Android.Packed.23432

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.MobiDash.1.origin

Downloads the following detected threats from the Web:

Android.MobiDash.1.origin

Network activity:

Connecting to:

apk-p####.ru
d####.####.com
i####.####.com
r####.####.com
startap####.com

HTTP GET requests:

apk-p####.ru/skins/api.php?latest_news=####
d####.####.com/styles/compressed/fullscreen_shopping_gyro_infra.20170613...
i####.####.com/InApp/resources/info_s.png
r####.####.com/1.4/gethtmlad?productId=####&os=####&sdkVersion=####&pack...
startap####.com/1.4/getadsmetadata?productId=####&os=####&sdkVersion=###...

Modified file system:

Creates the following files:

<Package Folder>/app_app_apk/skinsforminecraftpe.dat.jar
<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/index
<Package Folder>/cache/1460683162801.jar
<Package Folder>/cache/1460683162801.tmp
<Package Folder>/cache/ApplicationCache.db-journal
<Package Folder>/cache/ApplicationCache.db-journal (deleted)
<Package Folder>/code_cache/####/MultiDex.lock
<Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes1075378647.zip
<Package Folder>/databases/db_metrica_<Package>-journal
<Package Folder>/databases/db_metrica_<Package>_13-journal
<Package Folder>/databases/db_metrica_<Package>_20799a27-fa80-4b36-b2db-0f8141f24180-journal
<Package Folder>/databases/metrica_client_data.db
<Package Folder>/databases/metrica_client_data.db-journal
<Package Folder>/databases/metrica_data.db-journal
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
<Package Folder>/files/StartappMetadata
<Package Folder>/files/credentials.dat
<Package Folder>/files/file
<Package Folder>/files/metrica_client_data.db.lock
<Package Folder>/files/shared_prefs_sdk_ad_prefs
<Package Folder>/no_backup/com.google.android.gms.appid-no-backup
<Package Folder>/shared_prefs/<Package>_boundentrypreferences.xml
<Package Folder>/shared_prefs/<Package>_migrationpreferences.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/shared_prefs/<Package>_servertimeoffset.xml
<Package Folder>/shared_prefs/<Package>_startupserviceinfopreferences.xml
<Package Folder>/shared_prefs/com.google.android.gms.appid.xml
<Package Folder>/shared_prefs/com.google.android.gms.measurement.prefs.xml
<Package Folder>/shared_prefs/com.google.android.gms.measurement.prefs.xml (deleted)
<Package Folder>/shared_prefs/com.google.android.gms.measurement.prefs.xml.bak
<Package Folder>/shared_prefs/com.google.android.gms.measurement.prefs.xml.bak (deleted)
<Package Folder>/shared_prefs/com.startapp.android.publish.CookiePrefsFile.xml
<Package Folder>/shared_prefs/com.startapp.android.publish.xml
<Package Folder>/shared_prefs/com.startapp.android.publish.xml.bak
<Package Folder>/shared_prefs/multidex.version.xml