Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.MobiDash.2.origin
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) ea5.com.edg####.net:80
- TCP(HTTP/1.1) www.ak####.com.####.net:80
DNS requests:
- w####.ea.com
- www.ak####.com
HTTP GET requests:
- ea5.com.edg####.net/
- www.ak####.com.####.net/
Modified file system:
Creates the following files:
- <Package Folder>/app_app_apk/fifa14_row.dat.jar
- <Package Folder>/cache/####/Nimble.log
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes479205889.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes60219346.zip
- <Package Folder>/databases/DownloadsDB-journal
- <Package Folder>/databases/webview.db
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/databases/webview.db-shm
- <Package Folder>/databases/webview.db-shm (deleted)
- <Package Folder>/databases/webview.db-wal
- <Package Folder>/databases/webviewCookiesChromium.db
- <Package Folder>/databases/webviewCookiesChromiumPrivate.db
- <Package Folder>/files/####/[COMPONENT]com.ea.nimble.mtx.googleplay.dat
- <Package Folder>/files/eJRyzrJGN
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/com.android.vending.licensing.APK...cy.xml
- <Package Folder>/shared_prefs/com.facebook.SharedPreferencesTok...EY.xml
- <Package Folder>/shared_prefs/com.google.android.gcm.xml
- <Package Folder>/shared_prefs/multidex.version.xml
- <SD-Card>/Android/####/HiRes.cmconfig
- <SD-Card>/Android/####/HiRes.cmconfig.cmserver
- <SD-Card>/Android/####/MemoryCorruption.xml
- <SD-Card>/Android/####/OnlineServersConfig.bin
- <SD-Card>/Android/####/Profile
- <SD-Card>/Android/####/cache.json
- <SD-Card>/Android/####/devicespecs.log
- <SD-Card>/Android/####/friendchalsave
- <SD-Card>/Android/####/gotw_strings.json
- <SD-Card>/Android/####/gotwimage_22852.jpg
- <SD-Card>/Android/####/gotwimage_22924.jpg
- <SD-Card>/Android/####/gotwimage_22927.jpg
- <SD-Card>/Android/####/gotwimage_22929.jpg
- <SD-Card>/Android/####/gotwimage_22932.jpg
- <SD-Card>/Android/####/gotwimage_22935.jpg
- <SD-Card>/Android/####/icebreaker.dat
- <SD-Card>/Android/####/ipspFlags.dat
- <SD-Card>/Android/####/matchday.zip.cmmetadata
- <SD-Card>/Android/####/matchday_cl.bin
- <SD-Card>/Android/####/music
- <SD-Card>/Android/####/scriptsave
- <SD-Card>/Android/####/store_background_100.png
- <SD-Card>/Android/####/store_background_10000_free.png
- <SD-Card>/Android/####/store_background_1500_free.png
- <SD-Card>/Android/####/store_background_2000_free.png
- <SD-Card>/Android/####/store_background_300.png
- <SD-Card>/Android/####/store_background_4000_free.png
- <SD-Card>/Android/####/store_background_500.png
- <SD-Card>/Android/####/store_background_800_free.png
- <SD-Card>/Android/####/tutorialFut
- <SD-Card>/Android/####/tutorialsave
Miscellaneous:
Loads the following dynamic libraries:
- FIFA14
- eJRyzrJGN
- gnustl_shared
- nimble
Adds tasks to the system scheduler.
Displays its own windows over windows of other applications.
