SHA1 hash:
- 86789c9b3a4633e600a53b781f4385de9b389959
Description
Android.MagicAd.4 is a component of the Android.MagicAd.1 trojan which the latter decrypts from its file resources and executes. It is an executable dex file that launches other components of the malware.
Operating routine
Android.MagicAd.1 decrypts a native library from the file located in its /assets resource directory. It then decrypts dex files from this library; such files include Android.MagicAd.1.origin and Android.MagicAd.4.
Android.MagicAd.1 sends the broadcast intent com.android.dd.init.j. Android.MagicAd.4 registers this intent and initializes Android.MagicAd.1.origin.
Android.MagicAd.4 can also create tasks using JobScheduler scheduler.
More details about Android.MagicAd.1
More details about Android.MagicAd.1.origin