Android.Packed.25388

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Android.MobiDash.2.origin

Загружает из Интернета следующие детектируемые угрозы:

Android.MobiDash.2.origin

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/app_app_apk/android.dat.jar
<Package Folder>/app_outdex/android.dat.dex (deleted)
<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/f_000001
<Package Folder>/cache/####/index
<Package Folder>/code_cache/####/MultiDex.lock
<Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-964720365.zip
<Package Folder>/databases/google_analytics_v4.db-journal
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
<Package Folder>/files/####/592E6EE40029-0001-082C-E4BDA2ED6079BeginSession.cls_temp
<Package Folder>/files/####/592E6EE40029-0001-082C-E4BDA2ED6079SessionApp.cls_temp
<Package Folder>/files/####/592E6EE40029-0001-082C-E4BDA2ED6079SessionDevice.cls_temp
<Package Folder>/files/####/592E6EE40029-0001-082C-E4BDA2ED6079SessionOS.cls_temp
<Package Folder>/files/####/592E6EE40029-0001-082C-E4BDA2ED6079SessionUser.cls_temp
<Package Folder>/files/####/592E6EEA0089-0002-082C-E4BDA2ED6079BeginSession.cls_temp
<Package Folder>/files/####/592E6EEA0089-0002-082C-E4BDA2ED6079SessionApp.cls_temp
<Package Folder>/files/####/592E6EEA0089-0002-082C-E4BDA2ED6079SessionDevice.cls_temp
<Package Folder>/files/####/592E6EEA0089-0002-082C-E4BDA2ED6079SessionOS.cls_temp
<Package Folder>/files/####/com.crashlytics.settings.json
<Package Folder>/files/####/initialization_marker
<Package Folder>/files/####/sa_51dea951-77f6-489c-a6d9-c73375719383_1496215274157.tap
<Package Folder>/files/####/session_analytics.tap
<Package Folder>/files/####/session_analytics.tap.tmp
<Package Folder>/files/MjbbosRkt
<Package Folder>/files/adb.log
<Package Folder>/files/gaClientId
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml.bak
<Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
<Package Folder>/shared_prefs/ZenmateAppSettings.xml
<Package Folder>/shared_prefs/ZenmateAppSettings.xml.bak
<Package Folder>/shared_prefs/com.crashlytics.prefs.xml
<Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;com.crashlytics.android.answers.Answers.xml
<Package Folder>/shared_prefs/com.google.android.gms.analytics.prefs.xml
<Package Folder>/shared_prefs/io.fabric.sdk.android;fabric;io.fabric.sdk.android.Onboarding.xml
<Package Folder>/shared_prefs/multidex.version.xml