Android.SmsSend.16765

Техническая информация

Вредоносные функции:

Отправляет СМС-сообщения:

+919222208888: ACTA tlxSTeTq0DHOPaU5Z0ngVg%3D%3D

Изменения в файловой системе:

Создает следующие файлы:

/data/data/####/app___WL_EVENTS/df5ab282-1f9b-4e6b-bd53-84a78a4e0ad0/.filelock
/data/data/####/files/.keystore
/data/data/####/shared_prefs/com.worklight.common.Logger.xml
/data/data/####/app_database/file__0/0000000000000001.db-journal
/data/data/####/shared_prefs/TwitterAdvertisingInfoPreferences.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A5DD014E-0001-0827-1CD503B752BESessionApp.cls_temp
/data/data/####/files/wl.log.0
/data/data/####/shared_prefs/com.crashlytics.prefs.xml
/data/data/####/shared_prefs/io.fabric.sdk.android:fabric:a.a.a.a.o.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A5DD014E-0001-0827-1CD503B752BESessionDevice.cls_temp
/data/data/####/databases/webviewCookiesChromium.db-journal
/data/data/####/shared_prefs/com.example.app.xml
/data/data/####/databases/contactsManager
/data/data/####/app_database/CachedGeoposition.db
/data/data/####/app_database/CachedGeoposition.db-journal
/data/data/####/files/analytics.log.0
/data/data/####/app_database/ApplicationCache.db-journal
/data/data/####/shared_prefs/CookiePrefsFile.xml.bak
/data/data/####/shared_prefs/com.xtify.WakefulIntentService.xml
/data/data/####/databases/contactsManager-journal
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A5DD014E-0001-0827-1CD503B752BEBeginSession.cls_temp
/data/data/####/files/analytics.log.0.lck
/data/data/####/files/wl.log.0.lck
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_9f3bd42c-8196-4ece-a93c-c7d9331eb76b_1485415901628.tap
/data/data/####/app_database/localstorage/file__0.localstorage-journal
/data/data/####/shared_prefs/register_prefrence.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A5DD014E-0001-0827-1CD503B752BESessionOS.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_d8e5c626-ef8a-4281-b916-9110b7177835_1485415904083.tap
/data/data/####/shared_prefs/com.google.android.gcm.xml
/data/data/####/app_database/GeolocationPermissions.db-journal
/data/data/####/shared_prefs/XTIFY_SDK_DATA.xml.bak
/data/data/####/shared_prefs/CookiePrefsFile.xml
/data/data/####/files/.Fabric/io.fabric.sdk.android:fabric/com.crashlytics.settings.json
/data/data/####/databases/webview.db-journal
/data/data/####/databases/google_analytics_v2.db-journal
/data/data/####/shared_prefs/XTIFY_SDK_DATA.xml
/data/data/####/shared_prefs/WLPrefs.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
/data/data/####/databases/data-journal
/data/data/####/files/gaClientId
/data/data/####/shared_prefs/WLPrefs.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
/data/data/####/app_database/Databases.db-journal
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
/data/data/####/databases/webviewCookiesChromiumPrivate.db-journal
/data/data/####/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml
/data/data/####/shared_prefs/appsflyer-data.xml.bak
/data/data/####/shared_prefs/appsflyer-data.xml
/data/data/####/files/runningAlarmList
/data/data/####/shared_prefs/com.worklight.common.Logger.xml.bak