Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.DownLoader.192.origin
- Android.DownLoader.192.origin
- Android.DownLoader.192.origin
Загружает из Интернета следующие детектируемые угрозы:
- Android.DownLoader.192.origin
- Android.DownLoader.192.origin
- Android.DownLoader.192.origin
Сетевая активность:
Подключается к:
- google-####.com
- i####.####.com
Запросы HTTP GET:
- google-####.com/__utm.gif?utmwv=####&utmn=####&utmcs=####&utmsr=####&utm...
- i####.####.com/service/getIpInfo.php?ip=####
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/databases/Downloado
- <Package Folder>/databases/Downloado-journal
- <Package Folder>/databases/Logo
- <Package Folder>/databases/Logo-journal
- <Package Folder>/databases/google_analytics.db-journal
- <Package Folder>/databases/iDownload-journal
- <Package Folder>/databases/iLog-journal
- <Package Folder>/files/configuration
- <Package Folder>/files/installation.pref-876274667
- <Package Folder>/files/installation.pref188304475
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-1124999551
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-1209511701
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-1210716254
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-1325110179
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-1426478559
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-1564678985
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-1567925244
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-1735428393
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-1894673324
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-2028481130
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-2043439499
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-2090915979
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-252731512
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-280789763
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-316487080
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-42170660
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-45674652
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-485533774
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-495415189
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-52423344
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-689163904
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-708939188
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-768613661
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-928516462
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref-990669155
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref1170165505
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref1245680964
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref139387496
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref1481807657
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref1514178315
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref1605808699
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref1658514812
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref1693568848
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref1814536357
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref1922730612
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref2056288418
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref299127355
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref300310034
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref371681802
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref416166998
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref471102405
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref546624627
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref626177833
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref638346457
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref645174008
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref699998509
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref749618981
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref845551578
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref852450749
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref859987275
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref900466145
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref958796815
- <Package Folder>/files/mominis.SyncIntentService.prefs.pref973940627
- <Package Folder>/files/mominis.common.PlayscapeSdk.version.info.pref
- <Package Folder>/files/mominis.common.logger.RemoteLogger.SHARED_PREFS.pref
- <Package Folder>/files/mominis.common.logger.RemoteLogger.SHARED_PREFS.pref1505313145
- <Package Folder>/files/mominis.common.logger.RemoteLogger.SHARED_PREFS.pref540513434
- <Package Folder>/files/momins.game.pref-622113835
- <Package Folder>/files/momins.game.pref1411003558
- <Package Folder>/files/momins.game.pref334749723
- <Package Folder>/files/sound-0
- <Package Folder>/files/sound-1
- <Package Folder>/files/sound-10
- <Package Folder>/files/sound-11
- <Package Folder>/files/sound-12
- <Package Folder>/files/sound-13
- <Package Folder>/files/sound-14
- <Package Folder>/files/sound-15
- <Package Folder>/files/sound-16
- <Package Folder>/files/sound-17
- <Package Folder>/files/sound-18
- <Package Folder>/files/sound-19
- <Package Folder>/files/sound-2
- <Package Folder>/files/sound-20
- <Package Folder>/files/sound-21
- <Package Folder>/files/sound-22
- <Package Folder>/files/sound-23
- <Package Folder>/files/sound-24
- <Package Folder>/files/sound-25
- <Package Folder>/files/sound-26
- <Package Folder>/files/sound-27
- <Package Folder>/files/sound-3
- <Package Folder>/files/sound-4
- <Package Folder>/files/sound-5
- <Package Folder>/files/sound-6
- <Package Folder>/files/sound-7
- <Package Folder>/files/sound-8
- <Package Folder>/files/sound-9
- <Package Folder>/shared_prefs/configo.xml
- <Package Folder>/shared_prefs/configo.xml.bak
- <Package Folder>/shared_prefs/iConfig.xml
- <Package Folder>/shared_prefs/welcome_notifications.xml
- <SD-Card>/.android/####/.iid
- <SD-Card>/.android/####/com.qiangfight.a.dex
- <SD-Card>/.android/####/com.qiangsky.a.dex
- <SD-Card>/.android/####/com.qiangsky.a.dex (deleted)
- <SD-Card>/.android/####/com.qiangup.a.dex
- <SD-Card>/.android/####/spot_in.png
- <SD-Card>/.android/.android.dat
- <SD-Card>/.android/.android.dat-journal
- <SD-Card>/Android/####/gameProcess_log.txt
- <SD-Card>/Android/####/gameProcess_shippableLog.txt
- <SD-Card>/Android/####/id
- <SD-Card>/Android/####/logo.png
- <SD-Card>/Android/####/playscape_log.txt
- <SD-Card>/Android/####/playscape_shippableLog.txt
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
