Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.1.origin
Загружает из Интернета следующие детектируемые угрозы:
- Android.MobiDash.1.origin
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/app_app_apk/playing.dat.jar
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-964720365.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes1987038537.zip
- <Package Folder>/files/####/592E6EE7000F-0001-082B-02B5B7977D4CBeginSession.cls_temp
- <Package Folder>/files/####/592E6EE7000F-0001-082B-02B5B7977D4CSessionApp.cls_temp
- <Package Folder>/files/####/592E6EE7000F-0001-082B-02B5B7977D4CSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EE7000F-0001-082B-02B5B7977D4CSessionOS.cls_temp
- <Package Folder>/files/####/592E6EE7034E-0001-084E-02B5B7977D4CBeginSession.cls_temp
- <Package Folder>/files/####/592E6EE7034E-0001-084E-02B5B7977D4CSessionApp.cls_temp
- <Package Folder>/files/####/592E6EE7034E-0001-084E-02B5B7977D4CSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EE7034E-0001-084E-02B5B7977D4CSessionOS.cls_temp
- <Package Folder>/files/####/592E6EE80250-0001-086C-02B5B7977D4CBeginSession.cls_temp
- <Package Folder>/files/####/592E6EE80250-0001-086C-02B5B7977D4CSessionApp.cls_temp
- <Package Folder>/files/####/592E6EE80250-0001-086C-02B5B7977D4CSessionOS.cls_temp
- <Package Folder>/files/####/592E6EF10333-0001-08F1-02B5B7977D4CBeginSession.cls_temp
- <Package Folder>/files/####/592E6EF10333-0001-08F1-02B5B7977D4CSessionApp.cls_temp
- <Package Folder>/files/####/592E6EF10333-0001-08F1-02B5B7977D4CSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EF10333-0001-08F1-02B5B7977D4CSessionOS.cls_temp
- <Package Folder>/files/####/592E6EF800A8-0001-0937-02B5B7977D4CBeginSession.cls_temp
- <Package Folder>/files/####/592E6EF800A8-0001-0937-02B5B7977D4CSessionApp.cls_temp
- <Package Folder>/files/####/592E6EF800A8-0001-0937-02B5B7977D4CSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EF800A8-0001-0937-02B5B7977D4CSessionOS.cls_temp
- <Package Folder>/files/####/592E6EFE0082-0001-09A3-02B5B7977D4CBeginSession.cls_temp
- <Package Folder>/files/####/592E6EFE0082-0001-09A3-02B5B7977D4CSessionApp.cls_temp
- <Package Folder>/files/####/592E6EFE0082-0001-09A3-02B5B7977D4CSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EFE0082-0001-09A3-02B5B7977D4CSessionOS.cls_temp
- <Package Folder>/files/####/592E6F0400C7-0001-0A0A-02B5B7977D4CBeginSession.cls_temp
- <Package Folder>/files/####/592E6F0400C7-0001-0A0A-02B5B7977D4CSessionApp.cls_temp
- <Package Folder>/files/####/592E6F0400C7-0001-0A0A-02B5B7977D4CSessionOS.cls_temp
- <Package Folder>/files/####/592E6F0802DA-0001-0A49-02B5B7977D4CBeginSession.cls_temp
- <Package Folder>/files/####/592E6F0802DA-0001-0A49-02B5B7977D4CSessionApp.cls_temp
- <Package Folder>/files/####/592E6F0802DA-0001-0A49-02B5B7977D4CSessionOS.cls_temp
- <Package Folder>/files/####/592E6F09016C-0001-0A63-02B5B7977D4CBeginSession.cls_temp
- <Package Folder>/files/####/592E6F09016C-0001-0A63-02B5B7977D4CSessionApp.cls_temp
- <Package Folder>/files/####/592E6F09016C-0001-0A63-02B5B7977D4CSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F09016C-0001-0A63-02B5B7977D4CSessionOS.cls_temp
- <Package Folder>/files/####/592E6F0A0034-0001-0A98-02B5B7977D4CBeginSession.cls_temp
- <Package Folder>/files/####/592E6F0A0034-0001-0A98-02B5B7977D4CSessionApp.cls_temp
- <Package Folder>/files/####/592E6F0F039A-0001-0ADD-02B5B7977D4CBeginSession.cls_temp
- <Package Folder>/files/####/592E6F0F039A-0001-0ADD-02B5B7977D4CSessionApp.cls_temp
- <Package Folder>/files/####/592E6F0F039A-0001-0ADD-02B5B7977D4CSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F0F039A-0001-0ADD-02B5B7977D4CSessionOS.cls_temp
- <Package Folder>/files/####/592E6F1A0374-0001-0B67-02B5B7977D4CBeginSession.cls_temp
- <Package Folder>/files/####/592E6F1B0142-0001-0BA0-02B5B7977D4CBeginSession.cls_temp
- <Package Folder>/files/####/592E6F1B0142-0001-0BA0-02B5B7977D4CSessionApp.cls_temp
- <Package Folder>/files/####/sa_57517e19-9e39-400b-86b0-618ffec09730_1496215271045.tap
- <Package Folder>/files/####/session_analytics.tap
- <Package Folder>/files/####/session_analytics.tap.tmp
- <Package Folder>/files/ehWRTOAiO
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
- <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
- <Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
- <Package Folder>/shared_prefs/multidex.version.xml
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
