Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.1.origin
Загружает из Интернета следующие детектируемые угрозы:
- Android.MobiDash.1.origin
Изменения в файловой системе:
Создает следующие файлы:
- /data/anr/traces.txt
- <Package Folder>/app_app_apk/party.dat.jar
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-1091101894.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-454014203.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes968413442.zip
- <Package Folder>/files/####/592E6EDE0365-0001-082F-CB0B661A5F54BeginSession.cls_temp
- <Package Folder>/files/####/592E6EDE0365-0001-082F-CB0B661A5F54SessionApp.cls_temp
- <Package Folder>/files/####/592E6EDE0365-0001-082F-CB0B661A5F54SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EDE0365-0001-082F-CB0B661A5F54SessionOS.cls_temp
- <Package Folder>/files/####/592E6EE00043-0001-0854-CB0B661A5F54BeginSession.cls_temp
- <Package Folder>/files/####/592E6EE00043-0001-0854-CB0B661A5F54SessionApp.cls_temp
- <Package Folder>/files/####/592E6EE00043-0001-0854-CB0B661A5F54SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EE00043-0001-0854-CB0B661A5F54SessionOS.cls_temp
- <Package Folder>/files/####/592E6EE7012D-0001-0893-CB0B661A5F54BeginSession.cls_temp
- <Package Folder>/files/####/592E6EE7012D-0001-0893-CB0B661A5F54SessionApp.cls_temp
- <Package Folder>/files/####/592E6EE7012D-0001-0893-CB0B661A5F54SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EE7012D-0001-0893-CB0B661A5F54SessionOS.cls_temp
- <Package Folder>/files/####/592E6EEE0033-0001-08B7-CB0B661A5F54BeginSession.cls_temp
- <Package Folder>/files/####/592E6EEE0033-0001-08B7-CB0B661A5F54SessionApp.cls_temp
- <Package Folder>/files/####/592E6EEE0033-0001-08B7-CB0B661A5F54SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EEE0033-0001-08B7-CB0B661A5F54SessionOS.cls_temp
- <Package Folder>/files/####/592E6EF40219-0001-08DA-CB0B661A5F54BeginSession.cls_temp
- <Package Folder>/files/####/592E6EF40219-0001-08DA-CB0B661A5F54SessionApp.cls_temp
- <Package Folder>/files/####/592E6EF40219-0001-08DA-CB0B661A5F54SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EF40219-0001-08DA-CB0B661A5F54SessionOS.cls_temp
- <Package Folder>/files/####/592E6EFB0052-0001-08FB-CB0B661A5F54BeginSession.cls_temp
- <Package Folder>/files/####/592E6EFB0052-0001-08FB-CB0B661A5F54SessionApp.cls_temp
- <Package Folder>/files/####/592E6EFB0052-0001-08FB-CB0B661A5F54SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EFB0052-0001-08FB-CB0B661A5F54SessionOS.cls_temp
- <Package Folder>/files/####/592E6EFB03D5-0001-091A-CB0B661A5F54BeginSession.cls_temp
- <Package Folder>/files/####/592E6EFB03D5-0001-091A-CB0B661A5F54SessionApp.cls_temp
- <Package Folder>/files/####/592E6EFB03D5-0001-091A-CB0B661A5F54SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EFB03D5-0001-091A-CB0B661A5F54SessionOS.cls_temp
- <Package Folder>/files/####/592E6F03014F-0001-0953-CB0B661A5F54BeginSession.cls_temp
- <Package Folder>/files/####/592E6F03014F-0001-0953-CB0B661A5F54SessionApp.cls_temp
- <Package Folder>/files/####/592E6F03014F-0001-0953-CB0B661A5F54SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F03014F-0001-0953-CB0B661A5F54SessionOS.cls_temp
- <Package Folder>/files/####/592E6F0903A0-0001-0975-CB0B661A5F54BeginSession.cls_temp
- <Package Folder>/files/####/592E6F0903A0-0001-0975-CB0B661A5F54SessionApp.cls_temp
- <Package Folder>/files/####/592E6F0903A0-0001-0975-CB0B661A5F54SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F0903A0-0001-0975-CB0B661A5F54SessionOS.cls_temp
- <Package Folder>/files/####/592E6F1002AE-0001-0998-CB0B661A5F54BeginSession.cls_temp
- <Package Folder>/files/####/592E6F1002AE-0001-0998-CB0B661A5F54SessionApp.cls_temp
- <Package Folder>/files/####/592E6F1002AE-0001-0998-CB0B661A5F54SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F1002AE-0001-0998-CB0B661A5F54SessionOS.cls_temp
- <Package Folder>/files/####/592E6F170075-0001-09BB-CB0B661A5F54BeginSession.cls_temp
- <Package Folder>/files/####/592E6F170075-0001-09BB-CB0B661A5F54SessionApp.cls_temp
- <Package Folder>/files/####/592E6F170075-0001-09BB-CB0B661A5F54SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F170075-0001-09BB-CB0B661A5F54SessionOS.cls_temp
- <Package Folder>/files/####/592E6F1D00A7-0001-0A1A-CB0B661A5F54BeginSession.cls_temp
- <Package Folder>/files/####/592E6F1D00A7-0001-0A1A-CB0B661A5F54SessionApp.cls_temp
- <Package Folder>/files/####/592E6F1D00A7-0001-0A1A-CB0B661A5F54SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F1D00A7-0001-0A1A-CB0B661A5F54SessionOS.cls_temp
- <Package Folder>/files/####/sa_7524ae8d-0d2a-4a04-b760-0401a4825617_1496215262919.tap
- <Package Folder>/files/####/session_analytics.tap
- <Package Folder>/files/####/session_analytics.tap.tmp
- <Package Folder>/files/gWmVRJgmt
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
- <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
- <Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
- <Package Folder>/shared_prefs/multidex.version.xml
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
