Android.Hidden.3004

Technical information

Malicious functions:

Removes its shortcut from the home screen.

Network activity:

Connecting to:

taiho####.net

HTTP GET requests:

taiho####.net/app/com.allgamebai.invifull?mobileId=####&country=####&and...

Modified file system:

Creates the following files:

<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/f_000001
<Package Folder>/cache/####/index
<Package Folder>/cache/1459442732877.jar
<Package Folder>/cache/1459442732877.tmp
<Package Folder>/cache/ApplicationCache.db-journal
<Package Folder>/cache/ApplicationCache.db-journal (deleted)
<Package Folder>/databases/####/https_googleads.g.doubleclick.net_0.localstorage-journal
<Package Folder>/databases/####/https_googleads.g.doubleclick.net_0.localstorage-journal (deleted)
<Package Folder>/databases/google_analytics_v4.db-journal
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
<Package Folder>/files/####/59473A6700DF-0001-0B9B-05FBDBDD93FFBeginSession.cls_temp
<Package Folder>/files/####/59473A6700DF-0001-0B9B-05FBDBDD93FFSessionApp.cls_temp
<Package Folder>/files/####/59473A6700DF-0001-0B9B-05FBDBDD93FFSessionDevice.cls
<Package Folder>/files/####/59473A6700DF-0001-0B9B-05FBDBDD93FFSessionOS.cls_temp
<Package Folder>/files/####/com.crashlytics.settings.json
<Package Folder>/files/####/initialization_marker
<Package Folder>/files/####/sa_23a0c2c3-6ff9-412b-b8f2-133b700e923c_1497840231342.tap
<Package Folder>/files/####/session_analytics.tap
<Package Folder>/files/####/session_analytics.tap.tmp
<Package Folder>/files/AppEventsLogger.persistedsessioninfo
<Package Folder>/files/gaClientId
<Package Folder>/shared_prefs/<Package>.xml
<Package Folder>/shared_prefs/<Package>.xml.bak
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/FBAdPrefs.xml
<Package Folder>/shared_prefs/LioneMessi10.xml
<Package Folder>/shared_prefs/SDKIDFA.xml
<Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
<Package Folder>/shared_prefs/com.crashlytics.prefs.xml
<Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
<Package Folder>/shared_prefs/com.facebook.sdk.appEventPreferences.xml
<Package Folder>/shared_prefs/com.facebook.sdk.attributionTracking.xml
<Package Folder>/shared_prefs/com.google.android.gms.analytics.prefs.xml
<Package Folder>/shared_prefs/io.fabric.sdk.android;fabric;a.a.a.a.m.xml
<Package Folder>/shared_prefs/multidex.version.xml