Android.Packed.19281

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.MobiDash.1.origin

Network activity:

Connecting to:

mobil####.####.com

HTTP POST requests:

mobil####.####.com/api/forceupgrade

Modified file system:

Creates the following files:

/data/data/####/databases/lockedapplications-journal
/data/data/####/databases/schedule.db-journal
/data/data/####/shared_prefs/branding.cfg.xml
/data/data/####/shared_prefs/ba.drainrate.lookup.xml
/data/data/####/shared_prefs/schedule.settings.xml
/data/data/####/shared_prefs/oobe.cfg.xml
/data/data/####/databases/metrica_client_data.db-journal
/data/data/####/cache/webviewCacheChromium/data_3
/data/data/####/cache/webviewCacheChromium/data_2
/data/data/####/cache/webviewCacheChromium/data_1
/data/data/####/cache/webviewCacheChromium/data_0
/data/data/####/databases/webviewCookiesChromium.db-journal
/data/data/####/databases/CLOUDREPUTATIONDB
/data/data/####/files/banner_white_bg
/data/data/####/databases/ExtendAppTmp.db-journal
/data/data/####/shared_prefs/MMS_AP_CONFIG_PREF.xml.bak
/data/data/####/shared_prefs/mc.cfg.xml
/data/data/####/shared_prefs/assistant.cfg.xml
/data/data/####/shared_prefs/sys.provider.storage.xml
/data/data/####/shared_prefs/multidex.version.xml
/data/data/####/databases/metrica_data.db-journal
/data/data/####/shared_prefs/WSAndroidAppConfig.xml
/data/data/####/files/sa_oem.txt
/data/data/####/shared_prefs/report.analytics.xml
/data/data/####/shared_prefs/ba.cloud.report.xml
/data/data/####/databases/ShareDB-journal
/data/data/####/databases/webview.db-journal
/data/data/####/databases/black_list-journal
/data/data/####/shared_prefs/com.mcafee.so.cfg.xml
/data/data/####/shared_prefs/com.mcafee.ap.cfg.xml
/data/data/####/files/branding/2_APP_REMINDER_3.png
/data/data/####/files/gaClientId
/data/data/####/shared_prefs/WSAndroidAppConfig.xml.bak
/data/data/####/shared_prefs/com.mcafee.batteryadvisor.mode.customized.xml
/data/data/####/shared_prefs/com.mcafee.batteryadvisor.mode.xml
/data/data/####/shared_prefs/com.mcafee.wifi.cfg.xml
/data/data/####/databases/LOGDB-journal
/data/data/####/files/log.cfg
/data/data/####/databases/keyword_list-journal
/data/data/####/shared_prefs/com.google.android.gms.analytics.prefs.xml
/data/data/####/shared_prefs/CloudClientIdentifier.xml
/data/data/####/files/banner_black_bg
/data/data/####/shared_prefs/McAfeeSALiveConfig.xml
/data/data/####/files/metrica_client_data.db.lock
/data/data/####/files/file
/data/data/####/files/config_backup.txt
/data/data/####/mcs/xlm/1.tmp
/data/data/####/shared_prefs/####_startupserviceinfopreferences.xml
/data/data/####/mcs/xm/.lock
/data/data/####/databases/keyword_list
/data/data/####/files/update_version
/data/data/####/shared_prefs/####_migrationpreferences.xml
/data/data/####/shared_prefs/store survey data.xml
/data/data/####/databases/db_metrica_####_20799a27-fa80-4b36-b2db-0f8141f24180-journal
/data/data/####/shared_prefs/share.cfg.xml
/data/data/####/shared_prefs/MMS_AP_CONFIG_PREF.xml
/data/data/####/mcs/cfg/1
/data/data/####/app_app_apk/suite.dat.jar
/data/data/####/shared_prefs/####_boundentrypreferences.xml
/data/data/####/databases/DataFromCould.db-journal
/data/data/####/mcs/swpf-0.dat
/data/data/####/shared_prefs/sa_daytsk_prefs.xml
/data/data/####/databases/DSF_THREAT_DB-journal
/data/data/####/shared_prefs/dm.cfg.xml
/data/data/####/vsmapp.cfg
/data/data/####/files/elist.pkg
/data/data/####/cache/webviewCacheChromium/f_000009
/data/data/####/cache/webviewCacheChromium/f_000008
/data/data/####/files/WS_BRANDING_FILE
/data/data/####/cache/webviewCacheChromium/f_000001
/data/data/####/files/branding/config_info.txt
/data/data/####/cache/webviewCacheChromium/f_000003
/data/data/####/cache/webviewCacheChromium/f_000002
/data/data/####/cache/webviewCacheChromium/f_000005
/data/data/####/shared_prefs/ba.cloud.collect.xml
/data/data/####/cache/webviewCacheChromium/f_000007
/data/data/####/databases/white_list
/data/data/####/databases/EndProtectionDB-journal
/data/data/####/shared_prefs/report.cdw.xml
/data/data/####/databases/metrica_client_data.db
/data/data/####/code_cache/secondary-dexes/MultiDex.lock
/data/data/####/cache/webviewCacheChromium/index
/data/data/####/files/elist.zip
/data/data/####/databases/DataFromCould.db
/data/data/####/files/credentials.dat
/data/data/####/databases/csf_call_log-journal
/data/data/####/files/splash_bottom_left
/data/data/####/shared_prefs/ba.cloud.report.xml.bak
/data/data/####/shared_prefs/reg.cfg.xml
/data/data/####/shared_prefs/com.mcafee.batteryadvisor.rules.customized.xml
/data/data/####/shared_prefs/####_servertimeoffset.xml
/data/data/####/shared_prefs/report.appsflyer.xml
/data/data/####/files/elist/sa_elist.txt
/data/data/####/databases/white_list-journal
/data/data/####/shared_prefs/sa_daytsk_prefs.xml.bak
/data/data/####/databases/WSAndroid-journal
/data/data/####/databases/vsm.qrt
/data/data/####/databases/AP_SDK_DB_-journal
/data/data/####/shared_prefs/msg.baidu.xml
/data/data/####/cache/webviewCacheChromium/f_000004
/data/data/####/databases/ShareDB
/data/data/####/shared_prefs/ws.cfg.xml
/data/data/####/shared_prefs/csf.settings.xml
/data/data/####/databases/vsm.qrt-journal
/data/data/####/shared_prefs/McAfeeSALiveConfig.xml.bak
/data/data/####/databases/lockedapplications
/data/data/####/databases/csf_call_log
/data/data/####/shared_prefs/schedule.settings.xml.bak
/data/data/####/databases/black_list
/data/data/####/files/env.cfg
/data/data/####/databases/data_manager
/data/data/####/shared_prefs/rate_the_app.xml
/data/data/####/files/branding/2_APP_REMINDER_1.png
/data/data/####/shared_prefs/com.mcafee.batteryadvisor.mode.restore.xml
/data/data/####/shared_prefs/ap_sdk.xml
/data/data/####/mcs/db/2
/data/data/####/databases/BatteryRecord.db-journal
/data/data/####/files/enter_pin_bottom
/data/data/####/shared_prefs/sc.cfg.xml
/data/data/####/databases/db_metrica_####_13-journal
/data/data/####/shared_prefs/SDKVersion.xml
/data/data/####/shared_prefs/ba.cfg.xml
/data/data/####/shared_prefs/msg.gcm.xml
/data/data/####/shared_prefs/####_preferences.xml
/data/data/####/mcs/db/1
/data/data/####/shared_prefs/vsm.cfg.xml
/data/data/####/databases/WSAndroid
/data/data/####/files/instru.cfg
/data/data/####/databases/LOGDB
/data/data/####/shared_prefs/csf.rejecter.xml
/data/data/####/shared_prefs/csf.rejector.xml
/data/data/####/files/branding/2_APP_REMINDER_4.png
/data/data/####/databases/DSF_THREAT_DB
/data/data/####/databases/google_analytics_v4.db-journal
/data/data/####/shared_prefs/ba.cloud.lookup.xml
/data/data/####/shared_prefs/pref.global.xml
/data/data/####/shared_prefs/Analytics.xml
/data/data/####/databases/EndProtectionDB
/data/data/####/databases/csp.db
/data/data/####/mcs/sdb/2
/data/data/####/mcs/sdb/1
/data/data/####/shared_prefs/dft_cfg.xml
/data/data/####/initDru.tmp
/data/data/####/shared_prefs/com.mcafee.batteryadvisor.rules.xml
/data/data/####/databases/db_metrica_####-journal
/data/data/####/shared_prefs/ap_sdk.xml.bak
/data/data/####/databases/csp.db-journal
/data/data/####/files/urlresolver/sa_urlresolverpatterns.txt
/data/data/####/databases/data_manager-journal
/data/data/####/code_cache/secondary-dexes/tmp-####-1.apk.classes-583589093.zip
/data/data/####/shared_prefs/####_preferences.xml.bak
/data/data/####/databases/CLOUDREPUTATIONDB-journal
/data/data/####/databases/schedule.db
/data/data/####/cache/webviewCacheChromium/f_000006
/data/data/####/databases/AP_SDK_DB_
/data/data/####/shared_prefs/report.facebook.xml
/data/data/####/mcs/cfg/2
/data/data/####/shared_prefs/asf.storage.xml

Miscellaneous:

Contains functionality to send SMS messages automatically.

Technologies

Begriffe

Schulung und Training

Mythen

Technical information

Curing recommendations

Free trial