Android.Packed.23574

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.DownLoader.2083

Downloads the following detected threats from the Web:

Android.DownLoader.2083

Network activity:

Connecting to:

a####.####.com

HTTP POST requests:

a####.####.com/ad-service/ad/mark

Modified file system:

Creates the following files:

<Package Folder>/.jiagu/libjiagu.so
<Package Folder>/app_dvkhbl/<Package>.odex
<Package Folder>/app_dvkhbl/<Package>.zip
<Package Folder>/app_jgls/.log.lock
<Package Folder>/app_jgls/.log.ls
<Package Folder>/cache/####/45941fcd2ad935975812449f9364d21e.0.tmp
<Package Folder>/cache/####/45941fcd2ad935975812449f9364d21e.1.tmp
<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/f_000001
<Package Folder>/cache/####/index
<Package Folder>/cache/####/journal.tmp
<Package Folder>/databases/google_app_measurement_local.db
<Package Folder>/databases/google_app_measurement_local.db-journal
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/databases/webviewCookiesChromiumPrivate.db-journal
<Package Folder>/files/####/.jg.ic
<Package Folder>/files/####/com.crashlytics.settings.json
<Package Folder>/files/####/sa_a65ff8ba-0f65-4bd5-b108-f738570325de_1496217907411.tap
<Package Folder>/files/####/session_analytics.tap
<Package Folder>/files/####/session_analytics.tap.tmp
<Package Folder>/files/AppEventsLogger.persistedevents
<Package Folder>/files/analytics_queue.tmp
<Package Folder>/files/persisted_config
<Package Folder>/no_backup/com.google.android.gms.appid-no-backup
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/Prisma.xml
<Package Folder>/shared_prefs/Prisma.xml.bak
<Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
<Package Folder>/shared_prefs/com.crashlytics.prefs.xml
<Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
<Package Folder>/shared_prefs/com.facebook.accountkit.sdk.appEventPreferences.xml
<Package Folder>/shared_prefs/com.facebook.internal.preferences.APP_SETTINGS.xml
<Package Folder>/shared_prefs/com.facebook.sdk.appEventPreferences.xml
<Package Folder>/shared_prefs/com.facebook.sdk.attributionTracking.xml
<Package Folder>/shared_prefs/com.google.android.gms.appid.xml
<Package Folder>/shared_prefs/com.google.android.gms.measurement.prefs.xml
<Package Folder>/shared_prefs/com.google.android.gms.measurement.prefs.xml.bak
<Package Folder>/shared_prefs/install_tracker.xml
<Package Folder>/shared_prefs/io.fabric.sdk.android;fabric;c.a.a.a.m.xml
<Package Folder>/shared_prefs/jg_app_update_settings_random.xml
<Package Folder>/shared_prefs/multidex.version.xml
<Package Folder>/shared_prefs/session_tracker.xml
<Package Folder>/shared_prefs/statistics.xml