Android.Packed.19177

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.MobiDash.1.origin

Network activity:

Connecting to:

g####.####.cn
x####.####.mobi
i####.####.com
recom####.####.mobi
a####.####.mobi
adma####.####.com

HTTP GET requests:

a####.####.mobi/images/icon3/liveleak-2.png
a####.####.mobi/images/icon3/dailytube-2.png
i####.####.com/vi/XIuBENnJ_j4/mqdefault.jpg
a####.####.mobi/images/icon3/mobango-2.png
a####.####.mobi/images/icon3/whatsappdaily-2.png
a####.####.mobi/images/icon3/tumblr-2.png
a####.####.mobi/images/icon3/goplay-2.png
a####.####.mobi/images/icon3/freeappstore-2.png
a####.####.mobi/images/gift_icon20161118.png
a####.####.mobi/images/icon3/mrvideo-2.png
a####.####.mobi/images/icon3/mp3jugaad-2.png
a####.####.mobi/images/icon3/vine-2.png
a####.####.mobi/images/icon3/songmazaa-2.png
a####.####.mobi/images/icon3/imdb-2.png
a####.####.mobi/images/icon3/instagram-2.png
i####.####.com/vi/Ix8DCqMVjxM/mqdefault.jpg
a####.####.mobi/images/icon3/tubidy-2.png

HTTP POST requests:

adma####.####.com/usetting/v1/fetch_config
a####.####.mobi/update_list
a####.####.mobi/url_check
a####.####.mobi/update_get
a####.####.mobi/check_nav
a####.####.mobi/gcm_conf_get
a####.####.mobi/signin
x####.####.mobi/allhotkey
a####.####.mobi/setup
a####.####.mobi/domain
g####.####.cn/collect?zip=####&pf=####&pn=####&ve=####&vc=####&sdk_ve=####&sdk_vc=####&sf=####&app=####&uuid=####&vno=####&chk=####
a####.####.mobi/welcome_get2
a####.####.mobi/pingv2
recom####.####.mobi/video_recommend_list
a####.####.mobi/get_nav

Modified file system:

Creates the following files:

/sdcard/VidMate/data/bin.-1544841859
/data/data/####/files/VMDataList.db
/sdcard/VidMate/data/bin.-412544119
/sdcard/Android/data/####/cache/1111478581.tmp
/sdcard/VidMate/data/bin.-800672761
/data/data/####/shared_prefs/Alvin2.xml
/sdcard/VidMate/data/bin.-1026730799
/sdcard/VidMate/data/bin.-1782377034
/data/data/####/cache/webviewCacheChromium/data_3
/sdcard/Android/data/####/cache/1621214789
/data/data/####/cache/webviewCacheChromium/data_1
/data/data/####/cache/webviewCacheChromium/data_0
/data/data/####/databases/pushmessage-journal
/sdcard/VidMate/data/bin.-1472237808
/data/data/####/databases/webviewCookiesChromium.db-journal
/sdcard/VidMate/data/bin.919189290
/sdcard/VidMate/data/bin.-1224419390
/sdcard/VidMate/data/bin.-278146126
/sdcard/VidMate/data/bin.1010072486
/sdcard/Android/data/####/cache/2119557456.tmp
/sdcard/VidMate/data/bin.-513665842
/data/data/####/shared_prefs/multidex.version.xml
/sdcard/VidMate/data/bin.230529367
/sdcard/VidMate/data/bin.-1444304893
/data/data/####/files/stash/ECPMD-2083-1485417897005
/sdcard/Android/data/####/cache/-1725509009
/sdcard/.DataStorage/ContextData.xml
/sdcard/VidMate/data/bin.1389311627
/data/data/####/files/www.sss.file
/data/data/####/shared_prefs/p_vidmate.xml
/data/data/####/databases/webview.db-journal
/sdcard/VidMate/data/bin.-1574310414
/sdcard/VidMate/data/bin.-741659545
/sdcard/VidMate/cache/597493799
/data/data/####/files/history.db
/data/data/####/files/gaClientId
/sdcard/VidMate/data/bin.2100872772
/sdcard/Android/data/####/cache/1390306468.tmp
/sdcard/VidMate/data/bin.570895930
/sdcard/Android/data/####/cache/241514297.tmp
/sdcard/VidMate/data/bin.-2070460954
/sdcard/Android/data/####/cache/-2142868300.tmp
/sdcard/VidMate/log/1485417899063
/sdcard/VidMate/data/bin.1610459767
/sdcard/VidMate/data/bin.1716934100
/data/data/####/cache/webviewCacheChromium/f_00000a
/sdcard/Android/data/####/cache/1108095220
/data/data/####/cache/webviewCacheChromium/f_00000b
/data/data/####/cache/webviewCacheChromium/f_00000e
/data/data/####/cache/webviewCacheChromium/f_00000d
/data/data/####/cache/webviewCacheChromium/f_00000f
/sdcard/VidMate/data/bin.-671658460
/sdcard/VidMate/data/bin.2076957192
/sdcard/VidMate/data/bin.693631636
/data/data/####/cache/webviewCacheChromium/data_2
/sdcard/Android/data/####/cache/-2008801442.tmp
/sdcard/Android/data/####/cache/1454644443.tmp
/data/data/####/databases/vidmate.db
/sdcard/.UTSystemConfig/Global/Alvin2.xml
/data/data/####/files/stash/PBUD-2083-1485417897005
/sdcard/VidMate/cache/-2088103286
/data/data/####/cache/webviewCacheChromium/f_000009
/data/data/####/cache/webviewCacheChromium/f_000008
/sdcard/VidMate/data/bin.578088182
/data/data/####/cache/webviewCacheChromium/f_000001
/sdcard/VidMate/data/bin.1364668828
/data/data/####/cache/webviewCacheChromium/f_000003
/data/data/####/cache/webviewCacheChromium/f_000002
/data/data/####/cache/webviewCacheChromium/f_000005
/data/data/####/cache/webviewCacheChromium/f_000004
/sdcard/VidMate/data/bin.-883123340
/data/data/####/cache/webviewCacheChromium/f_000006
/sdcard/Android/data/####/cache/.nomedia
/sdcard/Android/data/####/cache/394014458.tmp
/data/data/####/code_cache/secondary-dexes/MultiDex.lock
/data/data/####/shared_prefs/p_vidmate.xml.bak
/data/data/####/cache/webviewCacheChromium/index
/sdcard/Android/data/####/cache/1015478807.tmp
/sdcard/VidMate/data/bin.-1648247619
/sdcard/VidMate/data/bin.289312685
/sdcard/VidMate/data/bin.-1793725307
/sdcard/VidMate/data/bin.42982088
/sdcard/VidMate/data/bin.859628415
/data/data/####/cache/webviewCacheChromium/f_000012
/data/data/####/cache/webviewCacheChromium/f_000013
/data/data/####/cache/webviewCacheChromium/f_000010
/data/data/####/cache/webviewCacheChromium/f_000011
/data/data/####/files/observedFile
/sdcard/Android/data/####/cache/2028145440.tmp
/data/data/####/cache/webviewCacheChromium/f_000007
/sdcard/VidMate/data/bin.686532630
/data/data/####/cache/webviewCacheChromium/f_00000c
/sdcard/VidMate/data/bin.-1730210793
/sdcard/VidMate/data/bin.2125480456
/sdcard/VidMate/data/bin.965183625
/sdcard/VidMate/data/bin.-1906250314
/sdcard/VidMate/data/bin.-531083186
/data/data/####/files/menu.db
/sdcard/VidMate/data/bin.284768489
/data/data/####/databases/google_analytics_v2.db-journal
/sdcard/VidMate/data/bin.-1918398835
/data/data/####/code_cache/secondary-dexes/tmp-####-1.apk.classes-1154545547.zip
/sdcard/Android/data/####/cache/-948674819.tmp
/data/data/####/shared_prefs/SMD####.xml
/sdcard/VidMate/data/bin.293957621
/sdcard/VidMate/data/2119837495
/data/data/####/shared_prefs/####_preferences.xml
/data/data/####/shared_prefs/com.google.android.gcm.xml
/sdcard/VidMate/cache/2092946091
/sdcard/VidMate/data/bin.-197998865
/sdcard/Android/data/####/cache/-610032638.tmp
/data/data/####/app_app_apk/vidmatefree.dat.jar
/sdcard/VidMate/cache/1165619162
/sdcard/VidMate/config/task-journal
/data/data/####/shared_prefs/VidMate.xml.bak
/sdcard/VidMate/data/bin.-1481878012
/sdcard/VidMate/data/bin.-1256009472
/sdcard/VidMate/data/bin.1120611423
/data/data/####/shared_prefs/ContextData.xml
/sdcard/Android/data/####/cache/1311859226
/sdcard/VidMate/data/bin.660386629
/data/data/####/shared_prefs/VidMate.xml
/data/data/####/shared_prefs/AppD####.xml
/sdcard/VidMate/data/bin.-2070376201
/sdcard/VidMate/log/sub/1485417902246
/data/data/####/shared_prefs/####_preferences.xml.bak
/sdcard/Android/data/####/cache/-1551657241.tmp
/sdcard/VidMate/data/bin.-1960654866
/sdcard/VidMate/data/bin.-1115310979
/sdcard/VidMate/data/bin.1535183609
/sdcard/VidMate/data/bin.1077858207
/data/data/####/databases/vidmate.db-journal
/sdcard/VidMate/data/bin.-1769046480
/sdcard/VidMate/data/bin.801553237

Miscellaneous:

Contains functionality to send SMS messages automatically.

Technologies

Begriffe

Schulung und Training

Mythen

Technical information

Curing recommendations

Free trial