Android.Packed.20894

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Triada.194.origin
Android.DownLoader.451.origin

Network activity:

Connecting to:

a####.####.com:8070

HTTP POST requests:

a####.####.com:8070/opInstall/LogicOnline

Modified file system:

Creates the following files:

/data/data/####/.platformcache/lib_main/libapmeplt.so
/data/data/####/gameplugins/com.google.android.gms/PluginInfo/sigs/sig_0.key
/data/data/####/gameplugins/com.google.android.gsf/PluginInfo/apkInfo
/data/data/####/gameplugins/com.google.android.gms/PluginInfo/apkInfo
/sdcard/.####/game_res/verinfo.cfg
/data/data/####/files/.yflurryprotonconfig.-20f3658fbd62e69c
/data/data/####/files/.YFlurrySenderIndex.info.AnalyticsData_XWSG8SY2T225HGFF6YBW_238
/data/data/####/shared_prefs/srvtime.xml
/data/data/####/.platformcache/lib/libsdkpaplat.so
/data/data/####/gameplugins/com.google.android.gsf.login/PluginInfo/sigs/sig_0.key
/data/data/####/shared_prefs/platform.xml
/data/data/####/.platformcache/lib_libsdkpaplat/tmp-763263474tmp
/sdcard/Android/.config/.data/.share/DK_0c5dca5fbf562b4739b9993b5a905426303c
/data/data/####/.platformcache/sdkpaplugin.jar
/data/data/####/.platformcache/sdkpaplugin.jar.lock
/data/data/####/gameplugins/com.google.android.gsf.login/PluginInfo/apkInfo
/sdcard/Android/.config/.data/9b1105647bd3b9fe0e5130ade7e1ad20/ofl/rd.dat
/data/data/####/platform.cache.jar
/data/data/####/gameplugins/lb_packages
/data/data/####/.platformcache/lib_libsdkpaplat/classes.dex
/data/data/####/gameplugins/com.google.android.gsf/PluginInfo/sigs/sig_0.key
/data/data/####/shared_prefs/platform.xml.bak
/data/data/####/files/mingob.png
/data/data/####/shared_prefs/global_config.xml
/data/data/####/gameplugins/lb_amcfg
/data/data/####/gameplugins/com.google.android.gms/lib/libgames_rtmp_jni.so
/sdcard/.####/game_res/compVersion
/data/data/####/.platformcache/lib_libsdkpaplat/libsdkpaplat.sinfo
/data/data/####/shared_prefs/FLURRY_SHARED_PREFERENCES.xml
/data/data/####/files/.YFlurrySenderIndex.info.AnalyticsMain
/sdcard/Android/.config/.data/9b1105647bd3b9fe0e5130ade7e1ad20/ofl/dp.db
/data/data/####/.platformcache/main.jar
/data/data/####/gameplugins/com.google.android.gms/lib/libAppDataSearch.so
/data/data/####/files/.yflurrydatasenderblock.d577f90f-9e77-4707-b927-405a6cf24241