Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.2.origin
Сетевая активность:
Подключается к:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) www.moondow####.com:80
Запросы DNS:
- mt####.go####.com
- www.moondow####.com
Запросы HTTP GET:
- www.moondow####.com/pro.txt
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/app_app_apk/moonreaderp.dat.jar
- <Package Folder>/databases/google_analytics.db-journal
- <Package Folder>/databases/mrbooks.db-journal
- <Package Folder>/files/####/<Package>-1.apk.classes-314891694.zip
- <Package Folder>/files/####/<Package>-1.apk.classes-527012962.zip
- <Package Folder>/files/rwKAYoFOR
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/favfolders6
- <Package Folder>/shared_prefs/history.txt
- <Package Folder>/shared_prefs/multidex.version.xml
- <Package Folder>/shared_prefs/network2_feedbooks.com.xml
- <Package Folder>/shared_prefs/network2_gutenberg.org.xml
- <Package Folder>/shared_prefs/network2_manybooks.net.xml
- <Package Folder>/shared_prefs/network2_mobileread.com.xml
- <Package Folder>/shared_prefs/network2_smashwords.com.xml
- <Package Folder>/shared_prefs/network2_webnovel.xml
- <Package Folder>/shared_prefs/ratio.xml
- <Package Folder>/shared_prefs/theme_Day 1.xml
- <Package Folder>/shared_prefs/theme_Day 2.xml
- <Package Folder>/shared_prefs/theme_Day 3.xml
- <Package Folder>/shared_prefs/theme_Day Theme.xml
- <Package Folder>/shared_prefs/theme_Night 1 (True black).xml
- <Package Folder>/shared_prefs/theme_Night 2.xml
- <Package Folder>/shared_prefs/theme_Night 3.xml
- <Package Folder>/shared_prefs/theme_Night Theme.xml
- <Package Folder>/shared_prefs/theme_Outdoor (Pure white).xml
- <Package Folder>/shared_prefs/theme_circle_only.xml
- <Package Folder>/shared_prefs/theme_nature.xml
- <Package Folder>/shared_prefs/theme_pro 1.xml
- <Package Folder>/shared_prefs/theme_pro 2.xml
- <Package Folder>/shared_prefs/theme_pro 3.xml
- <Package Folder>/shared_prefs/theme_pro 4.xml
- <Package Folder>/shared_prefs/theme_pro 5.xml
- <Package Folder>/shared_prefs/theme_pro 6.xml
- <Package Folder>/shared_prefs/theme_pro 7.xml
- <Package Folder>/shared_prefs/theme_pro 8.xml
- <SD-Card>/.mr.log
Другие:
Загружает динамические библиотеки:
- imagepipeline
- rwKAYoFOR
Добавляет задания в системный планировщик.
Отрисовывает собственные окна поверх других приложений.
