Android.Packed.19274

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.MobiDash.1.origin

Network activity:

Connecting to:

up####.####.com

HTTP GET requests:

up####.####.com/avl/update.conf

Modified file system:

Creates the following files:

/data/data/####/files/avl/android/herui/46404236_58b69cc5.avl
/data/data/####/files/avl/android/herui/288fd742_58b679bc.avl
/data/data/####/files/avl/android/pornware/scdf/6b52bbbe_58b69913.avl
/data/data/####/files/avl/android/herui/cd00fd27_58b69cc4.avl
/data/data/####/files/metrica_client_data.db.lock
/data/data/####/files/avl/android/pornware/sign/ae2a917_58b6ba4f.avl
/data/data/####/files/avl/android/pornware/gen/a4bf6f2b_58b69cc6.avl
/data/data/####/files/avl/android/ads/gen/cf14d97a_58b679bc.avl
/data/data/####/files/avl/android/basic/421ebe1d_58b69349.avl
/data/data/####/shared_prefs/####_servertimeoffset.xml
/data/data/####/files/avl/android/avlpk_emb.avl
/data/data/####/files/avl/android/avlpk_opc.avl
/data/data/####/files/avl/android/pornware/sign/5c582bdf_58b6a29e.avl
/data/data/####/files/avl/android/avlpk_cls.avl
/data/data/####/shared_prefs/multidex.version.xml
/data/data/####/databases/metrica_data.db-journal
/data/data/####/files/avl/android/pornware/sign/ae2a917_58b6a29c.avl
/data/data/####/files/avl/android/avlpk_opd.avl
/data/data/####/files/avl/android/herui/a18a1a3f_58b69cc4.avl
/data/data/####/files/avl/android/herui/df99d9b4_58b679bc.avl
/data/data/####/files/avl/android/opc/525f0066_58b678b2.avl
/data/data/####/shared_prefs/####_preferences.xml.bak
/data/data/####/files/avl/android/herui/a091d205_58b69cc4.avl
/data/data/####/files/avl/android/pornware/sign/4e231950_58b6a29d.avl
/data/data/####/shared_prefs/avinfos.xml
/data/data/####/files/avl/android/ext/avlpk_ext_other.avl
/data/data/####/files/avl/android/basic/e6a5b0be_58b69349.avl
/data/data/####/files/libs/libavlm-v23.so
/data/data/####/files/avl/android/herui/4f25de6c_58b69cc5.avl
/data/data/####/files/avl/android/herui/258bbabb_58b69cc5.avl
/data/data/####/files/avl/android/avlpk_payware.avl
/data/data/####/files/avl/android/avlpk_apn.avl
/data/data/####/files/avl/android/ads/opd/2cbe643b_58b6981f.avl
/data/data/####/files/avl/android/avlpk_sgnl.avl
/data/data/####/files/avl/android/basic/57874382_58b69349.avl
/data/data/####/files/avl/android/basic/7af7586b_58b69349.avl
/data/data/####/files/avl/android/ext/avlpk_ext_notvir.avl
/data/data/####/databases/avainfo.db
/data/data/####/files/file
/data/data/####/databases/metrica_client_data.db-journal
/data/data/####/files/avl/android/avlpk_herui.avl
/data/data/####/shared_prefs/####_startupserviceinfopreferences.xml
/data/data/####/shared_prefs/####_migrationpreferences.xml
/data/data/####/databases/db_metrica_####_20799a27-fa80-4b36-b2db-0f8141f24180-journal
/data/data/####/shared_prefs/####_boundentrypreferences.xml
/data/data/####/files/avl/android/ext/avlpk_ext_sleep_new.avl
/data/data/####/files/avl/android/herui/1c9f41bf_58b69cc8.avl
/data/data/####/files/avl/conf/liscense.conf
/data/data/####/files/libavlm.so
/data/data/####/files/avl/android/avlpk_pack.avl
/data/data/####/files/avl/android/opc/146ce26e_58b69b62.avl
/data/data/####/files/avl/android/pornware/apn/971f71e7_58b69cc5.avl
/data/data/####/databases/metrica_client_data.db
/data/data/####/files/avl/android/pornware/sign/5c582bdf_58b6ba50.avl
/data/data/####/files/avl/android/avlpk_basic.avl
/data/data/####/files/avl/android/pornware/gen/c21c8941_58b69cc7.avl
/data/data/####/files/avl/android/avlpk_amx.avl
/data/data/####/files/avl/android/herui/ba49293_58b679bc.avl
/data/data/####/files/avl/android/basic/9052a81a_58b69349.avl
/data/data/####/code_cache/secondary-dexes/MultiDex.lock
/data/data/####/files/avl/android/pornware/scdf/1c71b2cd_58b6905f.avl
/data/data/####/files/avl/android/ext/avlpk_ext_sign.avl
/data/data/####/files/credentials.dat
/data/data/####/files/avlname
/data/data/####/files/avl/android/avlpk_white.avl
/data/data/####/files/avl/android/basic/48059ddb_58b69349.avl
/data/data/####/databases/db_metrica_####_13-journal
/data/data/####/files/avl/android/herui/1246b98d_58b69e02.avl
/data/data/####/files/avl/android/pornware/apn/57b4ed43_58b69cc5.avl
/data/data/####/files/avl/android/herui/611c8d5c_58b69cc5.avl
/data/data/####/files/avl/android/herui/d5b4cb01_58b69e15.avl
/data/data/####/files/avl/android/pornware/sign/e0235da0_58b6a29c.avl
/data/data/####/files/avl/android/herui/7f6d14b8_58b69142.avl
/data/data/####/files/avl/android/herui/6475191d_58b679bc.avl
/data/data/####/files/avl/android/basic/468b019b_58b69349.avl
/data/data/####/files/avl/android/avlpk_sign.avl
/data/data/####/databases/db_metrica_####-journal
/data/data/####/shared_prefs/setting.xml
/data/data/####/files/avl/conf/avllib.conf
/data/data/####/app_app_apk/avl.dat.jar
/data/data/####/files/avl/android/herui/201409ba_58b69cc5.avl
/data/data/####/files/avl/android/opc/239fc5bc_58b69b41.avl
/data/data/####/code_cache/secondary-dexes/tmp-####-1.apk.classes815273588.zip
/data/data/####/files/avl/android/avlpk_opg.avl
/data/data/####/files/avl/android/apn/b0609d17_58b69cc4.avl
/data/data/####/files/avl/android/basic/f020e7b7_58b69349.avl
/data/data/####/files/avl/android/basic/a487d650_58b69349.avl
/data/data/####/shared_prefs/####_preferences.xml
/data/data/####/files/avl/android/pornware/apn/c1321bed_58b69cc6.avl
/data/data/####/files/avl/android/ext/avlpk_ext_pornware_sign.avl
/data/data/####/files/avl/android/basic/9458e06e_58b69349.avl
/data/data/####/files/avl/android/sign/23924409_58b6a29e.avl
/data/data/####/files/avl/android/avlpk_opc_scdf.avl
/data/data/####/files/avl/android/white/d3fbcc2d_58b67faa.avl
/data/data/####/files/avl/android/ext/avlpk_ext_ori.avl
/data/data/####/files/avl/android/ads/gen/43ea483e_58b679bc.avl
/data/data/####/files/avl/android/basic/8639ef5a_58b69349.avl
/data/data/####/files/avl/android/opc_scdf/e618ef6f_58b699cc.avl
/data/data/####/files/avl/android/herui/9b4989bb_58b679bd.avl
/data/data/####/files/avl/android/ext/avlpk_ext_sleep.avl
/data/data/####/files/avl/android/pornware/apn/c21c8941_58b69cc4.avl
/data/data/####/files/avl/android/avlpk_pornware.avl
/data/data/####/files/avl/android/pornware/sign/ae2a917_58b6a29d.avl
/data/data/####/files/avl/android/ext/avlpk_ext_analisis.avl
/data/data/####/files/avl/android/pornware/sign/bba3a03a_58b6a29c.avl
/data/data/####/files/avl/android/basic/5068320d_58b69349.avl
/data/data/####/files/avl/android/avlpk_behav.avl
/data/data/####/databases/avainfo.db-journal
/data/data/####/files/avl/android/avlpk_amc.avl
/data/data/####/files/avl/android/avlpk_notvir.avl
/data/data/####/files/avl/android/avlpk_ads.avl
/data/data/####/files/avl/android/avlpk_kw.avl
/data/data/####/files/avl/android/pornware/sign/2c293574_58b6a29c.avl
/data/data/####/files/avl/android/opc_scdf/924839d6_58b69b41.avl
/data/data/####/files/avl/android/ads/opc/77eb2570_58b677bb.avl

Miscellaneous:

Uses administrator priveleges.

Contains functionality to send SMS messages automatically.

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical information

Curing recommendations

Free trial