Android.SmsSend.17208

Техническая информация

Вредоносные функции:

Отправляет СМС-сообщения:

+919222208888: ACTA xhLCXFgrKQ5lwm%2BE%2F3EXIA%3D%3D

Изменения в файловой системе:

Создает следующие файлы:

/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A4EA00A8-0001-0827-439D23AE119DBeginSession.cls_temp
/data/data/####/files/wl.log.0.lck
/data/data/####/shared_prefs/com.worklight.common.Logger.xml
/data/data/####/app_database/file__0/0000000000000001.db-journal
/data/data/####/shared_prefs/TwitterAdvertisingInfoPreferences.xml
/data/data/####/app_database/GeolocationPermissions.db-journal
/data/data/####/shared_prefs/com.google.android.gcm.xml
/data/data/####/shared_prefs/com.crashlytics.prefs.xml
/data/data/####/databases/google_analytics_v2.db-journal
/data/data/####/databases/webviewCookiesChromium.db-journal
/data/data/####/shared_prefs/com.example.app.xml
/data/data/####/databases/contactsManager
/data/data/####/app_database/CachedGeoposition.db
/data/data/####/app_database/CachedGeoposition.db-journal
/data/data/####/app___WL_EVENTS/00bb9ff8-4f8b-46a1-940f-1474773969c6/.filelock
/data/data/####/app_database/ApplicationCache.db-journal
/data/data/####/shared_prefs/CookiePrefsFile.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A4EA00A8-0001-0827-439D23AE119DSessionDevice.cls_temp
/data/data/####/shared_prefs/com.xtify.WakefulIntentService.xml
/data/data/####/databases/contactsManager-journal
/data/data/####/files/analytics.log.0.lck
/data/data/####/files/.keystore
/data/data/####/files/runningAlarmList
/data/data/####/app_database/localstorage/file__0.localstorage-journal
/data/data/####/shared_prefs/register_prefrence.xml
/data/data/####/files/analytics.log.0
/data/data/####/shared_prefs/XTIFY_SDK_DATA.xml.bak
/data/data/####/shared_prefs/CookiePrefsFile.xml
/data/data/####/files/wl.log.0
/data/data/####/databases/webview.db-journal
/data/data/####/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml
/data/data/####/shared_prefs/XTIFY_SDK_DATA.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A4EA00A8-0001-0827-439D23AE119DSessionOS.cls_temp
/data/data/####/databases/data-journal
/data/data/####/files/gaClientId
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
/data/data/####/shared_prefs/WLPrefs.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
/data/data/####/app_database/Databases.db-journal
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
/data/data/####/databases/webviewCookiesChromiumPrivate.db-journal
/data/data/####/shared_prefs/appsflyer-data.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_3ec62c25-7bc7-4aab-8c68-2a5bc2ae5af7_1485415658531.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A4EA00A8-0001-0827-439D23AE119DSessionApp.cls_temp
/data/data/####/shared_prefs/appsflyer-data.xml
/data/data/####/shared_prefs/com.worklight.common.Logger.xml.bak