Android.Packed.43709

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.DownLoader.683.origin

Network activity:

Connects to:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) ti####.s####.m####.com:80
TCP(HTTP/1.1) ti####.c####.l####.####.com:80
TCP(HTTP/1.1) a####.u####.com:80
TCP(HTTP/1.1) pss.al####.com:80
TCP(HTTP/1.1) 1####.89.97.82:8000
TCP(TLS/1.0) 1####.217.17.46:443
TCP(TLS/1.0) pns.al####.com:443
TCP(TLS/1.0) l####.4####.top:443

DNS requests:

a####.u####.com
cdn.app.a####.top
l####.4####.top
mt####.go####.com
pns.al####.com
pss.al####.com
ti####.s####.m####.com
xi####.mo####.meitu####.com

HTTP GET requests:

ti####.c####.l####.####.com/swenjian/erjin
ti####.s####.m####.com/ad/androidtt.json
ti####.s####.m####.com/adverimgs/201710101732076109.gif
ti####.s####.m####.com/adverimgs/201808232026475416.jpg
ti####.s####.m####.com/getarea_data.php?apptype=####&system=####&debug=#...
ti####.s####.m####.com/json/android/allPacks.json

HTTP POST requests:

a####.u####.com/app_logs
pss.al####.com/iku/log/acc

File system changes:

Creates the following files:

/data/data/####/.imprint
/data/data/####/device_value_key.xml
/data/data/####/h.jar
/data/data/####/h.xml
/data/data/####/mivmi.xml
/data/data/####/mt_share_info.xml
/data/data/####/mttt_click_event.xml
/data/data/####/mttt_click_event_statistics.xml
/data/data/####/setting.xml
/data/data/####/sina.xml
/data/data/####/umeng_general_config.xml
/data/data/####/umeng_it.cache
/data/data/####/vmeni.db-journal
/data/media/####/201808232026475416
/data/media/####/45k9tdk4dnwarxslhzu9tvqnk.0.tmp
/data/media/####/530e92e01e11c8b339447b51b1fadcbf.0
/data/media/####/b_beijing_01.jpg
/data/media/####/b_beijing_02.jpg
/data/media/####/b_beijing_03.jpg
/data/media/####/b_beijing_04.jpg
/data/media/####/b_beijing_05.jpg
/data/media/####/b_beijing_06.jpg
/data/media/####/b_beijing_07.jpg
/data/media/####/b_beijing_08.jpg
/data/media/####/b_beijing_09.jpg
/data/media/####/b_beijing_10.jpg
/data/media/####/b_beijing_11.jpg
/data/media/####/b_beijing_14.jpg
/data/media/####/b_biankuang_01.png
/data/media/####/b_biankuang_02.png
/data/media/####/b_biankuang_03.png
/data/media/####/b_biankuang_04.png
/data/media/####/b_biankuang_05.png
/data/media/####/b_biankuang_06.png
/data/media/####/b_biankuang_07.png
/data/media/####/b_biankuang_08.png
/data/media/####/b_biankuang_09.png
/data/media/####/b_biankuang_10.png
/data/media/####/b_biankuang_11.png
/data/media/####/b_biankuang_12.png
/data/media/####/b_biankuang_13.png
/data/media/####/b_biankuang_14.png
/data/media/####/dae236559d01cacdf9662d080ed0cb55.0
/data/media/####/gaoxiaobiaoqing_01.png
/data/media/####/gaoxiaobiaoqing_02.png
/data/media/####/gaoxiaobiaoqing_03.png
/data/media/####/gaoxiaobiaoqing_04.png
/data/media/####/gaoxiaobiaoqing_05.png
/data/media/####/gaoxiaobiaoqing_06.png
/data/media/####/gaoxiaobiaoqing_07.png
/data/media/####/gaoxiaobiaoqing_08.png
/data/media/####/gaoxiaobiaoqing_09.png
/data/media/####/gaoxiaobiaoqing_10.png
/data/media/####/gaoxiaobiaoqing_11.png
/data/media/####/gaoxiaobiaoqing_12.png
/data/media/####/gaoxiaobiaoqing_13.png
/data/media/####/gaoxiaobiaoqing_14.png
/data/media/####/gaoxiaobiaoqing_15.png
/data/media/####/gaoxiaobiaoqing_16.png
/data/media/####/gaoxiaobiaoqing_17.png
/data/media/####/gaoxiaobiaoqing_18.png
/data/media/####/gaoxiaobiaoqing_19.png
/data/media/####/gaoxiaobiaoqing_20.png
/data/media/####/gaoxiaobiaoqing_21.png
/data/media/####/journal.tmp
/data/media/####/katongxingxiang_01.png
/data/media/####/katongxingxiang_02.png
/data/media/####/katongxingxiang_03.png
/data/media/####/katongxingxiang_04.png
/data/media/####/katongxingxiang_05.png
/data/media/####/katongxingxiang_06.png
/data/media/####/katongxingxiang_07.png
/data/media/####/katongxingxiang_08.png
/data/media/####/katongxingxiang_09.png
/data/media/####/katongxingxiang_10.png
/data/media/####/katongxingxiang_11.png
/data/media/####/katongxingxiang_12.png
/data/media/####/keai_01.png
/data/media/####/keai_02.png
/data/media/####/keai_03.png
/data/media/####/keai_04.png
/data/media/####/keai_05.png
/data/media/####/keai_06.png
/data/media/####/keai_07.png
/data/media/####/keai_08.png
/data/media/####/keai_09.png
/data/media/####/keai_10.png
/data/media/####/keai_11.png
/data/media/####/keai_12.png
/data/media/####/keai_13.png
/data/media/####/keai_14.png
/data/media/####/keai_15.png
/data/media/####/keai_16.png
/data/media/####/keai_17.png
/data/media/####/keai_18.png
/data/media/####/keai_19.png
/data/media/####/keai_20.png
/data/media/####/keai_21.png
/data/media/####/keai_22.png
/data/media/####/keai_23.png
/data/media/####/keai_24.png
/data/media/####/keai_25.png
/data/media/####/keai_26.png
/data/media/####/keai_27.png
/data/media/####/keai_28.png
/data/media/####/keai_29.png
/data/media/####/keai_30.png
/data/media/####/keai_31.png
/data/media/####/keai_32.png
/data/media/####/keai_33.png
/data/media/####/keai_34.png
/data/media/####/keai_35.png
/data/media/####/keai_36.png
/data/media/####/keai_37.png
/data/media/####/keai_38.png
/data/media/####/keai_39.png
/data/media/####/keai_40.png
/data/media/####/keai_41.png
/data/media/####/keai_42.png
/data/media/####/materials.xml
/data/media/####/mtttDatabase-journal
/data/media/####/thumbnail_beijing_01.png
/data/media/####/thumbnail_beijing_02.png
/data/media/####/thumbnail_beijing_03.png
/data/media/####/thumbnail_beijing_04.png
/data/media/####/thumbnail_beijing_05.png
/data/media/####/thumbnail_beijing_06.png
/data/media/####/thumbnail_beijing_07.png
/data/media/####/thumbnail_beijing_08.png
/data/media/####/thumbnail_beijing_09.png
/data/media/####/thumbnail_beijing_10.png
/data/media/####/thumbnail_beijing_11.png
/data/media/####/thumbnail_beijing_14.png
/data/media/####/thumbnail_biankuang_01.png
/data/media/####/thumbnail_biankuang_02.png
/data/media/####/thumbnail_biankuang_03.png
/data/media/####/thumbnail_biankuang_04.png
/data/media/####/thumbnail_biankuang_05.png
/data/media/####/thumbnail_biankuang_06.png
/data/media/####/thumbnail_biankuang_07.png
/data/media/####/thumbnail_biankuang_08.png
/data/media/####/thumbnail_biankuang_09.png
/data/media/####/thumbnail_biankuang_10.png
/data/media/####/thumbnail_biankuang_11.png
/data/media/####/thumbnail_biankuang_12.png
/data/media/####/thumbnail_biankuang_13.png
/data/media/####/thumbnail_biankuang_14.png
/data/media/####/thumbnail_gaoxiaobiaoqing_01.png
/data/media/####/thumbnail_gaoxiaobiaoqing_02.png
/data/media/####/thumbnail_gaoxiaobiaoqing_03.png
/data/media/####/thumbnail_gaoxiaobiaoqing_04.png
/data/media/####/thumbnail_gaoxiaobiaoqing_05.png
/data/media/####/thumbnail_gaoxiaobiaoqing_06.png
/data/media/####/thumbnail_gaoxiaobiaoqing_07.png
/data/media/####/thumbnail_gaoxiaobiaoqing_08.png
/data/media/####/thumbnail_gaoxiaobiaoqing_09.png
/data/media/####/thumbnail_gaoxiaobiaoqing_10.png
/data/media/####/thumbnail_gaoxiaobiaoqing_11.png
/data/media/####/thumbnail_gaoxiaobiaoqing_12.png
/data/media/####/thumbnail_gaoxiaobiaoqing_13.png
/data/media/####/thumbnail_gaoxiaobiaoqing_14.png
/data/media/####/thumbnail_gaoxiaobiaoqing_15.png
/data/media/####/thumbnail_gaoxiaobiaoqing_16.png
/data/media/####/thumbnail_gaoxiaobiaoqing_17.png
/data/media/####/thumbnail_gaoxiaobiaoqing_18.png
/data/media/####/thumbnail_gaoxiaobiaoqing_19.png
/data/media/####/thumbnail_gaoxiaobiaoqing_20.png
/data/media/####/thumbnail_gaoxiaobiaoqing_21.png
/data/media/####/thumbnail_katongxingxiang_01.png
/data/media/####/thumbnail_katongxingxiang_02.png
/data/media/####/thumbnail_katongxingxiang_03.png
/data/media/####/thumbnail_katongxingxiang_04.png
/data/media/####/thumbnail_katongxingxiang_05.png
/data/media/####/thumbnail_katongxingxiang_06.png
/data/media/####/thumbnail_katongxingxiang_07.png
/data/media/####/thumbnail_katongxingxiang_08.png
/data/media/####/thumbnail_katongxingxiang_09.png
/data/media/####/thumbnail_katongxingxiang_10.png
/data/media/####/thumbnail_katongxingxiang_11.png
/data/media/####/thumbnail_katongxingxiang_12.png
/data/media/####/thumbnail_keai_01.png
/data/media/####/thumbnail_keai_02.png
/data/media/####/thumbnail_keai_03.png
/data/media/####/thumbnail_keai_04.png
/data/media/####/thumbnail_keai_05.png
/data/media/####/thumbnail_keai_06.png
/data/media/####/thumbnail_keai_07.png
/data/media/####/thumbnail_keai_08.png
/data/media/####/thumbnail_keai_09.png
/data/media/####/thumbnail_keai_10.png
/data/media/####/thumbnail_keai_11.png
/data/media/####/thumbnail_keai_12.png
/data/media/####/thumbnail_keai_13.png
/data/media/####/thumbnail_keai_14.png
/data/media/####/thumbnail_keai_15.png
/data/media/####/thumbnail_keai_16.png
/data/media/####/thumbnail_keai_17.png
/data/media/####/thumbnail_keai_18.png
/data/media/####/thumbnail_keai_19.png
/data/media/####/thumbnail_keai_20.png
/data/media/####/thumbnail_keai_21.png
/data/media/####/thumbnail_keai_22.png
/data/media/####/thumbnail_keai_23.png
/data/media/####/thumbnail_keai_24.png
/data/media/####/thumbnail_keai_25.png
/data/media/####/thumbnail_keai_26.png
/data/media/####/thumbnail_keai_27.png
/data/media/####/thumbnail_keai_28.png
/data/media/####/thumbnail_keai_29.png
/data/media/####/thumbnail_keai_30.png
/data/media/####/thumbnail_keai_31.png
/data/media/####/thumbnail_keai_32.png
/data/media/####/thumbnail_keai_33.png
/data/media/####/thumbnail_keai_34.png
/data/media/####/thumbnail_keai_35.png
/data/media/####/thumbnail_keai_36.png
/data/media/####/thumbnail_keai_37.png
/data/media/####/thumbnail_keai_38.png
/data/media/####/thumbnail_keai_39.png
/data/media/####/thumbnail_keai_40.png
/data/media/####/thumbnail_keai_41.png
/data/media/####/thumbnail_keai_42.png
/data/media/####/thumbnail_wenzi_01.png
/data/media/####/thumbnail_wenzi_02.png
/data/media/####/thumbnail_wenzi_03.png
/data/media/####/thumbnail_wenzi_04.png
/data/media/####/thumbnail_wenzi_05.png
/data/media/####/thumbnail_wenzi_06.png
/data/media/####/thumbnail_wenzi_07.png
/data/media/####/thumbnail_wenzi_08.png
/data/media/####/thumbnail_wenzi_09.png
/data/media/####/thumbnail_wenzi_10.png
/data/media/####/thumbnail_wenzi_11.png
/data/media/####/thumbnail_wenzi_12.png
/data/media/####/thumbnail_wenzi_13.png
/data/media/####/thumbnail_wenzi_14.png
/data/media/####/thumbnail_wenzi_15.png
/data/media/####/thumbnail_wenzi_16.png
/data/media/####/thumbnail_wenzi_17.png
/data/media/####/thumbnail_wenzi_18.png
/data/media/####/thumbnail_wenzi_19.png
/data/media/####/thumbnail_wenzi_20.png
/data/media/####/thumbnail_wenzi_21.png
/data/media/####/thumbnail_wenzi_22.png
/data/media/####/thumbnail_wenzi_23.png
/data/media/####/thumbnail_wenzi_24.png
/data/media/####/thumbnail_wenzi_25.png
/data/media/####/thumbnail_wenzi_26.png
/data/media/####/thumbnail_wenzi_27.png
/data/media/####/thumbnail_wenzi_28.png
/data/media/####/thumbnail_wenzi_29.png
/data/media/####/thumbnail_wenzi_30.png
/data/media/####/thumbnail_wenzi_31.png
/data/media/####/thumbnail_wenzi_32.png
/data/media/####/thumbnail_wenzi_33.png
/data/media/####/thumbnail_zhedang_01.png
/data/media/####/thumbnail_zhedang_02.png
/data/media/####/thumbnail_zhedang_03.png
/data/media/####/thumbnail_zhedang_04.png
/data/media/####/thumbnail_zhedang_05.png
/data/media/####/thumbnail_zhedang_06.png
/data/media/####/thumbnail_zhedang_07.png
/data/media/####/thumbnail_zhedang_08.png
/data/media/####/thumbnail_zhedang_09.png
/data/media/####/thumbnail_zhedang_10.png
/data/media/####/thumbnail_zhedang_11.png
/data/media/####/thumbnail_zhedang_12.png
/data/media/####/wenzi_01.png
/data/media/####/wenzi_02.png
/data/media/####/wenzi_03.png
/data/media/####/wenzi_04.png
/data/media/####/wenzi_05.png
/data/media/####/wenzi_06.png
/data/media/####/wenzi_07.png
/data/media/####/wenzi_08.png
/data/media/####/wenzi_09.png
/data/media/####/wenzi_10.png
/data/media/####/wenzi_11.png
/data/media/####/wenzi_12.png
/data/media/####/wenzi_13.png
/data/media/####/wenzi_14.png
/data/media/####/wenzi_15.png
/data/media/####/wenzi_16.png
/data/media/####/wenzi_17.png
/data/media/####/wenzi_18.png
/data/media/####/wenzi_19.png
/data/media/####/wenzi_20.png
/data/media/####/wenzi_21.png
/data/media/####/wenzi_22.png
/data/media/####/wenzi_23.png
/data/media/####/wenzi_24.png
/data/media/####/wenzi_25.png
/data/media/####/wenzi_26.png
/data/media/####/wenzi_27.png
/data/media/####/wenzi_28.png
/data/media/####/wenzi_29.png
/data/media/####/wenzi_30.png
/data/media/####/wenzi_31.png
/data/media/####/wenzi_32.png
/data/media/####/wenzi_33.png
/data/media/####/zhedang_01.png
/data/media/####/zhedang_02.png
/data/media/####/zhedang_03.png
/data/media/####/zhedang_04.png
/data/media/####/zhedang_05.png
/data/media/####/zhedang_06.png
/data/media/####/zhedang_07.png
/data/media/####/zhedang_08.png
/data/media/####/zhedang_09.png
/data/media/####/zhedang_10.png
/data/media/####/zhedang_11.png
/data/media/####/zhedang_12.png

Miscellaneous:

Loads the following dynamic libraries:

android-image
mttt-jni
mtttpuzzle-jni
pcdn_acc

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Gets information about installed apps.

Gets information about running apps.

Displays its own windows over windows of other apps.

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical information

Curing recommendations

Free trial