Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.1.origin
Загружает из Интернета следующие детектируемые угрозы:
- Android.MobiDash.1.origin
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/app_app_apk/style.dat.jar
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-1091101894.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes968413442.zip
- <Package Folder>/files/####/592E6EDC0161-0001-082F-5FA0AB57E3BBBeginSession.cls_temp
- <Package Folder>/files/####/592E6EDC0161-0001-082F-5FA0AB57E3BBSessionApp.cls_temp
- <Package Folder>/files/####/592E6EDC0161-0001-082F-5FA0AB57E3BBSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EDC0161-0001-082F-5FA0AB57E3BBSessionOS.cls_temp
- <Package Folder>/files/####/592E6EDD0110-0001-0851-5FA0AB57E3BBBeginSession.cls_temp
- <Package Folder>/files/####/592E6EDD0110-0001-0851-5FA0AB57E3BBSessionApp.cls_temp
- <Package Folder>/files/####/592E6EDD0110-0001-0851-5FA0AB57E3BBSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EDD0110-0001-0851-5FA0AB57E3BBSessionOS.cls_temp
- <Package Folder>/files/####/592E6EDE0056-0001-086F-5FA0AB57E3BBBeginSession.cls_temp
- <Package Folder>/files/####/592E6EDE0056-0001-086F-5FA0AB57E3BBSessionApp.cls_temp
- <Package Folder>/files/####/592E6EDE0056-0001-086F-5FA0AB57E3BBSessionOS.cls_temp
- <Package Folder>/files/####/592E6EE400AA-0001-088F-5FA0AB57E3BBBeginSession.cls_temp
- <Package Folder>/files/####/592E6EE400AA-0001-088F-5FA0AB57E3BBSessionApp.cls_temp
- <Package Folder>/files/####/592E6EE400AA-0001-088F-5FA0AB57E3BBSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EE400AA-0001-088F-5FA0AB57E3BBSessionOS.cls_temp
- <Package Folder>/files/####/592E6EEA00DF-0001-08B5-5FA0AB57E3BBBeginSession.cls_temp
- <Package Folder>/files/####/592E6EEA00DF-0001-08B5-5FA0AB57E3BBSessionApp.cls_temp
- <Package Folder>/files/####/592E6EEA00DF-0001-08B5-5FA0AB57E3BBSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EEA00DF-0001-08B5-5FA0AB57E3BBSessionOS.cls_temp
- <Package Folder>/files/####/592E6EF00214-0001-08D9-5FA0AB57E3BBBeginSession.cls_temp
- <Package Folder>/files/####/592E6EF00214-0001-08D9-5FA0AB57E3BBSessionApp.cls_temp
- <Package Folder>/files/####/592E6EF00214-0001-08D9-5FA0AB57E3BBSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EF00214-0001-08D9-5FA0AB57E3BBSessionOS.cls_temp
- <Package Folder>/files/####/592E6EF60300-0001-090A-5FA0AB57E3BBBeginSession.cls_temp
- <Package Folder>/files/####/592E6EF60300-0001-090A-5FA0AB57E3BBSessionApp.cls_temp
- <Package Folder>/files/####/592E6EF60300-0001-090A-5FA0AB57E3BBSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EF60300-0001-090A-5FA0AB57E3BBSessionOS.cls_temp
- <Package Folder>/files/####/592E6EF90341-0001-092C-5FA0AB57E3BBBeginSession.cls_temp
- <Package Folder>/files/####/592E6EF90341-0001-092C-5FA0AB57E3BBSessionApp.cls_temp
- <Package Folder>/files/####/592E6EF90341-0001-092C-5FA0AB57E3BBSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EF90341-0001-092C-5FA0AB57E3BBSessionOS.cls_temp
- <Package Folder>/files/####/592E6EFA021F-0001-094B-5FA0AB57E3BBBeginSession.cls_temp
- <Package Folder>/files/####/592E6EFA021F-0001-094B-5FA0AB57E3BBSessionApp.cls_temp
- <Package Folder>/files/####/592E6EFA021F-0001-094B-5FA0AB57E3BBSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EFA021F-0001-094B-5FA0AB57E3BBSessionOS.cls_temp
- <Package Folder>/files/####/592E6F00034B-0001-098D-5FA0AB57E3BBBeginSession.cls_temp
- <Package Folder>/files/####/592E6F00034B-0001-098D-5FA0AB57E3BBSessionApp.cls_temp
- <Package Folder>/files/####/592E6F00034B-0001-098D-5FA0AB57E3BBSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F00034B-0001-098D-5FA0AB57E3BBSessionOS.cls_temp
- <Package Folder>/files/####/592E6F0602DD-0001-09B7-5FA0AB57E3BBBeginSession.cls_temp
- <Package Folder>/files/####/592E6F0602DD-0001-09B7-5FA0AB57E3BBSessionApp.cls_temp
- <Package Folder>/files/####/592E6F0602DD-0001-09B7-5FA0AB57E3BBSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F0602DD-0001-09B7-5FA0AB57E3BBSessionOS.cls_temp
- <Package Folder>/files/####/592E6F0C0366-0001-09ED-5FA0AB57E3BBBeginSession.cls_temp
- <Package Folder>/files/####/592E6F0C0366-0001-09ED-5FA0AB57E3BBSessionApp.cls_temp
- <Package Folder>/files/####/592E6F0C0366-0001-09ED-5FA0AB57E3BBSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F0C0366-0001-09ED-5FA0AB57E3BBSessionOS.cls_temp
- <Package Folder>/files/####/592E6F1003DF-0001-0A0F-5FA0AB57E3BBBeginSession.cls_temp
- <Package Folder>/files/####/592E6F1003DF-0001-0A0F-5FA0AB57E3BBSessionApp.cls_temp
- <Package Folder>/files/####/592E6F1003DF-0001-0A0F-5FA0AB57E3BBSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F1003DF-0001-0A0F-5FA0AB57E3BBSessionOS.cls_temp
- <Package Folder>/files/####/592E6F170337-0001-0AA9-5FA0AB57E3BBBeginSession.cls_temp
- <Package Folder>/files/####/592E6F170337-0001-0AA9-5FA0AB57E3BBSessionApp.cls_temp
- <Package Folder>/files/####/592E6F170337-0001-0AA9-5FA0AB57E3BBSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F170337-0001-0AA9-5FA0AB57E3BBSessionOS.cls_temp
- <Package Folder>/files/####/592E6F1E00E3-0001-0AE1-5FA0AB57E3BBBeginSession.cls_temp
- <Package Folder>/files/####/592E6F1E00E3-0001-0AE1-5FA0AB57E3BBSessionApp.cls_temp
- <Package Folder>/files/####/592E6F1E00E3-0001-0AE1-5FA0AB57E3BBSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F1E00E3-0001-0AE1-5FA0AB57E3BBSessionOS.cls_temp
- <Package Folder>/files/####/sa_e098c61c-594f-4e74-ab79-b0d0ecc893d9_1496215260389.tap
- <Package Folder>/files/####/session_analytics.tap
- <Package Folder>/files/####/session_analytics.tap.tmp
- <Package Folder>/files/oqPxrQbzm
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
- <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
- <Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
- <Package Folder>/shared_prefs/multidex.version.xml
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
