Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.1.origin
Загружает из Интернета следующие детектируемые угрозы:
- Android.MobiDash.1.origin
Изменения в файловой системе:
Создает следующие файлы:
- /data/anr/traces.txt
- <Package Folder>/app_app_apk/monster.dat.jar
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-1830476554.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-1849287222.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes1644970330.zip
- <Package Folder>/files/####/596FCB080006-0001-0840-9718415ECE65BeginSession.cls_temp
- <Package Folder>/files/####/596FCB080006-0001-0840-9718415ECE65SessionApp.cls_temp
- <Package Folder>/files/####/596FCB080006-0001-0840-9718415ECE65SessionDevice.cls_temp
- <Package Folder>/files/####/596FCB080006-0001-0840-9718415ECE65SessionOS.cls_temp
- <Package Folder>/files/####/596FCB0A00D7-0001-0864-9718415ECE65BeginSession.cls_temp
- <Package Folder>/files/####/596FCB0A00D7-0001-0864-9718415ECE65SessionApp.cls_temp
- <Package Folder>/files/####/596FCB0A00D7-0001-0864-9718415ECE65SessionDevice.cls_temp
- <Package Folder>/files/####/596FCB0A00D7-0001-0864-9718415ECE65SessionOS.cls_temp
- <Package Folder>/files/####/596FCB11016D-0001-08A2-9718415ECE65BeginSession.cls_temp
- <Package Folder>/files/####/596FCB11016D-0001-08A2-9718415ECE65SessionApp.cls_temp
- <Package Folder>/files/####/596FCB11016D-0001-08A2-9718415ECE65SessionDevice.cls_temp
- <Package Folder>/files/####/596FCB11016D-0001-08A2-9718415ECE65SessionOS.cls_temp
- <Package Folder>/files/####/596FCB17021A-0001-08C6-9718415ECE65BeginSession.cls_temp
- <Package Folder>/files/####/596FCB17021A-0001-08C6-9718415ECE65SessionApp.cls_temp
- <Package Folder>/files/####/596FCB17021A-0001-08C6-9718415ECE65SessionDevice.cls_temp
- <Package Folder>/files/####/596FCB17021A-0001-08C6-9718415ECE65SessionOS.cls_temp
- <Package Folder>/files/####/596FCB18032C-0001-08E6-9718415ECE65BeginSession.cls_temp
- <Package Folder>/files/####/596FCB18032C-0001-08E6-9718415ECE65SessionApp.cls_temp
- <Package Folder>/files/####/596FCB18032C-0001-08E6-9718415ECE65SessionDevice.cls_temp
- <Package Folder>/files/####/596FCB18032C-0001-08E6-9718415ECE65SessionOS.cls_temp
- <Package Folder>/files/####/596FCB1F0101-0001-091F-9718415ECE65BeginSession.cls_temp
- <Package Folder>/files/####/596FCB1F0101-0001-091F-9718415ECE65SessionApp.cls_temp
- <Package Folder>/files/####/596FCB1F0101-0001-091F-9718415ECE65SessionDevice.cls_temp
- <Package Folder>/files/####/596FCB1F0101-0001-091F-9718415ECE65SessionOS.cls_temp
- <Package Folder>/files/####/596FCB2302FD-0001-0940-9718415ECE65BeginSession.cls_temp
- <Package Folder>/files/####/596FCB2302FD-0001-0940-9718415ECE65SessionApp.cls_temp
- <Package Folder>/files/####/596FCB2302FD-0001-0940-9718415ECE65SessionDevice.cls_temp
- <Package Folder>/files/####/596FCB2302FD-0001-0940-9718415ECE65SessionOS.cls_temp
- <Package Folder>/files/####/596FCB2500D3-0001-0977-9718415ECE65BeginSession.cls_temp
- <Package Folder>/files/####/596FCB2500D3-0001-0977-9718415ECE65SessionApp.cls_temp
- <Package Folder>/files/####/596FCB2500D3-0001-0977-9718415ECE65SessionOS.cls_temp
- <Package Folder>/files/####/596FCB2B012E-0001-0994-9718415ECE65BeginSession.cls_temp
- <Package Folder>/files/####/596FCB2B012E-0001-0994-9718415ECE65SessionApp.cls_temp
- <Package Folder>/files/####/596FCB2B012E-0001-0994-9718415ECE65SessionDevice.cls_temp
- <Package Folder>/files/####/596FCB2B012E-0001-0994-9718415ECE65SessionOS.cls_temp
- <Package Folder>/files/####/596FCB3100B8-0001-09C8-9718415ECE65BeginSession.cls_temp
- <Package Folder>/files/####/596FCB3100B8-0001-09C8-9718415ECE65SessionApp.cls_temp
- <Package Folder>/files/####/596FCB3100B8-0001-09C8-9718415ECE65SessionDevice.cls_temp
- <Package Folder>/files/####/596FCB3100B8-0001-09C8-9718415ECE65SessionOS.cls_temp
- <Package Folder>/files/####/596FCB3700B5-0001-09EC-9718415ECE65BeginSession.cls_temp
- <Package Folder>/files/####/596FCB3700B5-0001-09EC-9718415ECE65SessionApp.cls_temp
- <Package Folder>/files/####/596FCB3700B5-0001-09EC-9718415ECE65SessionDevice.cls_temp
- <Package Folder>/files/####/596FCB3700B5-0001-09EC-9718415ECE65SessionOS.cls_temp
- <Package Folder>/files/####/596FCB3D00E7-0001-0A1E-9718415ECE65BeginSession.cls_temp
- <Package Folder>/files/####/596FCB3D00E7-0001-0A1E-9718415ECE65SessionApp.cls_temp
- <Package Folder>/files/####/596FCB3D00E7-0001-0A1E-9718415ECE65SessionDevice.cls_temp
- <Package Folder>/files/####/596FCB3D00E7-0001-0A1E-9718415ECE65SessionOS.cls_temp
- <Package Folder>/files/####/596FCB430047-0001-0A74-9718415ECE65BeginSession.cls_temp
- <Package Folder>/files/####/596FCB430047-0001-0A74-9718415ECE65SessionApp.cls_temp
- <Package Folder>/files/####/596FCB430047-0001-0A74-9718415ECE65SessionDevice.cls_temp
- <Package Folder>/files/####/596FCB430047-0001-0A74-9718415ECE65SessionOS.cls_temp
- <Package Folder>/files/####/596FCB490093-0001-0AB1-9718415ECE65BeginSession.cls_temp
- <Package Folder>/files/####/596FCB490093-0001-0AB1-9718415ECE65SessionApp.cls_temp
- <Package Folder>/files/####/596FCB490093-0001-0AB1-9718415ECE65SessionDevice.cls_temp
- <Package Folder>/files/####/596FCB490093-0001-0AB1-9718415ECE65SessionOS.cls_temp
- <Package Folder>/files/####/sa_5f53dd68-7ef2-4543-9e0e-b44de1daa26a_1500498696041.tap
- <Package Folder>/files/####/session_analytics.tap
- <Package Folder>/files/####/session_analytics.tap.tmp
- <Package Folder>/files/bjYZxDYMB
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
- <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
- <Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
- <Package Folder>/shared_prefs/multidex.version.xml
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
