Android.Hidden.2945

Technical information

Malicious functions:

Removes its shortcut from the home screen.

Network activity:

Connecting to:

an####.ru
android####.ru

HTTP GET requests:

android####.ru/file-log.html

HTTP POST requests:

an####.ru/log.php

Modified file system:

Creates the following files:

<Package Folder>/databases/SettingsDB
<Package Folder>/databases/SettingsDB-journal
<Package Folder>/databases/SettingsDB-journal (deleted)
<Package Folder>/files/####/592E656B004C-0001-0816-3D9FCE1FF226BeginSession.cls_temp
<Package Folder>/files/####/592E656B004C-0001-0816-3D9FCE1FF226SessionApp.cls_temp
<Package Folder>/files/####/592E656B004C-0001-0816-3D9FCE1FF226SessionDevice.cls_temp
<Package Folder>/files/####/592E656B004C-0001-0816-3D9FCE1FF226SessionOS.cls_temp
<Package Folder>/files/####/592E656B004C-0001-0816-3D9FCE1FF226SessionUser.cls_temp
<Package Folder>/files/####/592E656B004C-0001-0816-3D9FCE1FF226user.meta
<Package Folder>/files/####/592E656B031F-0001-084A-3D9FCE1FF226BeginSession.cls_temp
<Package Folder>/files/####/592E656B031F-0001-084A-3D9FCE1FF226SessionApp.cls_temp
<Package Folder>/files/####/592E656B031F-0001-084A-3D9FCE1FF226SessionDevice.cls_temp
<Package Folder>/files/####/592E656B031F-0001-084A-3D9FCE1FF226SessionOS.cls_temp
<Package Folder>/files/####/592E656B031F-0001-084A-3D9FCE1FF226user.meta
<Package Folder>/files/####/com.crashlytics.settings.json
<Package Folder>/files/####/crashlytics-userlog-592E656B031F-0001-084A-3D9FCE1FF226.temp.tmp
<Package Folder>/files/####/initialization_marker
<Package Folder>/files/####/sa_cd36a595-67b5-4ddc-9965-239d8a800040_1496212843174.tap
<Package Folder>/files/####/session_analytics.tap
<Package Folder>/files/####/session_analytics.tap.tmp
<Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
<Package Folder>/shared_prefs/com.crashlytics.prefs.xml
<Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
<Package Folder>/shared_prefs/io.fabric.sdk.android;fabric;io.fabric.sdk.android.Onboarding.xml
<SD-Card>/.androidmonitor/log.txt
<SD-Card>/.androidmonitor/log_.txt
<SD-Card>/.androidmonitor/log_.txt.zip
<SD-Card>/.androidmonitor/log_1496212843015.txt.zip
<SD-Card>/.androidmonitor/log_1496212843733.txt.zip
<SD-Card>/.androidmonitor/monitorchecker.apk
<SD-Card>/.androidmonitor/prog_class.name