Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.Xiny.78.origin
Prompts to install third-party applications.
Network activity:
Connecting to:
- a####.####.com
HTTP GET requests:
- a####.####.com/ad/20170125/201701251722221.apk
- a####.####.com/ad/20170125/201701251708725.png
HTTP POST requests:
- a####.####.com/is/list.jsp
- a####.####.com/is/click.jsp
- a####.####.com/is/info.jsp
- a####.####.com/is/show.jsp
- a####.####.com/is/init.jsp
Modified file system:
Creates the following files:
- /data/data/####/app_imgfile/d_safe_line
- /data/data/####/app_imgfile/d_sc_circle
- /data/data/####/app_imgfile/d_listview_bg
- /data/data/####/app_imgfile/d_btnbg_blue
- /data/data/####/app_imgfile/d_img_bg
- /data/data/####/app_imgfile/d_bottom_btn_install
- /data/data/####/app_imgfile/d_arrow_up
- /data/data/####/app_imgfile/d_pop_back
- /data/data/####/app_imgfile/d_m_star
- /data/data/####/app_imgfile/d_tj_line
- /data/data/####/app_imgfile/d_cp_more_btn
- /data/data/####/app_imgfile/d_btnbg_yellow
- /data/data/####/app_imgfile/d_top_bg
- /data/data/####/app_imgfile/d_cp_other_btn
- /data/data/####/app_imgfile/d_btnbg_orange
- /data/data/####/shared_prefs/spadturn.xml
- /data/data/####/shared_prefs/list_share.xml
- /data/data/####/shared_prefs/copy_screen_text_preferences.xml
- /data/data/####/app_imgfile/d_shortcutad_bg
- /data/data/####/app_imgfile/d_bottom_bg
- /data/data/####/app_imgfile/d_listcloseBtn
- /data/data/####/app_imgfile/d_default_bg
- /data/data/####/app_imgfile/d_appsc_an
- /data/data/####/app_imgfile/d_btnbg_green
- /data/data/####/app_imgfile/d_safe_icon
- /data/data/####/app_imgfile/d_cloesbtn_top
- /data/data/####/app_imgfile/d_dtop_closebtn
- /data/data/####/shared_prefs/appshare.xml.bak
- /data/data/####/app_imgfile/d_adwords_bg
- /data/data/####/app_imgfile/d_list_title_bg
- /data/data/####/app_imgfile/d_page_selecte_orange
- /data/data/####/files/runing.properties
- /data/data/####/app_imgfile/d_arrow_down
- /data/data/####/shared_prefs/appshare.xml
- /data/data/####/app_imgfile/d_page_selecte_green
- /data/data/####/app_imgfile/d_pop_bottom_btn
- /data/data/####/app_imgfile/d_bottom_btn_cancel
- /sdcard/ddad/runing.properties
- /sdcard/ddad/spot/http@@apk@d@ad@yuanfenup@com@ad@20170125@201701251708725@png.tmp
- /data/data/####/app_imgfile/d_btn_install
- /data/data/####/app_oouj/kkl.jar
- /data/data/####/app_imgfile/d_page_selecte_blue
- /data/data/####/app_imgfile/d_page_selecte_yellow
- /data/data/####/app_imgfile/d_page_normol
- /data/data/####/app_imgfile/d_install_btn
- /data/data/####/databases/gjappdl.db-journal
Miscellaneous:
Executes next shell scripts:
- chmod 773 /data/data/com.edwardkim.android.copyscreentextfull/temp/
- cat /proc/cpuinfo
- chmod 777 /storage/emulated/0/download/spot//201701251722221.apk.tmp
Contains functionality to send SMS messages automatically.