Android.Packed.21820

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.MobiDash.1.origin

Сетевая активность:

Подключается к:

e####.####.com

Запросы HTTP GET:

e####.####.com/livemedia/themes/config.json

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/code_cache/secondary-dexes/tmp-<Package>-1.apk.classes1361224608.zip
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/591C263703C6-0002-083C-B37CBAD50307BeginSession.cls_temp
<Package Folder>/code_cache/secondary-dexes/tmp-<Package>-1.apk.classes705708267.zip
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/591C26360025-0001-083C-B37CBAD50307SessionUser.cls_temp
<Package Folder>/shared_prefs/com.crashlytics.prefs.xml
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/591C263703C6-0002-083C-B37CBAD50307SessionApp.cls_temp
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android;answers/session_analytics_to_send/sa_0d59f0b7-7208-4f24-995c-f43746401402_1495017014237.tap
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/crash_marker
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/591C26360025-0001-083C-B37CBAD50307BeginSession.cls_temp
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android;answers/session_analytics.tap.tmp
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android;answers/session_analytics_to_send/sa_c88cf55d-d673-429c-812e-f93e18b91655_1495017015053.tap
<Package Folder>/app_app_apk/player.dat.jar
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/591C26360025-0001-083C-B37CBAD50307SessionApp.cls_temp
<Package Folder>/files/file
<Package Folder>/shared_prefs/SHARE_PREFERENCE_FILEThemeManager.xml
<Package Folder>/shared_prefs/multidex.version.xml
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/591C263703C6-0002-083C-B37CBAD50307SessionOS.cls_temp
<Package Folder>/shared_prefs/io.fabric.sdk.android;fabric;io.fabric.sdk.android.Onboarding.xml
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/591C26360025-0001-083C-B37CBAD50307SessionDevice.cls_temp
<Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/591C26360025-0001-083C-B37CBAD50307.cls_temp
<Package Folder>/files/.Fabric/io.fabric.sdk.android;fabric/com.crashlytics.settings.json
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/591C26360025-0001-083C-B37CBAD50307SessionCrash.cls_temp
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android;answers/session_analytics.tap
<Package Folder>/code_cache/secondary-dexes/MultiDex.lock
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/591C263703C6-0002-083C-B37CBAD50307SessionDevice.cls_temp
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/591C26360025-0001-083C-B37CBAD50307SessionOS.cls_temp
<Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak