Android.Packed.24515

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.DownLoader.420.origin
Android.HiddenAds.21

Downloads the following detected threats from the Web:

Android.DownLoader.420.origin
Android.HiddenAds.21

Network activity:

Connecting to:

a####.####.com
c####.####.com
k####.####.cn
mo####.####.com
mobads-####.####.com
o####.####.com
w####.####.com

HTTP GET requests:

c####.####.com/cpro/ui/noexpire/css/2.1.5/img/mob-logo_2x.png
mo####.####.com/ads/css/min/main.css
w####.####.com/adx.php?c=####

HTTP POST requests:

a####.####.com/app_logs
k####.####.cn/ts/list_icons/sec
mobads-####.####.com/brwhis.log
o####.####.com/check_config_update

Modified file system:

Creates the following files:

<Package Folder>/app_baidu_ad_sdk/__xadsdk__remote__final__builtin__.jar
<Package Folder>/app_baidu_ad_sdk/__xadsdk__remote__final__c865aabe-863d-414b-8165-152709d871d4.jar
<Package Folder>/app_database/####/http_mobads.baidu.com_0.localstorage-journal
<Package Folder>/app_database/####/http_mobads.baidu.com_0.localstorage-journal (deleted)
<Package Folder>/app_database/ApplicationCache.db-journal
<Package Folder>/app_database/ApplicationCache.db-journal (deleted)
<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/f_000001
<Package Folder>/cache/####/f_000002
<Package Folder>/cache/####/f_000003
<Package Folder>/cache/####/f_000004
<Package Folder>/cache/####/f_000005
<Package Folder>/cache/####/f_000006
<Package Folder>/cache/####/f_000007
<Package Folder>/cache/####/index
<Package Folder>/databases/t_u.db-journal
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
<Package Folder>/databases/webviewCookiesChromiumPrivate.db-journal (deleted)
<Package Folder>/files/####/.jg.ic
<Package Folder>/files/libjiagu.so
<Package Folder>/files/v.jar
<Package Folder>/shared_prefs/__sdk_ral.xml
<Package Folder>/shared_prefs/__sdk_ral.xml.bak
<Package Folder>/shared_prefs/__x_adsdk_agent_header__.xml
<Package Folder>/shared_prefs/__xadsdk_downloaded__version__.xml
<Package Folder>/shared_prefs/com.baidu.mobads.loader.xml
<Package Folder>/shared_prefs/mobclick_agent_header_<Package>.xml
<Package Folder>/shared_prefs/mobclick_agent_online_setting_<Package>.xml
<Package Folder>/shared_prefs/mobclick_agent_online_setting_<Package>.xml.bak
<Package Folder>/shared_prefs/mobclick_agent_state_<Package>.xml
<Package Folder>/shared_prefs/music.xml
<Package Folder>/shared_prefs/shareFile.xml