Technical information
Malicious functions:
Executes code of the following detected threats:
- Adware.Was.1.origin
Network activity:
Connects to:
- UDP(DNS) 8####.8.4.4:53
- TCP(TLS/1.0) instant####.google####.com:443
- TCP(TLS/1.0) 2####.58.215.106:443
- TCP(TLS/1.0) android####.go####.com:443
- TCP(TLS/1.0) api.face####.com:443
- TCP(TLS/1.0) 2####.58.215.78:443
- TCP(TLS/1.2) 1####.250.203.138:443
- TCP(TLS/1.2) 1####.217.16.3:443
- TCP(TLS/1.2) 1####.250.203.206:443
DNS requests:
- android####.go####.com
- g####.face####.com
- instant####.google####.com
- m####.go####.com
HTTP GET requests:
- api.face####.com:443/v5.0/553340165601938/mobile_sdk_gk?fields=####&form...
- api.face####.com:443/v5.0/553340165601938?fields=####&format=####&sdk=####
File system changes:
Creates the following files:
- /data/data/####/.dex2oatlock
- /data/data/####/.updateIV.dat
- /data/data/####/0000000lllll_0.dex
- /data/data/####/000O00ll111l_0.dex
- /data/data/####/00O000ll111l_0.dex
- /data/data/####/00O000ll111l_0.dex.flock
- /data/data/####/00O000ll111l_0.dex.flock (deleted)
- /data/data/####/0OO00l111l1l
- /data/data/####/0OO00l111l1l.lock
- /data/data/####/102.xml
- /data/data/####/1d7842c4752cfad2ae1855d9ce1d687a-4011-4011.apk
- /data/data/####/MultiDex.lock
- /data/data/####/audience_network.dex
- /data/data/####/base-1.apk
- /data/data/####/base.apk.classes1.dex
- /data/data/####/base.apk.classes1.dex.flock (deleted)
- /data/data/####/base.apk.classes2.dex
- /data/data/####/base.apk.classes2.dex.flock (deleted)
- /data/data/####/base.apk.classes2.zip
- /data/data/####/base.apk.classes3.dex
- /data/data/####/base.apk.classes3.dex.flock (deleted)
- /data/data/####/base.apk.classes4.dex
- /data/data/####/base.apk.classes4.dex.flock (deleted)
- /data/data/####/base.apk.classes5.dex
- /data/data/####/base.apk.classes5.dex.flock (deleted)
- /data/data/####/base.apk.classes6.dex
- /data/data/####/base.apk.classes6.dex.flock (deleted)
- /data/data/####/base.apk.classes7.dex
- /data/data/####/base.apk.classes7.dex.flock (deleted)
- /data/data/####/base.apk.classes8.dex
- /data/data/####/base.apk.classes8.dex.flock (deleted)
- /data/data/####/com.facebook.sdk.USER_SETTINGS.xml
- /data/data/####/com.facebook.sdk.appEventPreferences.xml
- /data/data/####/com.google.android.gms.appid-no-backup
- /data/data/####/libPglmetasec_ml.so
- /data/data/####/libavmdl_lite.so
- /data/data/####/libtobEmbedEncrypt.so
- /data/data/####/libttmplayer_lite.so
- /data/data/####/multidex.version.xml
- /data/data/####/o0oooOO0ooOo.dat
- /data/data/####/pangle_meta_data_sp.xml
- /data/data/####/proc_auxv
- /data/data/####/sp_preload_plugin.xml
- /data/data/####/temp (deleted)
- /data/data/####/tmp-base.apk.classes101272773.zip
- /data/data/####/tmp-base.apk.classes1114791872.zip
- /data/data/####/tmp-base.apk.classes130579993.zip
- /data/data/####/tmp-base.apk.classes1310073994.zip
- /data/data/####/tmp-base.apk.classes1313576393.zip
- /data/data/####/tmp-base.apk.classes1387026565.zip
- /data/data/####/tmp-base.apk.classes1457990142.zip
- /data/data/####/tmp-base.apk.classes1482276977.zip
- /data/data/####/tmp-base.apk.classes1508816698.zip
- /data/data/####/tmp-base.apk.classes1533209103.zip
- /data/data/####/tmp-base.apk.classes1634035471.zip
- /data/data/####/tmp-base.apk.classes1741844299.zip
- /data/data/####/tmp-base.apk.classes1864466422.zip
- /data/data/####/tmp-base.apk.classes1876688721.zip
- /data/data/####/tmp-base.apk.classes1906187132.zip
- /data/data/####/tmp-base.apk.classes1980761398.zip
- /data/data/####/tmp-base.apk.classes204988220.zip
- /data/data/####/tmp-base.apk.classes2111479747.zip
- /data/data/####/tmp-base.apk.classes248429617.zip
- /data/data/####/tmp-base.apk.classes253394750.zip
- /data/data/####/tmp-base.apk.classes384176901.zip
- /data/data/####/tmp-base.apk.classes405203366.zip
- /data/data/####/tmp-base.apk.classes422861258.zip
- /data/data/####/tmp-base.apk.classes438963827.zip
- /data/data/####/tmp-base.apk.classes516726204.zip
- /data/data/####/tmp-base.apk.classes55889506.zip
- /data/data/####/tmp-base.apk.classes562619252.zip
- /data/data/####/tmp-base.apk.classes59846372.zip
- /data/data/####/tmp-base.apk.classes742805603.zip
- /data/data/####/tmp-base.apk.classes769779589.zip
- /data/data/####/tmp-base.apk.classes954640781.zip
- /data/data/####/tosversion
- /data/misc/####/primary.prof
