Android.Packed.22489

Добавлен в вирусную базу Dr.Web: 2017-05-31

Описание добавлено: 2017-05-31

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.MobiDash.1.origin

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/cache/webviewCacheChromium/f_000030
<Package Folder>/cache/webviewCacheChromium/f_000023
<Package Folder>/cache/webviewCacheChromium/f_000031
<Package Folder>/cache/webviewCacheChromium/f_000033
<Package Folder>/cache/webviewCacheChromium/f_000034
<Package Folder>/cache/webviewCacheChromium/f_000035
<Package Folder>/cache/webviewCacheChromium/f_000018
<Package Folder>/cache/webviewCacheChromium/f_000008
<Package Folder>/cache/webviewCacheChromium/f_000016
<Package Folder>/cache/webviewCacheChromium/f_000017
<Package Folder>/cache/webviewCacheChromium/f_000014
<Package Folder>/cache/webviewCacheChromium/f_000015
<Package Folder>/cache/webviewCacheChromium/f_000012
<Package Folder>/cache/webviewCacheChromium/f_000013
<Package Folder>/cache/webviewCacheChromium/f_000010
<Package Folder>/cache/webviewCacheChromium/f_000011
<Package Folder>/cache/webviewCacheChromium/f_00002c
<Package Folder>/cache/webviewCacheChromium/f_00002b
<Package Folder>/cache/webviewCacheChromium/f_00002a
<Package Folder>/files/file
<Package Folder>/cache/webviewCacheChromium/f_00002f
<Package Folder>/cache/webviewCacheChromium/f_00002e
<Package Folder>/cache/webviewCacheChromium/f_00002d
<Package Folder>/cache/webviewCacheChromium/f_00000a
<Package Folder>/cache/webviewCacheChromium/f_00000c
<Package Folder>/cache/webviewCacheChromium/f_00000b
<Package Folder>/cache/webviewCacheChromium/f_00000e
<Package Folder>/cache/webviewCacheChromium/f_00000d
<Package Folder>/cache/webviewCacheChromium/f_00000f
<Package Folder>/app_database/ApplicationCache.db-journal
<Package Folder>/cache/webviewCacheChromium/f_00001e
<Package Folder>/cache/webviewCacheChromium/f_000036
<Package Folder>/cache/webviewCacheChromium/f_00003e
<Package Folder>/code_cache/secondary-dexes/tmp-<Package>-1.apk.classes-964720365.zip
<Package Folder>/app_database/localstorage/https_a3698060313.cdn.optimizely.com_0.localstorage-journal
<Package Folder>/cache/webviewCacheChromium/f_000019
<Package Folder>/cache/webviewCacheChromium/f_000022
<Package Folder>/cache/webviewCacheChromium/f_000038
<Package Folder>/cache/webviewCacheChromium/f_000040
<Package Folder>/cache/webviewCacheChromium/f_000039
<Package Folder>/cache/webviewCacheChromium/f_000029
<Package Folder>/cache/webviewCacheChromium/f_000009
<Package Folder>/app_database/localstorage/https_www.youtube.com_0.localstorage-journal
<Package Folder>/cache/webviewCacheChromium/f_000021
<Package Folder>/cache/webviewCacheChromium/f_000020
<Package Folder>/cache/webviewCacheChromium/f_000027
<Package Folder>/cache/webviewCacheChromium/f_000026
<Package Folder>/cache/webviewCacheChromium/f_000025
<Package Folder>/cache/webviewCacheChromium/f_000024
<Package Folder>/cache/webviewCacheChromium/f_000001
<Package Folder>/cache/webviewCacheChromium/f_000003
<Package Folder>/cache/webviewCacheChromium/f_000002
<Package Folder>/cache/webviewCacheChromium/f_000005
<Package Folder>/cache/webviewCacheChromium/f_000004
<Package Folder>/app_database/localstorage/https_minecraft.net_0.localstorage-journal
<Package Folder>/app_app_apk/redasweytr.dat.jar
<Package Folder>/cache/webviewCacheChromium/f_00003a
<Package Folder>/cache/webviewCacheChromium/f_00003b
<Package Folder>/cache/webviewCacheChromium/f_00003c
<Package Folder>/cache/webviewCacheChromium/f_00003d
<Package Folder>/cache/webviewCacheChromium/f_000007
<Package Folder>/cache/webviewCacheChromium/f_00003f
<Package Folder>/cache/webviewCacheChromium/f_00001f
<Package Folder>/cache/webviewCacheChromium/f_00001d
<Package Folder>/cache/webviewCacheChromium/f_000006
<Package Folder>/cache/webviewCacheChromium/f_00001b
<Package Folder>/cache/webviewCacheChromium/f_00001c
<Package Folder>/app_database/localstorage/https_account.microsoft.com_0.localstorage-journal
<Package Folder>/cache/webviewCacheChromium/f_00001a
<Package Folder>/shared_prefs/multidex.version.xml
<Package Folder>/cache/webviewCacheChromium/f_000032
<Package Folder>/code_cache/secondary-dexes/MultiDex.lock
<Package Folder>/databases/webview.db-journal
<Package Folder>/cache/webviewCacheChromium/index
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/cache/webviewCacheChromium/f_000028
<Package Folder>/cache/webviewCacheChromium/f_000037
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/cache/webviewCacheChromium/data_3
<Package Folder>/cache/webviewCacheChromium/data_2
<Package Folder>/cache/webviewCacheChromium/data_1
<Package Folder>/cache/webviewCacheChromium/data_0

Другие:

Запускает следующие shell-скрипты:

<dexopt>

Использует права администратора.

Может автоматически отправлять СМС-сообщения.

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней