Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.MobiDash.1.origin
Network activity:
Connecting to:
- t####.####.com
- im####.####.com
- startap####.com
- i####.####.com
- r####.####.com
- imagec####.####.com
- d####.####.org
- artistr####.com
- m####.####.com
- appo####.####.com
- apptr####.com
HTTP GET requests:
- imagec####.####.com/artwork/sml//7/754/MPJZ000A.jpg
- imagec####.####.com/artwork/sml//7/760/UXVZ000A.jpg
- artistr####.com/css/ar-dropdownmenu.css
- imagec####.####.com/images/basic/loading_big.gif
- r####.####.com/1.4/gethtmlad?productId=####&os=####&sdkVersion=####&packageId=####&userAdvertisingId=####&model=####&manufacturer=####&deviceVersion=#...
- imagec####.####.com/images/product/prod_icon_fan.gif
- imagec####.####.com/artwork/sml//7/756/YRKZ000A.jpg
- imagec####.####.com/artwork/sml//7/753/V4JZ000A.jpg
- imagec####.####.com/artwork/sml//7/754/UPJZ000A.jpg
- i####.####.com/InApp/resources/info_ex_l.png
- im####.####.com/image/fetch/f_auto,q_80,w_230,h_230/http%3A%2F%2Flh3.googleusercontent.com%2Fvy78qNVGZSGJc71jOW7T6UcdAhB0NMyjnbtbP5W1f8n7wOdn4Am5KESVg...
- startap####.com/tracking/infoEvent?productId=####&os=####&sdkVersion=####&packageId=####&userAdvertisingId=####&model=####&manufacturer=####&deviceVer...
- t####.####.com/c/emOglUI3HKdDHUJWT0yj0p6Vtt9WY0xOGFHiBh7PAV4/CF?subid1=####&placement=####&subid3=####&m.gaid=####
- im####.####.com/static/images/close-app.png
- imagec####.####.com/images/basic/close_15x15.gif
- imagec####.####.com/artwork/artistphoto/74998/CFB47B5F3E9345048A0EA8A5E0AAFF56.jpg
- m####.####.com/dir/click?c=####&offerId=####&affid=####&guid=####&hash=####&cid=####&affsub1=####&index=####&uuid=####&ref=####
- apptr####.com/dir/redirect?c=####&offerId=####&affid=####&guid=####&hash=####&cid=####&affsub1=####&index=####
- artistr####.com/js/artwork.js
- d####.####.org/android-distance.json
- im####.####.com/image/fetch/f_auto,q_80,w_230,h_230/http%3A%2F%2Flh3.googleusercontent.com%2FcZ2u7ZBqKr6q-a4sVWjwV11uKJWGzlLovU94hdAG88D_wZ_fuBpjbqW8R...
- r####.####.com/tracking/adClick?d=####&lu=####&index=####&adTag=####&clientSessionId=####&profileId=####&displayDuration=####&ts=####&afh=####
- artistr####.com/css/ar-home.css
- imagec####.####.com/artwork/sml//7/754/RIJZ000A.jpg
- imagec####.####.com/artwork/sml//7/756/QLKZ000A.jpg
- imagec####.####.com/artwork/sml//7/756/COKZ000A.jpg
- im####.####.com/styles/compressed/fullpage_float_window_infra.20170124-0748.min.css
- im####.####.com/image/fetch/f_auto,q_80,w_230,h_230/http%3A%2F%2Flh5.ggpht.com%2FWZWxKkLnUk043l1eFyIZWIxk4xeSVQROA2qsOQ4gO-4cyscxeG6W0G3iEpI4Leastg
- imagec####.####.com/images/images/off_art_com.jpg
- im####.####.com/image/fetch/f_auto,q_80,w_230,h_230/http%3A%2F%2Flh3.googleusercontent.com%2FWJYy_3SAx2S1E1kcq52aodttE3S6IC3UhNzPJOVAWO2nGPAfuxml8mEYh...
- i####.####.com/InApp/resources/info_ex_s.png
- artistr####.com/ScriptResource.axd?d=####&t=####
- im####.####.com/styles/compressed/top-apps-page-infra.20170124-0748.min.css
- i####.####.com/1.4/getadsmetadata?productId=####&os=####&sdkVersion=####&packageId=####&userAdvertisingId=####&model=####&manufacturer=####&deviceVers...
- im####.####.com/image/fetch/f_auto,q_80,w_48,h_48/http%3A%2F%2Flh3.googleusercontent.com%2FI1xORgYMJHkPwlF-CRzgprHMuy3-O6qUBF0SS28D8x7oGlr0yLY2ouJywbL...
- imagec####.####.com/images/home/cart.gif
- artistr####.com/js/Utils.js
- imagec####.####.com/images/basic/btn_go_red.gif
- im####.####.com/styles/compressed/banner_rt_2d_rays_infra.20170124-0748.min.css
- startap####.com/1.4/trackdownload?productId=####&os=####&sdkVersion=####&packageId=####&userAdvertisingId=####&model=####&manufacturer=####&deviceVers...
- imagec####.####.com/artwork/sml//7/756/IRKZ000A.jpg
- im####.####.com/image/fetch/f_auto,q_80,w_230,h_230/http%3A%2F%2Flh3.googleusercontent.com%2FI1xORgYMJHkPwlF-CRzgprHMuy3-O6qUBF0SS28D8x7oGlr0yLY2ouJyw...
- im####.####.com/image/fetch/f_auto,q_80,w_48,h_48/http%3A%2F%2Fstatic.akamai.startappexchange.com%2Fadvertisers%2FSAP_63761%2F300078037%2F400272766%2F...
- imagec####.####.com/artwork/sml//7/756/UIKZ000A.jpg
- im####.####.com/static/images/fullpage_float_window_infra_speech/bubble.png
- im####.####.com/image/fetch/f_auto,q_80,w_230,h_230/http%3A%2F%2Flh3.googleusercontent.com%2FtYuF3mp-G0bg5joOnlOGjXeUq0r6omQSm5w6pYqq-NYXL22DRejYNdZki...
- im####.####.com/styles/compressed/fullpage_float_window_infra_speech.20170124-0748.min.css
- imagec####.####.com/artwork/sml//7/754/QXJZ000A.jpg
- im####.####.com/static/images/star_half_big.png
- imagec####.####.com/images/images/ar-tab-on.jpg
- imagec####.####.com/artwork/sml//7/756/KWKZ000A.jpg
- appo####.####.com/ep/url
- r####.####.com/tracking/adImpression?d=####&position=####&adTag=####&clientSessionId=####&profileId=####&ts=####&afh=####
- artistr####.com/js/general.js
- artistr####.com/css/ar-basic.css
- imagec####.####.com/artwork/sml//7/760/5KVZ000A.jpg
- artistr####.com/WebService.asmx/js
- i####.####.com/InApp/resources/info_s.png
- imagec####.####.com/images/product/btng-see_more_details_and_b.gif
- im####.####.com/image/fetch/f_auto,q_80,w_230,h_230/http%3A%2F%2Flh3.googleusercontent.com%2F3KJC9pal4atugkpFZn18I_EmAeFZnQqchtz5F_DETKOZfgp3GO7wYSJAV...
- imagec####.####.com/artwork/sml//7/756/NIKZ000A.jpg
- artistr####.com/WebResource.axd?d=####&t=####
- im####.####.com/image/fetch/f_auto,q_80,w_230,h_230/http%3A%2F%2Flh3.googleusercontent.com%2FNXzd9MBKGL6__sBs2uTOLsYrH2hO0-jxvJacKdjnW8t8WzFRyhHK6BNu9...
- imagec####.####.com/artwork/sml//7/754/LPJZ000A.jpg
- imagec####.####.com/artwork/sml//7/760/TXVZ000A.jpg
- im####.####.com/static/images/star_full_big.png
- artistr####.com/galleries/sirhowardlee
- artistr####.com/js/jquery/jquery.js
- im####.####.com/static/images/fullpage_float_window_infra_speech/x.png
- im####.####.com/image/fetch/f_auto,q_80,w_230,h_230/http%3A%2F%2Flh6.ggpht.com%2FK9czCJMDj3G4AUonnuDi6yYgbQ37vgIcRygRzzF36r79nfitFFBIrYdMxia-LvXJxKE
- im####.####.com/static/images/banner_rt_2d_rays_base/download_icon_30.png
- artistr####.com/js/specific.js
- i####.####.com/InApp/resources/info_l.png
- imagec####.####.com/images/basic/spacergray.gif
- imagec####.####.com/images/logo_ar_header.gif
Modified file system:
Creates the following files:
- /data/data/####/files/StartappMetadata
- /data/data/####/databases/db_metrica_####_13-journal
- /data/data/####/shared_prefs/####_migrationpreferences.xml
- /data/data/####/shared_prefs/####_preferences.xml
- /data/data/####/shared_prefs/####_startupserviceinfopreferences.xml
- /data/data/####/shared_prefs/com.startapp.android.publish.CookiePrefsFile.xml.bak
- /data/data/####/app_app_apk/sc_HIT1UD.dat.jar
- /data/data/####/shared_prefs/####_boundentrypreferences.xml
- /data/data/####/files/metrica_client_data.db.lock
- /data/data/####/databases/metrica_client_data.db-journal
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/databases/db_metrica_####_20799a27-fa80-4b36-b2db-0f8141f24180-journal
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/code_cache/secondary-dexes/####-1.apk.classes965493955.zip
- /data/data/####/shared_prefs/####_servertimeoffset.xml
- /data/data/####/files/asdfg
- /data/data/####/shared_prefs/com.startapp.android.publish.xml.bak
- /data/data/####/shared_prefs/shared_preferences.xml.bak
- /data/data/####/shared_prefs/multidex.version.xml
- /data/data/####/databases/metrica_data.db-journal
- /data/data/####/databases/db_metrica_####-journal
- /data/data/####/shared_prefs/shared_preferences.xml
- /data/data/####/databases/webview.db-journal
- /data/data/####/databases/metrica_client_data.db
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/files/model-distance-calculations.json
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/shared_prefs/####_preferences.xml.bak
- /data/data/####/shared_prefs/com.startapp.android.publish.CookiePrefsFile.xml
- /data/data/####/cache/app.dat
- /data/data/####/shared_prefs/com.startapp.android.publish.xml
- /data/data/####/shared_prefs/ap_app_details.xml
- /data/data/####/files/shared_prefs_sdk_ad_prefs
- /data/data/####/cache/webviewCacheChromium/index
- /data/data/####/files/credentials.dat
- /data/data/####/shared_prefs/device_id.xml.xml
Miscellaneous:
Contains functionality to send SMS messages automatically.
