Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.1.origin
Загружает из Интернета следующие детектируемые угрозы:
- Android.MobiDash.1.origin
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/app_app_apk/slacking.dat.jar
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-1864694015.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes1996873314.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes468437883.zip
- <Package Folder>/files/####/592E6EE6024D-0001-082E-1DE54B12E02DBeginSession.cls_temp
- <Package Folder>/files/####/592E6EE6024D-0001-082E-1DE54B12E02DSessionApp.cls_temp
- <Package Folder>/files/####/592E6EE6024D-0001-082E-1DE54B12E02DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EE6024D-0001-082E-1DE54B12E02DSessionOS.cls_temp
- <Package Folder>/files/####/592E6EE70235-0001-0852-1DE54B12E02DBeginSession.cls_temp
- <Package Folder>/files/####/592E6EE70235-0001-0852-1DE54B12E02DSessionApp.cls_temp
- <Package Folder>/files/####/592E6EE70235-0001-0852-1DE54B12E02DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EE70235-0001-0852-1DE54B12E02DSessionOS.cls_temp
- <Package Folder>/files/####/592E6EEF0023-0001-0890-1DE54B12E02DBeginSession.cls_temp
- <Package Folder>/files/####/592E6EEF0023-0001-0890-1DE54B12E02DSessionApp.cls_temp
- <Package Folder>/files/####/592E6EEF0023-0001-0890-1DE54B12E02DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EEF0023-0001-0890-1DE54B12E02DSessionOS.cls_temp
- <Package Folder>/files/####/592E6EF50261-0001-08B4-1DE54B12E02DBeginSession.cls_temp
- <Package Folder>/files/####/592E6EF50261-0001-08B4-1DE54B12E02DSessionApp.cls_temp
- <Package Folder>/files/####/592E6EF50261-0001-08B4-1DE54B12E02DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EF50261-0001-08B4-1DE54B12E02DSessionOS.cls_temp
- <Package Folder>/files/####/592E6EFB0342-0001-08F2-1DE54B12E02DBeginSession.cls_temp
- <Package Folder>/files/####/592E6EFB0342-0001-08F2-1DE54B12E02DSessionApp.cls_temp
- <Package Folder>/files/####/592E6EFB0342-0001-08F2-1DE54B12E02DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6EFB0342-0001-08F2-1DE54B12E02DSessionOS.cls_temp
- <Package Folder>/files/####/592E6F0101BE-0001-0918-1DE54B12E02DBeginSession.cls_temp
- <Package Folder>/files/####/592E6F0101BE-0001-0918-1DE54B12E02DSessionApp.cls_temp
- <Package Folder>/files/####/592E6F0101BE-0001-0918-1DE54B12E02DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F0101BE-0001-0918-1DE54B12E02DSessionOS.cls_temp
- <Package Folder>/files/####/592E6F02014A-0001-0937-1DE54B12E02DBeginSession.cls_temp
- <Package Folder>/files/####/592E6F02014A-0001-0937-1DE54B12E02DSessionApp.cls_temp
- <Package Folder>/files/####/592E6F02014A-0001-0937-1DE54B12E02DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F02014A-0001-0937-1DE54B12E02DSessionOS.cls_temp
- <Package Folder>/files/####/592E6F080341-0001-0972-1DE54B12E02DBeginSession.cls_temp
- <Package Folder>/files/####/592E6F080341-0001-0972-1DE54B12E02DSessionApp.cls_temp
- <Package Folder>/files/####/592E6F080341-0001-0972-1DE54B12E02DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F080341-0001-0972-1DE54B12E02DSessionOS.cls_temp
- <Package Folder>/files/####/592E6F0F0362-0001-0996-1DE54B12E02DBeginSession.cls_temp
- <Package Folder>/files/####/592E6F0F0362-0001-0996-1DE54B12E02DSessionApp.cls_temp
- <Package Folder>/files/####/592E6F0F0362-0001-0996-1DE54B12E02DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F0F0362-0001-0996-1DE54B12E02DSessionOS.cls_temp
- <Package Folder>/files/####/592E6F1002D0-0001-09B5-1DE54B12E02DBeginSession.cls_temp
- <Package Folder>/files/####/592E6F1002D0-0001-09B5-1DE54B12E02DSessionApp.cls_temp
- <Package Folder>/files/####/592E6F1002D0-0001-09B5-1DE54B12E02DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F1002D0-0001-09B5-1DE54B12E02DSessionOS.cls_temp
- <Package Folder>/files/####/592E6F110273-0001-09D3-1DE54B12E02DBeginSession.cls_temp
- <Package Folder>/files/####/592E6F110273-0001-09D3-1DE54B12E02DSessionApp.cls_temp
- <Package Folder>/files/####/592E6F110273-0001-09D3-1DE54B12E02DSessionOS.cls_temp
- <Package Folder>/files/####/592E6F1700C9-0001-09F1-1DE54B12E02DBeginSession.cls_temp
- <Package Folder>/files/####/592E6F1700C9-0001-09F1-1DE54B12E02DSessionApp.cls_temp
- <Package Folder>/files/####/592E6F1700C9-0001-09F1-1DE54B12E02DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F1700C9-0001-09F1-1DE54B12E02DSessionOS.cls_temp
- <Package Folder>/files/####/592E6F1C00E0-0001-0A12-1DE54B12E02DBeginSession.cls_temp
- <Package Folder>/files/####/592E6F1C00E0-0001-0A12-1DE54B12E02DSessionApp.cls_temp
- <Package Folder>/files/####/592E6F1C00E0-0001-0A12-1DE54B12E02DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F1C00E0-0001-0A12-1DE54B12E02DSessionOS.cls_temp
- <Package Folder>/files/####/592E6F2300D8-0001-0A98-1DE54B12E02DBeginSession.cls_temp
- <Package Folder>/files/####/592E6F2300D8-0001-0A98-1DE54B12E02DSessionApp.cls_temp
- <Package Folder>/files/####/592E6F2300D8-0001-0A98-1DE54B12E02DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F2300D8-0001-0A98-1DE54B12E02DSessionOS.cls_temp
- <Package Folder>/files/####/592E6F29003C-0001-0AD0-1DE54B12E02DBeginSession.cls_temp
- <Package Folder>/files/####/592E6F29003C-0001-0AD0-1DE54B12E02DSessionApp.cls_temp
- <Package Folder>/files/####/592E6F29003C-0001-0AD0-1DE54B12E02DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6F29003C-0001-0AD0-1DE54B12E02DSessionOS.cls_temp
- <Package Folder>/files/####/sa_b2cabe63-15d7-44ff-8b00-77e27512c7ab_1496215270618.tap
- <Package Folder>/files/####/session_analytics.tap
- <Package Folder>/files/####/session_analytics.tap.tmp
- <Package Folder>/files/SQrzFAyKV
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
- <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
- <Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
- <Package Folder>/shared_prefs/multidex.version.xml
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
