Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.1.origin
Загружает из Интернета следующие детектируемые угрозы:
- Android.MobiDash.1.origin
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/app_app_apk/fiasco.dat.jar
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-217599819.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes1268569584.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes752905994.zip
- <Package Folder>/files/####/592E6EF6029D-0001-082A-D9359802DBC4BeginSession.cls_temp
- <Package Folder>/files/####/592E6EF6029D-0001-082A-D9359802DBC4SessionApp.cls_temp
- <Package Folder>/files/####/592E6EF6029D-0001-082A-D9359802DBC4SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EF6029D-0001-082A-D9359802DBC4SessionOS.cls_temp
- <Package Folder>/files/####/592E6EF70257-0001-084F-D9359802DBC4BeginSession.cls_temp
- <Package Folder>/files/####/592E6EF70257-0001-084F-D9359802DBC4SessionApp.cls_temp
- <Package Folder>/files/####/592E6EF70257-0001-084F-D9359802DBC4SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EF70257-0001-084F-D9359802DBC4SessionOS.cls_temp
- <Package Folder>/files/####/592E6EF80233-0001-086D-D9359802DBC4BeginSession.cls_temp
- <Package Folder>/files/####/592E6EF80233-0001-086D-D9359802DBC4SessionApp.cls_temp
- <Package Folder>/files/####/592E6EF80233-0001-086D-D9359802DBC4SessionOS.cls_temp
- <Package Folder>/files/####/592E6EFE00F9-0001-0892-D9359802DBC4BeginSession.cls_temp
- <Package Folder>/files/####/592E6EFE00F9-0001-0892-D9359802DBC4SessionApp.cls_temp
- <Package Folder>/files/####/592E6EFE00F9-0001-0892-D9359802DBC4SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EFE00F9-0001-0892-D9359802DBC4SessionOS.cls_temp
- <Package Folder>/files/####/592E6F020142-0001-08B2-D9359802DBC4BeginSession.cls_temp
- <Package Folder>/files/####/592E6F020142-0001-08B2-D9359802DBC4SessionApp.cls_temp
- <Package Folder>/files/####/592E6F020142-0001-08B2-D9359802DBC4SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F020142-0001-08B2-D9359802DBC4SessionOS.cls_temp
- <Package Folder>/files/####/592E6F0901E4-0001-0909-D9359802DBC4BeginSession.cls_temp
- <Package Folder>/files/####/592E6F0901E4-0001-0909-D9359802DBC4SessionApp.cls_temp
- <Package Folder>/files/####/592E6F0901E4-0001-0909-D9359802DBC4SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F0901E4-0001-0909-D9359802DBC4SessionOS.cls_temp
- <Package Folder>/files/####/592E6F0F01CD-0001-092D-D9359802DBC4BeginSession.cls_temp
- <Package Folder>/files/####/592E6F0F01CD-0001-092D-D9359802DBC4SessionApp.cls_temp
- <Package Folder>/files/####/592E6F0F01CD-0001-092D-D9359802DBC4SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F0F01CD-0001-092D-D9359802DBC4SessionOS.cls_temp
- <Package Folder>/files/####/592E6F1502C5-0001-0965-D9359802DBC4BeginSession.cls_temp
- <Package Folder>/files/####/592E6F1502C5-0001-0965-D9359802DBC4SessionApp.cls_temp
- <Package Folder>/files/####/592E6F1502C5-0001-0965-D9359802DBC4SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F1502C5-0001-0965-D9359802DBC4SessionOS.cls_temp
- <Package Folder>/files/####/592E6F1C0004-0001-0988-D9359802DBC4BeginSession.cls_temp
- <Package Folder>/files/####/592E6F1C0004-0001-0988-D9359802DBC4SessionApp.cls_temp
- <Package Folder>/files/####/592E6F1C0004-0001-0988-D9359802DBC4SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F1C0004-0001-0988-D9359802DBC4SessionOS.cls_temp
- <Package Folder>/files/####/592E6F2103D0-0001-09AD-D9359802DBC4BeginSession.cls_temp
- <Package Folder>/files/####/592E6F2103D0-0001-09AD-D9359802DBC4SessionApp.cls_temp
- <Package Folder>/files/####/592E6F2103D0-0001-09AD-D9359802DBC4SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F2103D0-0001-09AD-D9359802DBC4SessionOS.cls_temp
- <Package Folder>/files/####/592E6F2703C0-0001-09CE-D9359802DBC4BeginSession.cls_temp
- <Package Folder>/files/####/592E6F2703C0-0001-09CE-D9359802DBC4SessionApp.cls_temp
- <Package Folder>/files/####/592E6F2703C0-0001-09CE-D9359802DBC4SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F2703C0-0001-09CE-D9359802DBC4SessionOS.cls_temp
- <Package Folder>/files/####/592E6F2E0155-0001-09F4-D9359802DBC4BeginSession.cls_temp
- <Package Folder>/files/####/592E6F2E0155-0001-09F4-D9359802DBC4SessionApp.cls_temp
- <Package Folder>/files/####/592E6F2E0155-0001-09F4-D9359802DBC4SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F2E0155-0001-09F4-D9359802DBC4SessionOS.cls_temp
- <Package Folder>/files/####/592E6F3402EE-0001-0A48-D9359802DBC4BeginSession.cls_temp
- <Package Folder>/files/####/592E6F3402EE-0001-0A48-D9359802DBC4SessionApp.cls_temp
- <Package Folder>/files/####/592E6F3402EE-0001-0A48-D9359802DBC4SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F3402EE-0001-0A48-D9359802DBC4SessionOS.cls_temp
- <Package Folder>/files/####/592E6F3B017C-0001-0A80-D9359802DBC4BeginSession.cls_temp
- <Package Folder>/files/####/592E6F3B017C-0001-0A80-D9359802DBC4SessionApp.cls_temp
- <Package Folder>/files/####/592E6F3B017C-0001-0A80-D9359802DBC4SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F3B017C-0001-0A80-D9359802DBC4SessionOS.cls_temp
- <Package Folder>/files/####/sa_3d53d0b2-609b-468e-bea6-c74e9400b1bd_1496215286713.tap
- <Package Folder>/files/####/session_analytics.tap
- <Package Folder>/files/####/session_analytics.tap.tmp
- <Package Folder>/files/RMcYEwEPd
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
- <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
- <Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
- <Package Folder>/shared_prefs/multidex.version.xml
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
