Android.Packed.23003

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.MobiDash.1.origin

Downloads the following detected threats from the Web:

Android.MobiDash.1.origin

Network activity:

Connecting to:

c####.####.com
funcst####.####.com
pixel####.net

HTTP POST requests:

c####.####.com/batsdk/api_int/newsync2
funcst####.####.com/Api2.ashx
pixel####.net/sales.php

Modified file system:

Creates the following files:

<Package Folder>/app_app_apk/xphonefree.dat.jar
<Package Folder>/app_favorites/journal
<Package Folder>/code_cache/####/MultiDex.lock
<Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes1743540823.zip
<Package Folder>/databases/91analytics_v4.db
<Package Folder>/databases/91analytics_v4.db-journal
<Package Folder>/files/.YFlurrySenderIndex.info.AnalyticsData_V9Z63HKK8CD57T4CSQJM_213
<Package Folder>/files/.YFlurrySenderIndex.info.AnalyticsMain
<Package Folder>/files/.yflurrydatasenderblock.bc288cd7-5bb6-4d50-a96d-f21256f88780
<Package Folder>/files/.yflurryprotonconfig.-6e22c4c11b08d5e
<Package Folder>/files/.yflurryprotonreport.-6e22c4c11b08d5e
<Package Folder>/files/.yflurryreport.-6e22c4c11b08d5e
<Package Folder>/files/channel.ini
<Package Folder>/files/file
<Package Folder>/files/wallpaper_l.dat
<Package Folder>/files/wallpaper_p.dat
<Package Folder>/shared_prefs/91Analytics_Relay_Session.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/shared_prefs/DataPreferences.xml
<Package Folder>/shared_prefs/FLURRY_SHARED_PREFERENCES.xml
<Package Folder>/shared_prefs/FlAnalytics_Config.xml
<Package Folder>/shared_prefs/FlAnalytics_Config.xml.bak
<Package Folder>/shared_prefs/PhoneStatePreferences.xml
<Package Folder>/shared_prefs/PhoneStatePreferences.xml.bak
<Package Folder>/shared_prefs/batsdk_app_life.xml
<Package Folder>/shared_prefs/batsdk_crash_switch.xml
<Package Folder>/shared_prefs/batsdk_user_info.xml
<Package Folder>/shared_prefs/multidex.version.xml
<SD-Card>/felink/.fuid