Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.MobiDash.1.origin
Network activity:
Connecting to:
- andronl####.cf
- z####.ru
- gratto####.com
- a####.####.net
- c####.com
- google-####.com
- v####.####.net
- l####.####.net
- c####.####.com
- downl####.####.com
- geograt####.com
- googlet####.com
- googl####.####.net
- a####.####.com
- cdn-or####.####.com
HTTP GET requests:
- downl####.####.com/lp/en/WH-style/mobile_aladin/aladin70/images/sec-EN-mobile.png
- gratto####.com/js/swfobject.js
- a####.####.com/ajax/libs/jquery/1.10.2/jquery.min.js
- c####.####.com/mobile/1.0/jquery.mobile-1.0.min.css
- a####.####.net/api/account/70099149/configuration/le-campaigns/zones?fields=####&fields=####&cb=####
- c####.####.com/assets/js/utils2.js
- googl####.####.net/mads/static/mad/sdk/native/sdk-core-v40.appcache
- google-####.com/ga.js
- downl####.####.com/lp/en/WH-style/mobile_aladin/aladin70/images/logo_GR.png
- cdn-or####.####.com/visitorCountry.php?language=####
- gratto####.com/index.html?
- google-####.com/r/__utm.gif?utmwv=####&utms=####&utmn=####&utmhn=####&utmcs=####&utmsr=####&utmvp=####&utmsc=####&utmul=####&utmje=####&utmfl=####&utm...
- l####.####.net/tag/tag.js?site=####
- v####.####.net/api/js/70099149?sid=####&cb=####&t=####&ts=####&pid=####&tid=####&vid=####
- google-####.com/r/collect?v=####&_v=####&a=####&t=####&ni=####&_s=####&dl=####&ul=####&de=####&dt=####&sd=####&sr=####&vp=####&je=####&ec=####&ea=####...
- googl####.####.net/mads/static/mad/sdk/native/sdk-core-v40.js
- googl####.####.net/mads/static/mad/sdk/native/canary/sdk-core-v40-impl.js
- downl####.####.com/lp/en/WH-style/mobile_aladin/aladin70/images/afil_main.jpg
- a####.####.com/ajax/libs/jquery/1.4.1/jquery.min.js
- google-####.com/collect?v=####&_v=####&a=####&t=####&ni=####&_s=####&dl=####&ul=####&de=####&dt=####&sd=####&sr=####&vp=####&je=####&ec=####&ea=####&e...
- downl####.####.com/platform.php?brandId=####&lang=####
- c####.####.com/click/581b35c32b3f8?brandId=####&campaignId=####&mediaId=####&mode=####&affiliateProfileName=####&traID=####
- c####.####.com/js/2795020731.js
- google-####.com/collect?v=####&_v=####&a=####&t=####&_s=####&dl=####&ul=####&de=####&dt=####&sd=####&sr=####&vp=####&je=####&_u=####&jid=####&cid=####...
- downl####.####.com/lp/en/WH-style/mobile_aladin/aladin70/images/btn-main_GR.png
- googl####.####.net/mads/static/mad/sdk/native/production/sdk-core-v40-impl.js
- andronl####.cf/
- downl####.####.com/lp/en/WH-style/mobile_aladin/aladin70/index_eur_v1.html?brandId=####&campaignId=####&mediaId=####&mode=####&affiliateProfileName=##...
- c####.####.com/mobile/1.0/images/ajax-loader.png
- downl####.####.com/lp/en/WH-style/mobile_aladin/aladin70/images/pay_options_en.png
- c####.####.com/mobile/1.4.5/jquery.mobile-1.4.5.min.js
- googlet####.com/gtm.js?id=####
- google-####.com/analytics.js
- l####.####.net/lptag/api/account/70099149/configuration/applications/taglets/.jsonp?df=####&b=####
- googl####.####.net/mads/static/mad/sdk/native/sdk-core-v40.html
- v####.####.net/api/js/70099149?&cb=####&t=####&ts=####&pid=####&tid=####&pt=####&u=####&df=####&os=####
- c####.com/?a=####&c=####&s1=####&s2=####
- z####.ru/newapps?keyword=####
- downl####.####.com/lp/en/WH-style/mobile_aladin/aladin70/css/style_gr.css
- c####.####.com/click/581760c65a1b7?brandId=####&campaignId=####&mediaId=####&mode=####&affiliateProfileName=####&traID=####&ABClicks=####&shorten_link...
- geograt####.com/user-agreement/useragreement.html
Modified file system:
Creates the following files:
- /data/data/####/cache/webviewCacheChromium/f_00002f
- /data/data/####/cache/webviewCacheChromium/f_00002e
- /data/data/####/cache/webviewCacheChromium/f_00002d
- /data/data/####/cache/webviewCacheChromium/f_00002c
- /data/data/####/cache/webviewCacheChromium/f_00002b
- /data/data/####/cache/webviewCacheChromium/f_00002a
- /data/data/####/cache/webviewCacheChromium/f_000050
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/shared_prefs/multidex.version.xml
- /data/data/####/shared_prefs/####_preferences.xml.bak
- /data/data/####/cache/webviewCacheChromium/f_000026
- /data/data/####/cache/webviewCacheChromium/f_000025
- /data/data/####/cache/webviewCacheChromium/f_000024
- /data/data/####/cache/webviewCacheChromium/f_000023
- /data/data/####/cache/webviewCacheChromium/f_000022
- /data/data/####/cache/webviewCacheChromium/f_000021
- /data/data/####/cache/webviewCacheChromium/f_000020
- /data/data/####/cache/webviewCacheChromium/f_000029
- /data/data/####/cache/webviewCacheChromium/f_000028
- /data/data/####/cache/webviewCacheChromium/index
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/cache/webviewCacheChromium/f_00000e
- /data/data/####/cache/webviewCacheChromium/f_00000d
- /data/data/####/cache/webviewCacheChromium/f_00000f
- /data/data/####/cache/webviewCacheChromium/f_000034
- /data/data/####/cache/webviewCacheChromium/f_000035
- /data/data/####/cache/webviewCacheChromium/f_000036
- /data/data/####/cache/webviewCacheChromium/f_000037
- /data/data/####/cache/webviewCacheChromium/f_000030
- /data/data/####/cache/webviewCacheChromium/f_000031
- /data/data/####/cache/webviewCacheChromium/f_000032
- /data/data/####/cache/webviewCacheChromium/f_000033
- /data/data/####/cache/webviewCacheChromium/f_000038
- /data/data/####/cache/webviewCacheChromium/f_000039
- /data/data/####/cache/ads-318719124.jar
- /data/data/####/cache/webviewCacheChromium/f_00003d
- /data/data/####/cache/webviewCacheChromium/f_00003e
- /data/data/####/cache/webviewCacheChromium/f_00003f
- /data/data/####/cache/webviewCacheChromium/f_00003a
- /data/data/####/cache/webviewCacheChromium/f_00003b
- /data/data/####/cache/webviewCacheChromium/f_00003c
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/code_cache/secondary-dexes/MultiDex.lock
- /data/data/####/cache/webviewCacheChromium/f_000027
- /data/data/####/cache/webviewCacheChromium/f_000018
- /data/data/####/cache/webviewCacheChromium/f_000019
- /data/data/####/cache/webviewCacheChromium/f_000016
- /data/data/####/cache/webviewCacheChromium/f_000017
- /data/data/####/cache/webviewCacheChromium/f_000014
- /data/data/####/cache/webviewCacheChromium/f_000015
- /data/data/####/cache/webviewCacheChromium/f_000012
- /data/data/####/cache/webviewCacheChromium/f_000013
- /data/data/####/cache/webviewCacheChromium/f_000010
- /data/data/####/cache/webviewCacheChromium/f_000011
- /data/data/####/files/file
- /data/data/####/cache/webviewCacheChromium/f_00001f
- /data/data/####/cache/webviewCacheChromium/f_00001d
- /data/data/####/cache/webviewCacheChromium/f_00001e
- /data/data/####/cache/webviewCacheChromium/f_00001b
- /data/data/####/cache/webviewCacheChromium/f_00001c
- /data/data/####/cache/webviewCacheChromium/f_00001a
- /data/data/####/app_app_apk/bestfiendsforever.dat.jar
- /data/data/####/code_cache/secondary-dexes/tmp-####-1.apk.classes-1154545547.zip
- /data/data/####/shared_prefs/####_preferences.xml
- /data/data/####/cache/webviewCacheChromium/f_00004e
- /data/data/####/cache/webviewCacheChromium/f_00004d
- /data/data/####/cache/webviewCacheChromium/f_00004f
- /data/data/####/cache/webviewCacheChromium/f_00004a
- /data/data/####/cache/webviewCacheChromium/f_00004c
- /data/data/####/cache/webviewCacheChromium/f_00004b
- /data/data/####/cache/webviewCacheChromium/f_000049
- /data/data/####/cache/webviewCacheChromium/f_000048
- /data/data/####/cache/webviewCacheChromium/f_000045
- /data/data/####/cache/webviewCacheChromium/f_000044
- /data/data/####/cache/webviewCacheChromium/f_000047
- /data/data/####/cache/webviewCacheChromium/f_000046
- /data/data/####/cache/webviewCacheChromium/f_000041
- /data/data/####/cache/webviewCacheChromium/f_000040
- /data/data/####/cache/webviewCacheChromium/f_000043
- /data/data/####/cache/webviewCacheChromium/f_000042
- /data/data/####/databases/webview.db-journal
- /data/data/####/cache/ApplicationCache.db-journal
Miscellaneous:
Contains functionality to send SMS messages automatically.
