Android.SmsSend.17104

Техническая информация

Вредоносные функции:

Отправляет СМС-сообщения:

+919222208888: ACTA hs%2F3Htb0Olv1FdukXs7cfA%3D%3D

Изменения в файловой системе:

Создает следующие файлы:

/data/data/####/app___WL_EVENTS/37afd8e7-32f2-450a-9fb7-04208298e8d8/.filelock
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_bb958a78-ac17-4a46-bfa5-46af6496c001_1485418694459.tap
/data/data/####/files/.keystore
/data/data/####/shared_prefs/com.worklight.common.Logger.xml
/data/data/####/app_database/file__0/0000000000000001.db-journal
/data/data/####/shared_prefs/TwitterAdvertisingInfoPreferences.xml
/data/data/####/app_database/GeolocationPermissions.db-journal
/data/data/####/files/wl.log.0
/data/data/####/shared_prefs/com.crashlytics.prefs.xml
/data/data/####/databases/google_analytics_v2.db-journal
/data/data/####/databases/webviewCookiesChromium.db-journal
/data/data/####/shared_prefs/com.example.app.xml
/data/data/####/app_database/CachedGeoposition.db
/data/data/####/app_database/CachedGeoposition.db-journal
/data/data/####/app_database/ApplicationCache.db-journal
/data/data/####/shared_prefs/CookiePrefsFile.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889B0C40030-0001-0823-F6DACDA978C7SessionApp.cls_temp
/data/data/####/shared_prefs/com.xtify.WakefulIntentService.xml
/data/data/####/files/analytics.log.0.lck
/data/data/####/files/wl.log.0.lck
/data/data/####/files/runningAlarmList
/data/data/####/app_database/localstorage/file__0.localstorage-journal
/data/data/####/shared_prefs/register_prefrence.xml
/data/data/####/files/analytics.log.0
/data/data/####/shared_prefs/com.google.android.gcm.xml
/data/data/####/shared_prefs/io.fabric.sdk.android:fabric:a.a.a.a.n.xml
/data/data/####/shared_prefs/XTIFY_SDK_DATA.xml.bak
/data/data/####/shared_prefs/CookiePrefsFile.xml
/data/data/####/files/.Fabric/io.fabric.sdk.android:fabric/com.crashlytics.settings.json
/data/data/####/databases/webview.db-journal
/data/data/####/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml
/data/data/####/shared_prefs/XTIFY_SDK_DATA.xml
/data/data/####/shared_prefs/WLPrefs.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889B0C40030-0001-0823-F6DACDA978C7SessionOS.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_2f62e4e9-97a2-432d-afa5-01643af73129_1485418692363.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889B0C40030-0001-0823-F6DACDA978C7BeginSession.cls_temp
/data/data/####/databases/data-journal
/data/data/####/files/gaClientId
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
/data/data/####/shared_prefs/WLPrefs.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
/data/data/####/app_database/Databases.db-journal
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
/data/data/####/databases/webviewCookiesChromiumPrivate.db-journal
/data/data/####/shared_prefs/appsflyer-data.xml.bak
/data/data/####/shared_prefs/appsflyer-data.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889B0C40030-0001-0823-F6DACDA978C7SessionDevice.cls_temp
/data/data/####/shared_prefs/com.worklight.common.Logger.xml.bak