Technical information
Malicious functions:
Executes code of the following detected threats:
- Adware.Ninebox.4.origin
File system changes:
Creates the following files:
- /data/data/####/1565951437007.jar
- /data/data/####/1565951437836.jar
- /data/data/####/1565951437935.jar
- /data/data/####/1565951438140.jar
- /data/data/####/1565951438267.jar
- /data/data/####/1565951438280.jar
- /data/data/####/1565951454588.jar
- /data/data/####/1565951454693.jar
- /data/data/####/1565951454809.jar
- /data/data/####/1565951454920.jar
- /data/data/####/1565951454942.jar
- /data/data/####/1565951458197.jar
- /data/data/####/1565951458307.jar
- /data/data/####/1565951458422.jar
- /data/data/####/1565951458554.jar
- /data/data/####/1565951458558.jar
- /data/data/####/1565951464200.jar
- /data/data/####/1565951464309.jar
- /data/data/####/1565951464423.jar
- /data/data/####/1565951464556.jar
- /data/data/####/1565951464557.jar
- /data/data/####/1565951465845.jar
- /data/data/####/1565951465946.jar
- /data/data/####/1565951466063.jar
- /data/data/####/1565951466187.jar
- /data/data/####/1565951466208.jar
- /data/data/####/1565951468105.jar
- /data/data/####/1565951468219.jar
- /data/data/####/1565951468371.jar
- /data/data/####/1565951468510.jar
- /data/data/####/1565951468519.jar
- /data/data/####/1565951470415.jar
- /data/data/####/1565951470503.jar
- /data/data/####/1565951470611.jar
- /data/data/####/1565951470751.jar
- /data/data/####/1565951470767.jar
- /data/data/####/1565951472666.jar
- /data/data/####/1565951472823.jar
- /data/data/####/1565951472950.jar
- /data/data/####/1565951473084.jar
- /data/data/####/1565951473090.jar
- /data/data/####/1565951475824.jar
- /data/data/####/1565951475936.jar
- /data/data/####/1565951476051.jar
- /data/data/####/1565951476175.jar
- /data/data/####/1565951476198.jar
- /data/data/####/1565951479382.jar
- /data/data/####/1565951479477.jar
- /data/data/####/1565951479593.jar
- /data/data/####/1565951479704.jar
- /data/data/####/1565951479727.jar
- /data/data/####/1565951482625.jar
- /data/data/####/1565951482733.jar
- /data/data/####/1565951482875.jar
- /data/data/####/1565951482996.jar
- /data/data/####/1565951483023.jar
- /data/data/####/1565951485253.jar
- /data/data/####/1565951485358.jar
- /data/data/####/1565951485464.jar
- /data/data/####/1565951485572.jar
- /data/data/####/1565951485593.jar
- /data/data/####/1565951486757.jar
- /data/data/####/1565951486857.jar
- /data/data/####/1565951486975.jar
- /data/data/####/1565951487089.jar
- /data/data/####/1565951487098.jar
- /data/data/####/1565951490284.jar
- /data/data/####/1565951490388.jar
- /data/data/####/1565951490507.jar
- /data/data/####/1565951490643.jar
- /data/data/####/1565951490662.jar
- /data/data/####/1565951493456.jar
- /data/data/####/1565951493584.jar
- /data/data/####/1565951493711.jar
- /data/data/####/1565951493972.jar
- /data/data/####/1565951493998.jar
- /data/data/####/1565951495462.jar
- /data/data/####/1565951495680.jar
- /data/data/####/1565951495844.jar
- /data/data/####/1565951495973.jar
- /data/data/####/1565951495977.jar
- /data/data/####/1565951497349.jar
- /data/data/####/1565951497470.jar
- /data/data/####/1565951497599.jar
- /data/data/####/1565951497726.jar
- /data/data/####/1565951497727.jar
- /data/data/####/1565951503422.jar
- /data/data/####/1565951503541.jar
- /data/data/####/1565951503641.jar
- /data/data/####/1565951503731.jar
- /data/data/####/1565951503847.jar
- /data/data/####/bah.xml
- /data/data/####/baj.xml
- /data/data/####/bak.xml
- /data/data/####/baq.xml
- /data/data/####/bid.xml
- /data/data/####/bim.xml
- /data/data/####/cfb.xml
- /data/data/####/cfj.xml
- /data/data/####/cft.xml
- /data/data/####/cix.xml
- /data/data/####/ftime.xml
- /data/data/####/libxwalkcore.so
- /data/data/####/mrq_third_party_config.xml
- /data/data/####/pid.xml
- /data/data/####/pim.xml
- /data/data/####/sid.xml
- /data/media/####/MID.DAT
- /data/media/####/share.dat
Miscellaneous:
Loads the following dynamic libraries:
- libxwalkcore
Uses the following algorithms to encrypt data:
- DES
Uses the following algorithms to decrypt data:
- DES
Gets information about phone status (number, IMEI, etc.).
Gets information about running apps.
Displays its own windows over windows of other apps.
