Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.1.origin
Загружает из Интернета следующие детектируемые угрозы:
- Android.MobiDash.1.origin
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/app_app_apk/park.dat.jar
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-217599819.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes752905994.zip
- <Package Folder>/files/####/592E6EF702C9-0001-082A-D6B07807D734BeginSession.cls_temp
- <Package Folder>/files/####/592E6EF702C9-0001-082A-D6B07807D734SessionApp.cls_temp
- <Package Folder>/files/####/592E6EF702C9-0001-082A-D6B07807D734SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EF702C9-0001-082A-D6B07807D734SessionOS.cls_temp
- <Package Folder>/files/####/592E6EF80233-0001-084E-D6B07807D734BeginSession.cls_temp
- <Package Folder>/files/####/592E6EF80233-0001-084E-D6B07807D734SessionApp.cls_temp
- <Package Folder>/files/####/592E6EF80233-0001-084E-D6B07807D734SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EF80233-0001-084E-D6B07807D734SessionOS.cls_temp
- <Package Folder>/files/####/592E6EFE0330-0001-088D-D6B07807D734BeginSession.cls_temp
- <Package Folder>/files/####/592E6EFE0330-0001-088D-D6B07807D734SessionApp.cls_temp
- <Package Folder>/files/####/592E6EFE0330-0001-088D-D6B07807D734SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EFE0330-0001-088D-D6B07807D734SessionOS.cls_temp
- <Package Folder>/files/####/592E6F0602B2-0001-08F3-D6B07807D734BeginSession.cls_temp
- <Package Folder>/files/####/592E6F0602B2-0001-08F3-D6B07807D734SessionApp.cls_temp
- <Package Folder>/files/####/592E6F0602B2-0001-08F3-D6B07807D734SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F0602B2-0001-08F3-D6B07807D734SessionOS.cls_temp
- <Package Folder>/files/####/592E6F0D003F-0001-0916-D6B07807D734BeginSession.cls_temp
- <Package Folder>/files/####/592E6F0D003F-0001-0916-D6B07807D734SessionApp.cls_temp
- <Package Folder>/files/####/592E6F0D003F-0001-0916-D6B07807D734SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F0D003F-0001-0916-D6B07807D734SessionOS.cls_temp
- <Package Folder>/files/####/592E6F130218-0001-093A-D6B07807D734BeginSession.cls_temp
- <Package Folder>/files/####/592E6F130218-0001-093A-D6B07807D734SessionApp.cls_temp
- <Package Folder>/files/####/592E6F130218-0001-093A-D6B07807D734SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F130218-0001-093A-D6B07807D734SessionOS.cls_temp
- <Package Folder>/files/####/592E6F190289-0001-095D-D6B07807D734BeginSession.cls_temp
- <Package Folder>/files/####/592E6F190289-0001-095D-D6B07807D734SessionApp.cls_temp
- <Package Folder>/files/####/592E6F190289-0001-095D-D6B07807D734SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F190289-0001-095D-D6B07807D734SessionOS.cls_temp
- <Package Folder>/files/####/592E6F1F02C9-0001-0980-D6B07807D734BeginSession.cls_temp
- <Package Folder>/files/####/592E6F1F02C9-0001-0980-D6B07807D734SessionApp.cls_temp
- <Package Folder>/files/####/592E6F1F02C9-0001-0980-D6B07807D734SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F1F02C9-0001-0980-D6B07807D734SessionOS.cls_temp
- <Package Folder>/files/####/592E6F2502C7-0001-09A3-D6B07807D734BeginSession.cls_temp
- <Package Folder>/files/####/592E6F2502C7-0001-09A3-D6B07807D734SessionApp.cls_temp
- <Package Folder>/files/####/592E6F2502C7-0001-09A3-D6B07807D734SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F2502C7-0001-09A3-D6B07807D734SessionOS.cls_temp
- <Package Folder>/files/####/592E6F2B027A-0001-09C9-D6B07807D734BeginSession.cls_temp
- <Package Folder>/files/####/592E6F2B027A-0001-09C9-D6B07807D734SessionApp.cls_temp
- <Package Folder>/files/####/592E6F2B027A-0001-09C9-D6B07807D734SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F2B027A-0001-09C9-D6B07807D734SessionOS.cls_temp
- <Package Folder>/files/####/592E6F3103E1-0001-09ED-D6B07807D734BeginSession.cls_temp
- <Package Folder>/files/####/592E6F3103E1-0001-09ED-D6B07807D734SessionApp.cls_temp
- <Package Folder>/files/####/592E6F3103E1-0001-09ED-D6B07807D734SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F3103E1-0001-09ED-D6B07807D734SessionOS.cls_temp
- <Package Folder>/files/####/592E6F3703D1-0001-0A49-D6B07807D734BeginSession.cls_temp
- <Package Folder>/files/####/592E6F3703D1-0001-0A49-D6B07807D734SessionApp.cls_temp
- <Package Folder>/files/####/592E6F3703D1-0001-0A49-D6B07807D734SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F3703D1-0001-0A49-D6B07807D734SessionOS.cls_temp
- <Package Folder>/files/####/sa_6213e317-623b-4e0f-8038-cab625c75296_1496215287742.tap
- <Package Folder>/files/####/session_analytics.tap
- <Package Folder>/files/####/session_analytics.tap.tmp
- <Package Folder>/files/qynOCsoEm
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
- <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
- <Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
- <Package Folder>/shared_prefs/multidex.version.xml
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
