Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.MobiDash.1.origin
Network activity:
Connecting to:
- d####.####.com
- redantz####.com
HTTP POST requests:
- redantz####.com/games/api/in_house_promo.php
- d####.####.com/aap.do
Modified file system:
Creates the following files:
- /data/data/####/files/UnityAdsTest.txt
- /data/data/####/shared_prefs/fiverocks.xml
- /data/data/####/files/.flurrydatasenderblock.f11ab03b-ca4b-47c7-8d24-92aa563c991c
- /data/data/####/shared_prefs/####_preferences.xml
- /data/data/####/files/.FlurrySenderIndex.info.AnalyticsMain
- /data/data/####/cache/ads327002737.jar
- /data/data/####/files/.flurryagent.-4ec3f0b
- /data/data/####/files/.FlurrySenderIndex.info.AnalyticsData_7JNSTN36BF7HV9CN8RHK_157
- /data/data/####/files/.flurrydatasenderblock.a756993c-651a-4cf5-a5f3-1496b004826d
- /data/data/####/files/file
- /data/data/####/databases/webview.db-journal
- /data/data/####/shared_prefs/FBAdPrefs.xml
- /data/data/####/files/UnityAdsStorage-public-data.json
- /data/data/####/shared_prefs/multidex.version.xml
- /data/data/####/shared_prefs/SDKIDFA.xml
- /data/data/####/files/.flurrydatasenderblock.872e4ce5-e109-42ff-8afe-892631991678
- /data/data/####/shared_prefs/####_preferences.xml.bak
- /data/data/####/code_cache/secondary-dexes/tmp-####-1.apk.classes327002737.zip
- /data/data/####/shared_prefs/tjcPrefrences.xml
- /data/data/####/shared_prefs/base_ref.xml.bak
- /data/data/####/files/.flurrydatasenderblock.af5e14a8-1ddb-462b-a4b2-d396ad43af06
- /data/data/####/code_cache/secondary-dexes/tmp-####-1.apk.classes723039829.zip
- /data/data/####/shared_prefs/fiverocks.xml.bak
- /data/data/####/files/UnityAdsStorage-private-data.json
- /data/data/####/code_cache/secondary-dexes/MultiDex.lock
- /data/data/####/app_app_apk/zombie.dat.jar
- /data/data/####/app_fiverocks/events2-journal
- /data/data/####/files/.flurrydatasenderblock.0e2381ed-7560-4b00-8585-d102364690ce
- /data/data/####/shared_prefs/base_ref.xml
Miscellaneous:
Executes next shell scripts:
- /system/bin/dexopt --dex 27 40 40 275308 /data/data/####/app_app_apk/zombie.dat.jar 1252476323 -860790947 45 /system/framework/core.jar /system/framework/core-junit.jar /system/framework/bouncycastle.jar /system/framework/ext.jar /syste
- /system/bin/dexopt --dex 27 42 40 2073756 /data/data/####/code_cache/secondary-dexes/####-1.apk.classes3.zip 2168832 722581985 45 /system/framework/core.jar /system/framework/core-junit.jar /system/framework/bouncycas
- /system/bin/dexopt --dex 27 41 40 1459660 /data/data/####/code_cache/secondary-dexes/####-1.apk.classes2.zip 2168832 1210847225 45 /system/framework/core.jar /system/framework/core-junit.jar /system/framework/bouncyca
Contains functionality to send SMS messages automatically.
