Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.1.origin
Загружает из Интернета следующие детектируемые угрозы:
- Android.MobiDash.1.origin
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/app_app_apk/principessa.dat.jar
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-1314855544.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-1545453154.zip
- <Package Folder>/files/####/592E6EF6027F-0001-0830-56C6CE55BF04BeginSession.cls_temp
- <Package Folder>/files/####/592E6EF6027F-0001-0830-56C6CE55BF04SessionApp.cls_temp
- <Package Folder>/files/####/592E6EF6027F-0001-0830-56C6CE55BF04SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EF6027F-0001-0830-56C6CE55BF04SessionOS.cls_temp
- <Package Folder>/files/####/592E6EF7021B-0001-0853-56C6CE55BF04BeginSession.cls_temp
- <Package Folder>/files/####/592E6EF7021B-0001-0853-56C6CE55BF04SessionApp.cls_temp
- <Package Folder>/files/####/592E6EF7021B-0001-0853-56C6CE55BF04SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EF7021B-0001-0853-56C6CE55BF04SessionOS.cls_temp
- <Package Folder>/files/####/592E6EF80165-0001-0871-56C6CE55BF04BeginSession.cls_temp
- <Package Folder>/files/####/592E6EF80165-0001-0871-56C6CE55BF04SessionApp.cls_temp
- <Package Folder>/files/####/592E6EFE00C7-0001-08A1-56C6CE55BF04BeginSession.cls_temp
- <Package Folder>/files/####/592E6EFE00C7-0001-08A1-56C6CE55BF04SessionApp.cls_temp
- <Package Folder>/files/####/592E6EFE00C7-0001-08A1-56C6CE55BF04SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EFE00C7-0001-08A1-56C6CE55BF04SessionOS.cls_temp
- <Package Folder>/files/####/592E6F040086-0001-08C2-56C6CE55BF04BeginSession.cls_temp
- <Package Folder>/files/####/592E6F040086-0001-08C2-56C6CE55BF04SessionApp.cls_temp
- <Package Folder>/files/####/592E6F040086-0001-08C2-56C6CE55BF04SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F040086-0001-08C2-56C6CE55BF04SessionOS.cls_temp
- <Package Folder>/files/####/592E6F0A0066-0001-08E3-56C6CE55BF04BeginSession.cls_temp
- <Package Folder>/files/####/592E6F0A0066-0001-08E3-56C6CE55BF04SessionApp.cls_temp
- <Package Folder>/files/####/592E6F0A0066-0001-08E3-56C6CE55BF04SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F0A0066-0001-08E3-56C6CE55BF04SessionOS.cls_temp
- <Package Folder>/files/####/592E6F0D038F-0001-091C-56C6CE55BF04BeginSession.cls_temp
- <Package Folder>/files/####/592E6F0D038F-0001-091C-56C6CE55BF04SessionApp.cls_temp
- <Package Folder>/files/####/592E6F0D038F-0001-091C-56C6CE55BF04SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F0D038F-0001-091C-56C6CE55BF04SessionOS.cls_temp
- <Package Folder>/files/####/592E6F0E02FB-0001-093B-56C6CE55BF04BeginSession.cls_temp
- <Package Folder>/files/####/592E6F0E02FB-0001-093B-56C6CE55BF04SessionApp.cls_temp
- <Package Folder>/files/####/592E6F0E02FB-0001-093B-56C6CE55BF04SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F0E02FB-0001-093B-56C6CE55BF04SessionOS.cls_temp
- <Package Folder>/files/####/592E6F0F0241-0001-095A-56C6CE55BF04BeginSession.cls_temp
- <Package Folder>/files/####/592E6F0F0241-0001-095A-56C6CE55BF04SessionApp.cls_temp
- <Package Folder>/files/####/592E6F0F0241-0001-095A-56C6CE55BF04SessionOS.cls_temp
- <Package Folder>/files/####/592E6F15004D-0001-097D-56C6CE55BF04BeginSession.cls_temp
- <Package Folder>/files/####/592E6F15004D-0001-097D-56C6CE55BF04SessionApp.cls_temp
- <Package Folder>/files/####/592E6F15004D-0001-097D-56C6CE55BF04SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F15004D-0001-097D-56C6CE55BF04SessionOS.cls_temp
- <Package Folder>/files/####/592E6F1A03CF-0001-09AC-56C6CE55BF04BeginSession.cls_temp
- <Package Folder>/files/####/592E6F1A03CF-0001-09AC-56C6CE55BF04SessionApp.cls_temp
- <Package Folder>/files/####/592E6F1A03CF-0001-09AC-56C6CE55BF04SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F1A03CF-0001-09AC-56C6CE55BF04SessionOS.cls_temp
- <Package Folder>/files/####/592E6F21012F-0001-09EE-56C6CE55BF04BeginSession.cls_temp
- <Package Folder>/files/####/592E6F21012F-0001-09EE-56C6CE55BF04SessionApp.cls_temp
- <Package Folder>/files/####/592E6F21012F-0001-09EE-56C6CE55BF04SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F21012F-0001-09EE-56C6CE55BF04SessionOS.cls_temp
- <Package Folder>/files/####/592E6F270159-0001-0A18-56C6CE55BF04BeginSession.cls_temp
- <Package Folder>/files/####/592E6F270159-0001-0A18-56C6CE55BF04SessionApp.cls_temp
- <Package Folder>/files/####/592E6F270159-0001-0A18-56C6CE55BF04SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F270159-0001-0A18-56C6CE55BF04SessionOS.cls_temp
- <Package Folder>/files/####/592E6F2B0182-0001-0A37-56C6CE55BF04BeginSession.cls_temp
- <Package Folder>/files/####/592E6F2B0182-0001-0A37-56C6CE55BF04SessionApp.cls_temp
- <Package Folder>/files/####/592E6F2B0182-0001-0A37-56C6CE55BF04SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F2B0182-0001-0A37-56C6CE55BF04SessionOS.cls_temp
- <Package Folder>/files/####/592E6F320229-0001-0ABB-56C6CE55BF04BeginSession.cls_temp
- <Package Folder>/files/####/592E6F320229-0001-0ABB-56C6CE55BF04SessionApp.cls_temp
- <Package Folder>/files/####/592E6F320229-0001-0ABB-56C6CE55BF04SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F320229-0001-0ABB-56C6CE55BF04SessionOS.cls_temp
- <Package Folder>/files/####/592E6F38035E-0001-0AF4-56C6CE55BF04BeginSession.cls_temp
- <Package Folder>/files/####/592E6F38035E-0001-0AF4-56C6CE55BF04SessionApp.cls_temp
- <Package Folder>/files/####/592E6F38035E-0001-0AF4-56C6CE55BF04SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F38035E-0001-0AF4-56C6CE55BF04SessionOS.cls_temp
- <Package Folder>/files/####/sa_6efecf1a-e6d2-402e-abfe-357fc90bf463_1496215286662.tap
- <Package Folder>/files/####/session_analytics.tap
- <Package Folder>/files/####/session_analytics.tap.tmp
- <Package Folder>/files/nvHRlXxCh
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
- <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
- <Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
- <Package Folder>/shared_prefs/multidex.version.xml
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
