Android.Hidden.3093

Technical information

Malicious functions:

Removes its shortcut from the home screen.

Network activity:

Connecting to:

3####.####.142
d####.####.com
i####.####.com
m####.####.com
r####.####.com
startap####.com

HTTP GET requests:

3####.####.142/tracking/adImpression?d=####&clientSessionId=####&ts=####...
d####.####.com/image/fetch/f_auto,q_80,w_72,h_72/http%3A%2F%2Flh3.google...
i####.####.com/InApp/resources/info_ex_s.png
m####.####.com/
r####.####.com/1.4/getads?productId=####&os=####&sdkVersion=####&flavor=...
startap####.com/1.4/trackdownload?productId=####&os=####&sdkVersion=####...

Modified file system:

Creates the following files:

<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/f_000001
<Package Folder>/cache/####/f_000002
<Package Folder>/cache/####/index
<Package Folder>/cache/1478228129219.dex
<Package Folder>/cache/1478228129219.jar
<Package Folder>/cache/1478228129219.tmp
<Package Folder>/cache/ApplicationCache.db-journal (deleted)
<Package Folder>/databases/OneSignal.db-journal
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
<Package Folder>/files/####/1777384550
<Package Folder>/files/StartappAdInfoMetadata
<Package Folder>/files/StartappBannerMetadata
<Package Folder>/files/StartappCacheMetadata
<Package Folder>/files/StartappMetadata
<Package Folder>/files/StartappSplashMetadata
<Package Folder>/files/back_.png
<Package Folder>/files/back_dark.png
<Package Folder>/files/browser_icon_dark.png
<Package Folder>/files/close_button.png
<Package Folder>/files/empty_star.png
<Package Folder>/files/filled_star.png
<Package Folder>/files/forward_.png
<Package Folder>/files/forward_dark.png
<Package Folder>/files/half_star.png
<Package Folder>/files/logo.png
<Package Folder>/files/shared_prefs_sdk_ad_prefs
<Package Folder>/files/x_dark.png
<Package Folder>/shared_prefs/<Package>.xml
<Package Folder>/shared_prefs/OneSignal.xml
<Package Folder>/shared_prefs/admob.xml
<Package Folder>/shared_prefs/com.startapp.android.publish.CookiePrefsFile.xml
<Package Folder>/shared_prefs/com.startapp.android.publish.CookiePrefsFile.xml.bak
<Package Folder>/shared_prefs/com.startapp.android.publish.xml
<Package Folder>/shared_prefs/com.startapp.android.publish.xml.bak