Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.MobiDash.2.origin
Network activity:
Connects to:
- UDP(DNS) <Google DNS>
- TCP(TLS/1.0) and####.cli####.go####.com:443
DNS requests:
- and####.cli####.go####.com
File system changes:
Creates the following files:
- /data/data/####/DownloadsDB-journal
- /data/data/####/LIMBO_PREFERENCE_FILE_0.xml
- /data/data/####/MultiDex.lock
- /data/data/####/blit.fx
- /data/data/####/blur.fx
- /data/data/####/com.android.vending.licensing.APKExpansionPolicy.xml
- /data/data/####/com.playdead.limbo.full_preferences.xml
- /data/data/####/dot.png
- /data/data/####/fixedfunction.fx
- /data/data/####/full.dat
- /data/data/####/full.dat.jar
- /data/data/####/kenko.png
- /data/data/####/kidoji.png
- /data/data/####/limbo_android_boot.pkg
- /data/data/####/limbo_title.png
- /data/data/####/loading_br.png
- /data/data/####/loading_da.png
- /data/data/####/loading_de.png
- /data/data/####/loading_es.png
- /data/data/####/loading_fr.png
- /data/data/####/loading_it.png
- /data/data/####/loading_ja.png
- /data/data/####/loading_ko.png
- /data/data/####/loading_pl.png
- /data/data/####/loading_pt.png
- /data/data/####/loading_ru.png
- /data/data/####/loading_sz.png
- /data/data/####/loading_tr.png
- /data/data/####/loading_uk.png
- /data/data/####/loading_zh.png
- /data/data/####/lzsiGqcaY
- /data/data/####/multidex.version.xml
- /data/data/####/op_hlsl_blur_horizontal.fx
- /data/data/####/op_hlsl_blur_minimal.fx
- /data/data/####/op_hlsl_blur_vertical.fx
- /data/data/####/op_hlsl_boxblur_horizontal.fx
- /data/data/####/op_hlsl_boxblur_vertical.fx
- /data/data/####/op_hlsl_copy.fx
- /data/data/####/op_hlsl_highpass.fx
- /data/data/####/op_hlsl_mask.fx
- /data/data/####/op_invert.fx
- /data/data/####/pc_logo.png
- /data/data/####/postprocessvs.vs
- /data/data/####/ps3_logo.png
- /data/data/####/renderobject.fx
- /data/data/####/settings.txt
- /data/data/####/shiyojo.png
- /data/data/####/tmp-com.playdead.limbo.full-1.apk.classes1121011542.zip
- /data/data/####/watereffect.ps
- /data/data/####/watereffect.vs
- /data/data/####/x0
- /data/data/####/x1
- /data/data/####/x360_logo.png
Miscellaneous:
Loads the following dynamic libraries:
- Limbo
- lzsiGqcaY
Uses the following algorithms to encrypt data:
- AES-CBC-PKCS5Padding
Uses the following algorithms to decrypt data:
- AES-CBC-PKCS5Padding
Adds tasks to the system scheduler.
Displays its own windows over windows of other apps.
