Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.MobiDash.2.origin
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) and####.q####.com:80
- TCP(TLS/1.0) sett####.crashly####.com:443
- TCP(TLS/1.0) e.crashly####.com:443
DNS requests:
- and####.q####.com
- e.crashly####.com
- sett####.crashly####.com
Modified file system:
Creates the following files:
- <Package Folder>/app_app_apk/androidquran.dat.jar
- <Package Folder>/databases/bookmarks.db-journal
- <Package Folder>/databases/translations.db-journal
- <Package Folder>/files/####/5A14C146004B-0001-0819-7CFFD34C47B6...S.json
- <Package Folder>/files/####/5A14C146004B-0001-0819-7CFFD34C47B6...e.json
- <Package Folder>/files/####/5A14C146004B-0001-0819-7CFFD34C47B6...n.json
- <Package Folder>/files/####/5A14C146004B-0001-0819-7CFFD34C47B6...p.json
- <Package Folder>/files/####/5A14C146004B-0001-0819-7CFFD34C47B6...s_temp
- <Package Folder>/files/####/<Package>-1.apk.classes904544492.zip
- <Package Folder>/files/####/com.crashlytics.settings.json
- <Package Folder>/files/####/crashlytics-userlog-5A14C146004B-00...mp.tmp
- <Package Folder>/files/####/initialization_marker
- <Package Folder>/files/####/sa_11365c6c-66a6-4692-ac6c-75d05d0e...39.tap
- <Package Folder>/files/####/sa_94f8cd81-440d-4af1-8e3d-98174cf2...68.tap
- <Package Folder>/files/####/session_analytics.tap
- <Package Folder>/files/####/session_analytics.tap.tmp
- <Package Folder>/files/vzbygITvd
- <Package Folder>/shared_prefs/<Package>.per_installation.xml
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
- <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
- <Package Folder>/shared_prefs/com.crashlytics.sdk.android.crash...re.xml
- <Package Folder>/shared_prefs/com.crashlytics.sdk.android;answe...gs.xml
- <Package Folder>/shared_prefs/io.fabric.sdk.android;fabric;andr...cb.xml
- <Package Folder>/shared_prefs/multidex.version.xml
- <SD-Card>/quran_android/####/.nomedia
- <SD-Card>/quran_android/####/page001.png
- <SD-Card>/quran_android/####/page002.png
- <SD-Card>/quran_android/####/page041.png
- <SD-Card>/quran_android/####/page042.png
- <SD-Card>/quran_android/####/page043.png
- <SD-Card>/quran_android/####/page044.png
- <SD-Card>/quran_android/####/page045.png
- <SD-Card>/quran_android/####/page076.png
- <SD-Card>/quran_android/####/page077.png
- <SD-Card>/quran_android/####/page078.png
Miscellaneous:
Loads the following dynamic libraries:
- vzbygITvd
Adds tasks to the system scheduler.
Displays its own windows over windows of other applications.
