Android.MobiDash.2112

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.MobiDash.2.origin

Network activity:

Connects to:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) ads.m####.com:80
UDP(NTP) p####.ntp.org:123
TCP(TLS/1.0) c####.jq####.com:443
TCP(TLS/1.0) api.face####.com:443
TCP(TLS/1.0) e.crashly####.com:443
TCP(TLS/1.0) i####.superso####.com:443
TCP(TLS/1.0) cdn-hig####.unit####.uni####.com:443
TCP(TLS/1.0) sett####.crashly####.com:443
TCP(TLS/1.0) superso####.akam####.net.####.net:443
TCP(TLS/1.0) ads-gam####.ads.prd.####.com:443
TCP(TLS/1.0) d30x8mt####.cloudf####.net:443
TCP(TLS/1.0) ua.superso####.com:443
TCP(TLS/1.0) outcome####.superso####.com:443

DNS requests:

ads.m####.com
auc####.unit####.uni####.com
c####.jq####.com
co####.unit####.uni####.com
d30x8mt####.cloudf####.net
e.crashly####.com
g####.face####.com
i####.superso####.com
outcome####.superso####.com
p####.ntp.org
publish####.unit####.uni####.com
sett####.crashly####.com
superso####.akam####.net
ua.superso####.com
web####.unit####.uni####.com

HTTP GET requests:

ads.m####.com/m/ad?v=####&id=####&nv=####&dn=####&bundle=####&z=####&o=#...
ads.m####.com/m/open?v=####&id=####&av=####&udid=####&dnt=####

File system changes:

Creates the following files:

/data/data/####/5C6BD56601A8-0001-08F2-04D99ABAFA93.cls_temp
/data/data/####/5C6BD56601A8-0001-08F2-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD56601A8-0001-08F2-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD56601A8-0001-08F2-04D99ABAFA93SessionCrash.cls_temp
/data/data/####/5C6BD56601A8-0001-08F2-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD56601A8-0001-08F2-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD56601A8-0001-08F2-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD56703E0-0002-08F2-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD56703E0-0002-08F2-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD56703E0-0002-08F2-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD56703E0-0002-08F2-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD56703E0-0002-08F2-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD56A00EC-0001-0975-04D99ABAFA93.cls_temp
/data/data/####/5C6BD56A00EC-0001-0975-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD56A00EC-0001-0975-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD56A00EC-0001-0975-04D99ABAFA93SessionCrash.cls_temp
/data/data/####/5C6BD56A00EC-0001-0975-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD56A00EC-0001-0975-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD56A00EC-0001-0975-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD56B0140-0002-0975-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD56B0140-0002-0975-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD56B0140-0002-0975-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD56B0140-0002-0975-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD56E01F1-0001-09E6-04D99ABAFA93.cls_temp
/data/data/####/5C6BD56E01F1-0001-09E6-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD56E01F1-0001-09E6-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD56E01F1-0001-09E6-04D99ABAFA93SessionCrash.cls_temp
/data/data/####/5C6BD56E01F1-0001-09E6-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD56E01F1-0001-09E6-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD56E01F1-0001-09E6-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD5700087-0002-09E6-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD5700087-0002-09E6-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD5700087-0002-09E6-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD5700087-0002-09E6-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD5700087-0002-09E6-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD5720303-0001-0A52-04D99ABAFA93.cls_temp
/data/data/####/5C6BD5720303-0001-0A52-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD5720303-0001-0A52-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD5720303-0001-0A52-04D99ABAFA93SessionCrash.cls_temp
/data/data/####/5C6BD5720303-0001-0A52-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD5720303-0001-0A52-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD5720303-0001-0A52-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD5730255-0002-0A52-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD5730255-0002-0A52-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD5730255-0002-0A52-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD5730255-0002-0A52-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD57602E8-0001-0AC6-04D99ABAFA93.cls_temp
/data/data/####/5C6BD57602E8-0001-0AC6-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD57602E8-0001-0AC6-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD57602E8-0001-0AC6-04D99ABAFA93SessionCrash.cls_temp
/data/data/####/5C6BD57602E8-0001-0AC6-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD57602E8-0001-0AC6-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD57602E8-0001-0AC6-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD57701DE-0002-0AC6-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD57701DE-0002-0AC6-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD57701DE-0002-0AC6-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD57701DE-0002-0AC6-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD57701DE-0002-0AC6-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD57A034B-0001-0B30-04D99ABAFA93.cls_temp
/data/data/####/5C6BD57A034B-0001-0B30-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD57A034B-0001-0B30-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD57A034B-0001-0B30-04D99ABAFA93SessionCrash.cls_temp
/data/data/####/5C6BD57A034B-0001-0B30-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD57A034B-0001-0B30-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD57A034B-0001-0B30-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD57B03E6-0002-0B30-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD57B03E6-0002-0B30-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD57B03E6-0002-0B30-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD57B03E6-0002-0B30-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD57B03E6-0002-0B30-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD58001DE-0001-0BA9-04D99ABAFA93.cls_temp
/data/data/####/5C6BD58001DE-0001-0BA9-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD58001DE-0001-0BA9-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD58001DE-0001-0BA9-04D99ABAFA93SessionCrash.cls_temp
/data/data/####/5C6BD58001DE-0001-0BA9-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD58001DE-0001-0BA9-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD58001DE-0001-0BA9-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD5820079-0002-0BA9-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD5820079-0002-0BA9-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD5820079-0002-0BA9-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD5820079-0002-0BA9-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD584020E-0001-0C1D-04D99ABAFA93.cls_temp
/data/data/####/5C6BD584020E-0001-0C1D-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD584020E-0001-0C1D-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD584020E-0001-0C1D-04D99ABAFA93SessionCrash.cls_temp
/data/data/####/5C6BD584020E-0001-0C1D-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD584020E-0001-0C1D-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD584020E-0001-0C1D-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD5850028-0002-0C1D-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD5850028-0002-0C1D-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD5850028-0002-0C1D-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD5850028-0002-0C1D-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD5850028-0002-0C1D-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD5870042-0001-0C86-04D99ABAFA93.cls_temp
/data/data/####/5C6BD5870042-0001-0C86-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD5870042-0001-0C86-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD5870042-0001-0C86-04D99ABAFA93SessionCrash.cls_temp
/data/data/####/5C6BD5870042-0001-0C86-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD5870042-0001-0C86-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD5870042-0001-0C86-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD58801D0-0002-0C86-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD58801D0-0002-0C86-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD58801D0-0002-0C86-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD58801D0-0002-0C86-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD58801D0-0002-0C86-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD58A02EA-0001-0CF8-04D99ABAFA93.cls_temp
/data/data/####/5C6BD58A02EA-0001-0CF8-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD58A02EA-0001-0CF8-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD58A02EA-0001-0CF8-04D99ABAFA93SessionCrash.cls_temp
/data/data/####/5C6BD58A02EA-0001-0CF8-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD58A02EA-0001-0CF8-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD58A02EA-0001-0CF8-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD58B01E5-0002-0CF8-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD58B01E5-0002-0CF8-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD58B01E5-0002-0CF8-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD58B01E5-0002-0CF8-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD58B01E5-0002-0CF8-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD58E0385-0001-0D60-04D99ABAFA93.cls_temp
/data/data/####/5C6BD58E0385-0001-0D60-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD58E0385-0001-0D60-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD58E0385-0001-0D60-04D99ABAFA93SessionCrash.cls_temp
/data/data/####/5C6BD58E0385-0001-0D60-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD58E0385-0001-0D60-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD58E0385-0001-0D60-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD58F02FF-0002-0D60-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD58F02FF-0002-0D60-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD58F02FF-0002-0D60-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD58F02FF-0002-0D60-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD592032F-0001-0DCA-04D99ABAFA93.cls_temp
/data/data/####/5C6BD592032F-0001-0DCA-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD592032F-0001-0DCA-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD592032F-0001-0DCA-04D99ABAFA93SessionCrash.cls_temp
/data/data/####/5C6BD592032F-0001-0DCA-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD592032F-0001-0DCA-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD592032F-0001-0DCA-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD5930121-0002-0DCA-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD5930121-0002-0DCA-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD5930121-0002-0DCA-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD5930121-0002-0DCA-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD5930121-0002-0DCA-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD59602F8-0001-0E32-04D99ABAFA93.cls_temp
/data/data/####/5C6BD59602F8-0001-0E32-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD59602F8-0001-0E32-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD59602F8-0001-0E32-04D99ABAFA93SessionCrash.cls_temp
/data/data/####/5C6BD59602F8-0001-0E32-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD59602F8-0001-0E32-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD59602F8-0001-0E32-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD59803A7-0002-0E32-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD59803A7-0002-0E32-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD59803A7-0002-0E32-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD59803A7-0002-0E32-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD59803A7-0002-0E32-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD59C0150-0001-0EAF-04D99ABAFA93.cls_temp
/data/data/####/5C6BD59C0150-0001-0EAF-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD59C0150-0001-0EAF-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD59C0150-0001-0EAF-04D99ABAFA93SessionCrash.cls_temp
/data/data/####/5C6BD59C0150-0001-0EAF-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD59C0150-0001-0EAF-04D99ABAFA93SessionOS.cls_temp
/data/data/####/5C6BD59C0150-0001-0EAF-04D99ABAFA93SessionUser.cls_temp
/data/data/####/5C6BD59E0147-0002-0EAF-04D99ABAFA93BeginSession.cls_temp
/data/data/####/5C6BD59E0147-0002-0EAF-04D99ABAFA93SessionApp.cls_temp
/data/data/####/5C6BD59E0147-0002-0EAF-04D99ABAFA93SessionDevice.cls_temp
/data/data/####/5C6BD59E0147-0002-0EAF-04D99ABAFA93SessionOS.cls_temp
/data/data/####/Mediation_Shared_Preferences.xml
/data/data/####/MultiDex.lock
/data/data/####/TwitterAdvertisingInfoPreferences.xml
/data/data/####/UnityAdsStorage-private-data.json
/data/data/####/UnityAdsStorage-public-data.json
/data/data/####/UnityAdsTest.txt
/data/data/####/UnityAdsWebApp.html
/data/data/####/WlGAMJqia
/data/data/####/botjump.dat.jar
/data/data/####/com.crashlytics.prefs.xml
/data/data/####/com.crashlytics.sdk.android;answers;settings.xml
/data/data/####/com.crashlytics.settings.json
/data/data/####/com.facebook.internal.preferences.APP_SETTINGS.xml
/data/data/####/com.facebook.sdk.appEventPreferences.xml
/data/data/####/com.facebook.sdk.attributionTracking.xml
/data/data/####/com.randomlogicgames.botjump_preferences.xml
/data/data/####/crash_marker
/data/data/####/data_0
/data/data/####/data_1
/data/data/####/data_2
/data/data/####/data_3
/data/data/####/events2-journal
/data/data/####/f_000001
/data/data/####/fiverocks.xml
/data/data/####/index
/data/data/####/initialization_marker
/data/data/####/io.fabric.sdk.android;fabric;io.fabric.sdk.andr...ng.xml
/data/data/####/ko.dt.pt.xml
/data/data/####/ko.dt.xml
/data/data/####/ko.dt.xml.bak
/data/data/####/mopubSettings.xml
/data/data/####/multidex.version.xml
/data/data/####/sa_1d87243d-18ef-49a7-b3ce-80f4ef718cbc_1550570887104.tap
/data/data/####/sa_377729bd-f1ab-48af-a7b7-cf07b77b466b_1550570880705.tap
/data/data/####/sa_3cddbbf1-7372-4f3f-8fa0-2210122860bf_1550570899208.tap
/data/data/####/sa_3ebebbe2-bcd1-477f-8cc7-cf120a4e99e5_1550570855991.tap
/data/data/####/sa_6bb02f92-a57d-4d9d-8d11-1151932e795c_1550570884765.tap
/data/data/####/sa_7d5d5326-b3c2-41c2-944e-6a216ea5dc37_1550570895669.tap
/data/data/####/sa_8676c33b-22f2-4013-9e38-406c598f0300_1550570871406.tap
/data/data/####/sa_98e74025-50a0-40f1-96ee-8ca324f8e07c_1550570854776.tap
/data/data/####/sa_bfe80692-3d5c-4c37-9f96-dec719f366ae_1550570864039.tap
/data/data/####/sa_c8d00c7f-9313-4fa7-846b-014cab6f616f_1550570891138.tap
/data/data/####/sa_d983f7a4-2681-4bd3-b0a6-1086787bef08_1550570908765.tap
/data/data/####/session_analytics.tap
/data/data/####/session_analytics.tap.tmp
/data/data/####/supersonic_sdk.db
/data/data/####/supersonic_sdk.db-journal
/data/data/####/supersonic_shared_preferen.xml
/data/data/####/tmp-com.randomlogicgames.botjump-1.apk.classes1...42.zip
/data/data/####/tmp-com.randomlogicgames.botjump-1.apk.classes89146403.zip
/data/data/####/webview.db-journal
/data/data/####/webviewCookiesChromium.db-journal
/data/media/####/tmp_mobileController.html

Miscellaneous:

Loads the following dynamic libraries:

WlGAMJqia
cocos2dcpp

Gets information about location.

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Displays its own windows over windows of other apps.

Technologies

Terminology

Training and education

Myths

Technical information

Curing recommendations

Free trial