBD00C8-0002-0B4A-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CC203AD-0001-0B97-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CC203AD-0001-0B97-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CC203AD-0001-0B97-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CC203AD-0001-0B97-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CC203AD-0001-0B97-064606C89A74...s_temp
<Package Folder>/files/####/5A0D7CC203AD-0001-0B97-064606C89A74.cls_temp
<Package Folder>/files/####/5A0D7CC30124-0002-0B97-064606C89A74...S.json
<Package Folder>/files/####/5A0D7CC30124-0002-0B97-064606C89A74...e.json
<Package Folder>/files/####/5A0D7CC30124-0002-0B97-064606C89A74...n.json
<Package Folder>/files/####/5A0D7CC30124-0002-0B97-064606C89A74...p.json
<Package Folder>/files/####/5A0D7CC30124-0002-0B97-064606C89A74...s_temp
<Package Folder>/files/####/com.crashlytics.settings.json
<Package Folder>/files/####/crash_marker
<Package Folder>/files/####/initialization_marker
<Package Folder>/files/####/sa_292bb72e-e9b9-471e-aa7b-9ed0b5f0...29.tap
<Package Folder>/files/####/sa_3846b0db-db3a-4083-aaca-6f9c9dca...19.tap
<Package Folder>/files/####/sa_4bd8f648-9a63-46a9-947f-4bd02eda...75.tap
<Package Folder>/files/####/sa_4f81cdc2-7411-4bc8-8c9c-6f198712...22.tap
<Package Folder>/files/####/sa_58507be5-bae2-44eb-9be0-23d06651...08.tap
<Package Folder>/files/####/sa_67b6c44d-7f01-402f-9c78-3d741ee7...37.tap
<Package Folder>/files/####/sa_6ef3bddb-5288-4ff1-b293-60684ec6...96.tap
<Package Folder>/files/####/sa_857f3610-b8b4-41b5-9a80-ebc92745...81.tap
<Package Folder>/files/####/sa_917d9771-b2eb-47c5-a3c6-89106b46...52.tap
<Package Folder>/files/####/sa_a0eaf5e7-5990-4e1e-b96d-c37b8733...95.tap
<Package Folder>/files/####/sa_a38fca28-805a-488b-91a8-e744e07f...42.tap
<Package Folder>/files/####/sa_af993258-39a4-46b6-bba5-510469be...21.tap
<Package Folder>/files/####/sa_b0eef341-67ad-4785-9dfd-4afa64a9...26.tap
<Package Folder>/files/####/sa_cc56f144-f2b6-488e-8b9f-e2cda4ff...08.tap
<Package Folder>/files/####/sa_fc18d630-1054-4894-8b6f-300124c0...60.tap
<Package Folder>/files/####/session_analytics.tap
<Package Folder>/files/####/session_analytics.tap.tmp
<Package Folder>/files/unsent_requests
<Package Folder>/no_backup/com.google.android.gms.appid-no-backup
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/OneSignal.xml
<Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
<Package Folder>/shared_prefs/adadSharedPreferences.xml
<Package Folder>/shared_prefs/co.ronash.pushe.keystore.xml
<Package Folder>/shared_prefs/com.crashlytics.prefs.xml
<Package Folder>/shared_prefs/com.crashlytics.sdk.android.crash...re.xml
<Package Folder>/shared_prefs/com.crashlytics.sdk.android;answe...gs.xml
<Package Folder>/shared_prefs/com.google.android.gms.measurement.prefs.xml
<Package Folder>/shared_prefs/device_id.xml.xml
<Package Folder>/shared_prefs/drawwiz.xml
<Package Folder>/shared_prefs/io.fabric.sdk.android;fabric;io.f...ng.xml
<Package Folder>/shared_prefs/multidex.version.xml

Другие:

Загружает динамические библиотеки:

tmessages

Может автоматически отправлять СМС-сообщения.

Осуществляет доступ к информации о сети.

Добавляет задания в системный планировщик.

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней