Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.DownLoader.396.origin
- Android.DownLoader.348.origin
Network activity:
Connecting to:
- b####.####.com
- 3####.####.cn
- googl####.####.net
HTTP GET requests:
- googl####.####.net/mads/static/mad/sdk/native/sdk-core-v40.appcache
- b####.####.com/download//jarFile/SDKAutoUpdate/test29.tar.gz
- googl####.####.net/mads/static/mad/sdk/native/sdk-core-v40.html
- googl####.####.net/mads/static/mad/sdk/native/canary/sdk-core-v40-impl.js
- googl####.####.net/mads/static/mad/sdk/native/production/sdk-core-v40-impl.js
- googl####.####.net/mads/static/mad/sdk/native/sdk-core-v40.js
HTTP POST requests:
- 3####.####.cn/collectcc.do
- 3####.####.cn/collect.do
Modified file system:
Creates the following files:
- /data/data/####/shared_prefs/ki.xml
- /data/data/####/databases/lcdownloads-journal
- /data/data/####/shared_prefs/yoappInfo_pre.xml
- /data/data/####/shared_prefs/upg_jar_version.xml
- /data/data/####/databases/qcut_download.db-journal
- /data/data/####/shared_prefs/l_cp_st.xml
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/shared_prefs/L_Key.xml
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/shared_prefs/yotrategy_pre.xml.bak
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/databases/po_download.db-journal
- /sdcard/Download/uaassf/as/u.dat
- /sdcard/Android/data/cjl/IM.DAT
- /sdcard/ljk/capin/time.dat
- /data/data/####/shared_prefs/fcut_trategy_pre.xml
- /data/data/####/shared_prefs/ybappInfo_pre.xml
- /data/data/####/files/autoSave
- /data/data/####/shared_prefs/fcut_conf_pre.xml
- /data/data/####/files/1485418025868o.jar
- /data/data/####/shared_prefs/yotrategy_pre.xml
- /data/data/####/shared_prefs/fcut_appInfo_pre.xml
- /data/data/####/shared_prefs/yoconf_pre.xml.bak
- /sdcard/Download/upgrade/upgp/jar_dex2.6.14/test.jar
- /data/data/####/cache/ads-912724023.jar
- /sdcard/Download/upgrade/upgp/jar_dex.tar.gz
- /data/data/####/databases/webview.db-journal
- /data/data/####/shared_prefs/fcut_appInfo_pre.xml.bak
- /data/data/####/shared_prefs/upg_jar_root.xml
- /data/data/####/shared_prefs/yoappInfo_pre.xml.bak
- /data/data/####/files/1485418026118si.jar
- /data/data/####/shared_prefs/ybappInfo_pre.xml.bak
- /data/data/####/databases/lcdownloads
- /data/data/####/shared_prefs/ybconf_pre.xml
- /data/data/####/shared_prefs/fcut_conf_pre.xml.bak
- /data/data/####/shared_prefs/yoconf_pre.xml
- /data/data/####/shared_prefs/upja_r.xml
- /data/data/####/files/1485418030821b.jar
- /data/data/####/shared_prefs/fcut_trategy_pre.xml.bak
- /data/data/####/cache/ApplicationCache.db-journal
- /data/data/####/cache/webviewCacheChromium/index
Miscellaneous:
Contains functionality to send SMS messages automatically.
