Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.1.origin
Загружает из Интернета следующие детектируемые угрозы:
- Android.MobiDash.1.origin
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/app_app_apk/ineart.dat.jar
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-539887631.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-750105455.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes1179786603.zip
- <Package Folder>/files/####/592E6EF80212-0001-082B-22A241A325E1BeginSession.cls_temp
- <Package Folder>/files/####/592E6EF80212-0001-082B-22A241A325E1SessionApp.cls_temp
- <Package Folder>/files/####/592E6EF80212-0001-082B-22A241A325E1SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EF80212-0001-082B-22A241A325E1SessionOS.cls_temp
- <Package Folder>/files/####/592E6EF901D9-0001-084F-22A241A325E1BeginSession.cls_temp
- <Package Folder>/files/####/592E6EF901D9-0001-084F-22A241A325E1SessionApp.cls_temp
- <Package Folder>/files/####/592E6EF901D9-0001-084F-22A241A325E1SessionDevice.cls_temp
- <Package Folder>/files/####/592E6EF901D9-0001-084F-22A241A325E1SessionOS.cls_temp
- <Package Folder>/files/####/592E6F0003D2-0001-089F-22A241A325E1BeginSession.cls_temp
- <Package Folder>/files/####/592E6F0003D2-0001-089F-22A241A325E1SessionApp.cls_temp
- <Package Folder>/files/####/592E6F0003D2-0001-089F-22A241A325E1SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F0003D2-0001-089F-22A241A325E1SessionOS.cls_temp
- <Package Folder>/files/####/592E6F07024B-0001-08C6-22A241A325E1BeginSession.cls_temp
- <Package Folder>/files/####/592E6F07024B-0001-08C6-22A241A325E1SessionApp.cls_temp
- <Package Folder>/files/####/592E6F07024B-0001-08C6-22A241A325E1SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F07024B-0001-08C6-22A241A325E1SessionOS.cls_temp
- <Package Folder>/files/####/592E6F0F01F9-0001-08FA-22A241A325E1BeginSession.cls_temp
- <Package Folder>/files/####/592E6F0F01F9-0001-08FA-22A241A325E1SessionApp.cls_temp
- <Package Folder>/files/####/592E6F0F01F9-0001-08FA-22A241A325E1SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F0F01F9-0001-08FA-22A241A325E1SessionOS.cls_temp
- <Package Folder>/files/####/592E6F100289-0001-091D-22A241A325E1BeginSession.cls_temp
- <Package Folder>/files/####/592E6F100289-0001-091D-22A241A325E1SessionApp.cls_temp
- <Package Folder>/files/####/592E6F100289-0001-091D-22A241A325E1SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F100289-0001-091D-22A241A325E1SessionOS.cls_temp
- <Package Folder>/files/####/592E6F1102E1-0001-093B-22A241A325E1BeginSession.cls_temp
- <Package Folder>/files/####/592E6F1102E1-0001-093B-22A241A325E1SessionApp.cls_temp
- <Package Folder>/files/####/592E6F1701C7-0001-096D-22A241A325E1BeginSession.cls_temp
- <Package Folder>/files/####/592E6F1701C7-0001-096D-22A241A325E1SessionApp.cls_temp
- <Package Folder>/files/####/592E6F1701C7-0001-096D-22A241A325E1SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F1701C7-0001-096D-22A241A325E1SessionOS.cls_temp
- <Package Folder>/files/####/592E6F1D0247-0001-0997-22A241A325E1BeginSession.cls_temp
- <Package Folder>/files/####/592E6F1D0247-0001-0997-22A241A325E1SessionApp.cls_temp
- <Package Folder>/files/####/592E6F1D0247-0001-0997-22A241A325E1SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F1D0247-0001-0997-22A241A325E1SessionOS.cls_temp
- <Package Folder>/files/####/592E6F230261-0001-09C8-22A241A325E1BeginSession.cls_temp
- <Package Folder>/files/####/592E6F230261-0001-09C8-22A241A325E1SessionApp.cls_temp
- <Package Folder>/files/####/592E6F230261-0001-09C8-22A241A325E1SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F230261-0001-09C8-22A241A325E1SessionOS.cls_temp
- <Package Folder>/files/####/592E6F2903C3-0001-09EE-22A241A325E1BeginSession.cls_temp
- <Package Folder>/files/####/592E6F2903C3-0001-09EE-22A241A325E1SessionApp.cls_temp
- <Package Folder>/files/####/592E6F2903C3-0001-09EE-22A241A325E1SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F2903C3-0001-09EE-22A241A325E1SessionOS.cls_temp
- <Package Folder>/files/####/592E6F300021-0001-0A12-22A241A325E1BeginSession.cls_temp
- <Package Folder>/files/####/592E6F300021-0001-0A12-22A241A325E1SessionApp.cls_temp
- <Package Folder>/files/####/592E6F300021-0001-0A12-22A241A325E1SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F300021-0001-0A12-22A241A325E1SessionOS.cls_temp
- <Package Folder>/files/####/592E6F36009E-0001-0A64-22A241A325E1BeginSession.cls_temp
- <Package Folder>/files/####/592E6F36009E-0001-0A64-22A241A325E1SessionApp.cls_temp
- <Package Folder>/files/####/592E6F36009E-0001-0A64-22A241A325E1SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F36009E-0001-0A64-22A241A325E1SessionOS.cls_temp
- <Package Folder>/files/####/592E6F3C03AE-0001-0A9C-22A241A325E1BeginSession.cls_temp
- <Package Folder>/files/####/592E6F3C03AE-0001-0A9C-22A241A325E1SessionApp.cls_temp
- <Package Folder>/files/####/592E6F3C03AE-0001-0A9C-22A241A325E1SessionDevice.cls_temp
- <Package Folder>/files/####/592E6F3C03AE-0001-0A9C-22A241A325E1SessionOS.cls_temp
- <Package Folder>/files/####/sa_7b941526-7cfb-40e6-b841-4a611c7af33d_1496215288551.tap
- <Package Folder>/files/####/session_analytics.tap
- <Package Folder>/files/####/session_analytics.tap.tmp
- <Package Folder>/files/MAEVlUqis
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
- <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
- <Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
- <Package Folder>/shared_prefs/multidex.version.xml
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
