Android.Packed.21823

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.RemoteCode.20.origin

Network activity:

Connecting to:

s####.####.com
ip####.io
a####.####.com

HTTP GET requests:

ip####.io/json

HTTP POST requests:

a####.####.com/app_logs
s####.####.com/s2/?pn=####&vc=####&md=####&ov=####&mc=####&lc=####&chn=#...

Modified file system:

Creates the following files:

<Package Folder>/app_cx/co.jar
<Package Folder>/app_acra-reports/1495006142783-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/app_acra-reports/1495006122351-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/files/.imprint
<Package Folder>/app_acra-reports/1495006142032-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/shared_prefs/analyticsprefs.xml
<Package Folder>/app_acra-reports/1495006121389-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/app_acra-reports/1495006149818-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/shared_prefs/umeng_general_config.xml.bak
<Package Folder>/shared_prefs/waterfall_log_in.xml
<Package Folder>/shared_prefs/waterfall_log_in.xml.bak
<Package Folder>/files/.umeng/exchangeIdentity.json
<Package Folder>/app_acra-reports/1495006160457-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/shared_prefs/analyticsprefs.xml.bak
<Package Folder>/app_acra-reports/1495006137835-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/app_acra-reports/1495006111485-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/shared_prefs/Local.xml
<Package Folder>/app_acra-reports/reportfile.prealloc
<Package Folder>/app_acra-reports/1495006161077-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/files/INSTALLATION
<Package Folder>/app_acra-reports/1495006141104-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/app_acra-reports/1495006138540-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/lib-main/dso_state
<Package Folder>/app_acra-reports/1495006150433-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/lib-main/dso_manifest
<Package Folder>/files/umeng_it.cache
<Package Folder>/app_acra-reports/1495006112240-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/files/mobclick_agent_cached_<Package>20808504
<Package Folder>/lib-main/dso_lock
<Package Folder>/shared_prefs/Local.xml.bak
<Package Folder>/app_acra-reports/1495006122964-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/ACRA-INSTALLATION
<Package Folder>/app_acra-reports/1495006149014-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/lib-main/dso_deps
<Package Folder>/app_acra-reports/1495006159425-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/shared_prefs/umeng_general_config.xml
<Package Folder>/app_acra-reports/1495006112836-UnsatisfiedLinkError-20808504.temp_stacktrace
<Package Folder>/app_acra-reports/1495006136904-UnsatisfiedLinkError-20808504.temp_stacktrace