Android.Packed.24137

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.SmsSend.18879

Downloads the following detected threats from the Web:

Android.SmsSend.18879

Network activity:

Connecting to:

a####.####.mobi
adse####.####.mobi
b####.####.com
b####.####.net
c####.####.com
c####.com
cl####.####.de
f####.####.com
face####.com
gl####.####.com:9090
imgg####.####.com
j####.####.com
m####.####.com
pag####.####.com
serv####.####.com
st####.####.com
t####.shop
technol####.####.uk
technol####.net
trackme####.com
u####.com
u####.com:7079
xr####.tech

HTTP GET requests:

a####.####.mobi/?utm_term=####&clickverify=####&utm_content=####
adse####.####.mobi/tracker/click.php?link=####&click_id=####&pub_id=####...
b####.####.com/beacon.js
b####.####.net/map/ct=y/c=9380/tp=MGID/tpid=h64kHXNa0qP1
c####.####.com/?a=####&c=####&E=####&s1=####&s2=####&s3=####&campid=####...
c####.####.com/images/mgid_logo_mini_43x20.png
c####.####.com/setmuidn/?muidn=####
c####.com/?a=####&c=####&E=####&s1=####&s2=####&s3=####&campid=####&pid=...
cl####.####.de/?aff_id=####&offer_id=####&ext_id=####&campid=####&pid=####
f####.####.com/css?family=####
f####.####.com/s/lato/v13/MZ1aViPqjfvZwVD_tzjjkwLUuEpTyoUstqEm5AMlJo4.ttf
face####.com/plugins/likebox.php?href=####&w####&height=####&colorscheme...
gl####.####.com:9090/app?IsOnlyCp=####&phone=####&offerid=####&affid=###...
imgg####.####.com/1614/1614449_492x328.jpg
j####.####.com/t/e/technologycraze.net.105160.js?t=####
m####.####.com/mghtml/framehtml/c/t/e/technologycraze.net.105160.html
m####.####.com/xtrem/style/html5/devices.css
pag####.####.com/pagead/js/r20170626/r20170110/show_ads_impl.js?2106####
serv####.####.com/119987?t=####&ref=####&lu=####
st####.####.com/images/xtrem/480x384y51200o.jpg/kaizen-hard042013-032.48...
t####.shop/view/JicPg8COdWlKwRTiW8jjLqoOMIkDrBkVEw4ZmXleek4?c=####&pid=#...
technol####.####.uk/wp-content/themes/yeahthemes-sparkle/js/yt.script.mi...
technol####.net/wp-content/uploads/2017/02/423.png
trackme####.com/r/f128bbaa-6095-11e7-804c-1141936616ee/0/
xr####.tech/view/sYlWH6NH55MjBhSalS3hSalSncCgHYnODXsULpMoxqW2lihSalSIsDA...

HTTP POST requests:

u####.com/jsdk/sd.action?b=####&ca=####&ica=####&re=####
u####.com:7079/jsdk/sd.action?b=####

Modified file system:

Creates the following files:

<Package Folder>/app_jiagu/es.xw.fm.sx.zc_201707041412.ppt
<Package Folder>/app_jiagu/x.apk
<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/f_000001
<Package Folder>/cache/####/f_000002
<Package Folder>/cache/####/f_000003
<Package Folder>/cache/####/f_000004
<Package Folder>/cache/####/f_000005
<Package Folder>/cache/####/f_000006
<Package Folder>/cache/####/f_000007
<Package Folder>/cache/####/f_000008
<Package Folder>/cache/####/f_000009
<Package Folder>/cache/####/f_00000a
<Package Folder>/cache/####/f_00000b
<Package Folder>/cache/####/f_00000c
<Package Folder>/cache/####/f_00000d
<Package Folder>/cache/####/f_00000e
<Package Folder>/cache/####/f_00000f
<Package Folder>/cache/####/f_000010
<Package Folder>/cache/####/f_000011
<Package Folder>/cache/####/f_000012
<Package Folder>/cache/####/f_000013
<Package Folder>/cache/####/f_000014
<Package Folder>/cache/####/f_000015
<Package Folder>/cache/####/f_000016
<Package Folder>/cache/####/f_000017
<Package Folder>/cache/####/f_000018
<Package Folder>/cache/####/f_000019
<Package Folder>/cache/####/f_00001a
<Package Folder>/cache/####/f_00001b
<Package Folder>/cache/####/f_00001c
<Package Folder>/cache/####/f_00001d
<Package Folder>/cache/####/f_00001e
<Package Folder>/cache/####/f_00001f
<Package Folder>/cache/####/f_000020
<Package Folder>/cache/####/f_000021
<Package Folder>/cache/####/f_000022
<Package Folder>/cache/####/f_000023
<Package Folder>/cache/####/f_000024
<Package Folder>/cache/####/f_000025
<Package Folder>/cache/####/f_000026
<Package Folder>/cache/####/f_000027
<Package Folder>/cache/####/f_000028
<Package Folder>/cache/####/f_000029
<Package Folder>/cache/####/f_00002a
<Package Folder>/cache/####/f_00002b
<Package Folder>/cache/####/f_00002c
<Package Folder>/cache/####/f_00002d
<Package Folder>/cache/####/f_00002e
<Package Folder>/cache/####/f_00002f
<Package Folder>/cache/####/f_000030
<Package Folder>/cache/####/f_000031
<Package Folder>/cache/####/f_000032
<Package Folder>/cache/####/f_000033
<Package Folder>/cache/####/f_000034
<Package Folder>/cache/####/f_000035
<Package Folder>/cache/####/f_000036
<Package Folder>/cache/####/f_000037
<Package Folder>/cache/####/f_000038
<Package Folder>/cache/####/f_000039
<Package Folder>/cache/####/f_00003a
<Package Folder>/cache/####/f_00003b
<Package Folder>/cache/####/f_00003c
<Package Folder>/cache/####/f_00003d
<Package Folder>/cache/####/f_00003e
<Package Folder>/cache/####/f_00003f
<Package Folder>/cache/####/f_000040
<Package Folder>/cache/####/f_000041
<Package Folder>/cache/####/f_000042
<Package Folder>/cache/####/f_000043
<Package Folder>/cache/####/f_000044
<Package Folder>/cache/####/f_000045
<Package Folder>/cache/####/f_000046
<Package Folder>/cache/####/f_000047
<Package Folder>/cache/####/f_000048
<Package Folder>/cache/####/f_000049
<Package Folder>/cache/####/f_00004a
<Package Folder>/cache/####/f_00004b
<Package Folder>/cache/####/f_00004c
<Package Folder>/cache/####/f_00004d
<Package Folder>/cache/####/f_00004e
<Package Folder>/cache/####/f_00004f
<Package Folder>/cache/####/f_000050
<Package Folder>/cache/####/f_000051
<Package Folder>/cache/####/f_000052
<Package Folder>/cache/####/f_000053
<Package Folder>/cache/####/f_000054
<Package Folder>/cache/####/f_000055
<Package Folder>/cache/####/f_000056
<Package Folder>/cache/####/f_000057
<Package Folder>/cache/####/f_000058
<Package Folder>/cache/####/f_000059
<Package Folder>/cache/####/f_00005a
<Package Folder>/cache/####/f_00005b
<Package Folder>/cache/####/f_00005c
<Package Folder>/cache/####/f_00005d
<Package Folder>/cache/####/f_00005e
<Package Folder>/cache/####/f_00005f
<Package Folder>/cache/####/f_000060
<Package Folder>/cache/####/f_000061
<Package Folder>/cache/####/f_000062
<Package Folder>/cache/####/f_000063
<Package Folder>/cache/####/f_000064
<Package Folder>/cache/####/f_000065
<Package Folder>/cache/####/f_000066
<Package Folder>/cache/####/f_000067
<Package Folder>/cache/####/f_000068
<Package Folder>/cache/####/f_000069
<Package Folder>/cache/####/f_00006a
<Package Folder>/cache/####/f_00006b
<Package Folder>/cache/####/f_00006c
<Package Folder>/cache/####/f_00006d
<Package Folder>/cache/####/f_00006e
<Package Folder>/cache/####/f_00006f
<Package Folder>/cache/####/f_000070
<Package Folder>/cache/####/f_000071
<Package Folder>/cache/####/f_000072
<Package Folder>/cache/####/f_000073
<Package Folder>/cache/####/f_000074
<Package Folder>/cache/####/f_000075
<Package Folder>/cache/####/f_000076
<Package Folder>/cache/####/f_000077
<Package Folder>/cache/####/f_000078
<Package Folder>/cache/####/f_000079
<Package Folder>/cache/####/f_00007a
<Package Folder>/cache/####/f_00007b
<Package Folder>/cache/####/f_00007c
<Package Folder>/cache/####/f_00007d
<Package Folder>/cache/####/f_00007e
<Package Folder>/cache/####/f_00007f
<Package Folder>/cache/####/f_000080
<Package Folder>/cache/####/f_000081
<Package Folder>/cache/####/f_000082
<Package Folder>/cache/####/f_000083
<Package Folder>/cache/####/f_000084
<Package Folder>/cache/####/f_000085
<Package Folder>/cache/####/f_000086
<Package Folder>/cache/####/f_000087
<Package Folder>/cache/####/f_000088
<Package Folder>/cache/####/f_000089
<Package Folder>/cache/####/f_00008a
<Package Folder>/cache/####/f_00008b
<Package Folder>/cache/####/f_00008c
<Package Folder>/cache/####/f_00008d
<Package Folder>/cache/####/f_00008e
<Package Folder>/cache/####/f_00008f
<Package Folder>/cache/####/f_000090
<Package Folder>/cache/####/f_000091
<Package Folder>/cache/####/f_000092
<Package Folder>/cache/####/f_000093
<Package Folder>/cache/####/f_000094
<Package Folder>/cache/####/f_000095
<Package Folder>/cache/####/f_000096
<Package Folder>/cache/####/index
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
<Package Folder>/fileswapsdk/####/170531064045881.dex (deleted)
<Package Folder>/fileswapsdk/####/go.png
<Package Folder>/fileswapsdk/####/localCopy.data
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/shared_prefs/tip.xml
<Package Folder>/shared_prefs/tip.xml.bak

Miscellaneous:

Executes next shell scripts:

<dexopt>

Uses special library to hide executable bytecode.

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical information

Curing recommendations

Free trial