Android.Packed.22000

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.MobiDash.1.origin

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/shared_prefs/com.crashlytics.prefs.xml
<Package Folder>/shared_prefs/appsflyer-data.xml.bak
<Package Folder>/app_app_apk/mybook.dat.jar
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/591C25A1002C-0001-0840-F5A5A084400ASessionDevice.cls_temp
<Package Folder>/databases/mybook-journal
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/files/.yflurrydatasenderblock.a36c368f-a54b-4830-a6e8-3e22283c53d5
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android;answers/session_analytics.tap.tmp
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/log-files/crashlytics-userlog-591C25A1002C-0001-0840-F5A5A084400A.temp.tmp
<Package Folder>/files/.YFlurrySenderIndex.info.AnalyticsData_GJX22VS6538289MV53VD_229
<Package Folder>/shared_prefs/mybook_sync.xml
<Package Folder>/files/file
<Package Folder>/shared_prefs/appsflyer-data.xml
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/591C25A1002C-0001-0840-F5A5A084400ABeginSession.cls_temp
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android;answers/session_analytics_to_send/sa_2c6b54df-8f28-4835-9f2a-cdc19dc8555e_1495016865142.tap
<Package Folder>/shared_prefs/device_id.xml.xml
<Package Folder>/shared_prefs/io.fabric.sdk.android;fabric;io.fabric.sdk.android.Onboarding.xml
<Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
<Package Folder>/files/.YFlurrySenderIndex.info.AnalyticsMain
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/591C25A1002C-0001-0840-F5A5A084400ASessionApp.cls_temp
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android;answers/session_analytics_to_send/sa_4e4a202e-9850-43b0-a1ab-6c8bf022499b_1495016865912.tap
<Package Folder>/files/.yflurryreport.-53d2f1b5d7691b29
<Package Folder>/code_cache/secondary-dexes/tmp-<Package>-1.apk.classes-459794913.zip
<Package Folder>/files/.Fabric/io.fabric.sdk.android;fabric/com.crashlytics.settings.json
<Package Folder>/shared_prefs/FLURRY_SHARED_PREFERENCES.xml
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android;answers/session_analytics.tap
<Package Folder>/code_cache/secondary-dexes/MultiDex.lock
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/code_cache/secondary-dexes/tmp-<Package>-1.apk.classes-298564628.zip
<Package Folder>/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/591C25A1002C-0001-0840-F5A5A084400ASessionOS.cls_temp
<Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
<Package Folder>/shared_prefs/multidex.version.xml