Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.2.origin
Загружает из Интернета следующие детектируемые угрозы:
- Android.MobiDash.2.origin
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/app_app_apk/iovxvo.dat.jar
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-1249864854.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-353643974.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes1653414428.zip
- <Package Folder>/files/####/592EB0E1032B-0001-0830-166974FA0B74BeginSession.cls_temp
- <Package Folder>/files/####/592EB0E1032B-0001-0830-166974FA0B74SessionApp.cls_temp
- <Package Folder>/files/####/592EB0E1032B-0001-0830-166974FA0B74SessionDevice.cls_temp
- <Package Folder>/files/####/592EB0E1032B-0001-0830-166974FA0B74SessionOS.cls_temp
- <Package Folder>/files/####/592EB0E202E8-0001-0853-166974FA0B74BeginSession.cls_temp
- <Package Folder>/files/####/592EB0E202E8-0001-0853-166974FA0B74SessionApp.cls_temp
- <Package Folder>/files/####/592EB0E202E8-0001-0853-166974FA0B74SessionDevice.cls_temp
- <Package Folder>/files/####/592EB0E202E8-0001-0853-166974FA0B74SessionOS.cls_temp
- <Package Folder>/files/####/592EB0E902E2-0001-0893-166974FA0B74BeginSession.cls_temp
- <Package Folder>/files/####/592EB0E902E2-0001-0893-166974FA0B74SessionApp.cls_temp
- <Package Folder>/files/####/592EB0E902E2-0001-0893-166974FA0B74SessionDevice.cls_temp
- <Package Folder>/files/####/592EB0E902E2-0001-0893-166974FA0B74SessionOS.cls_temp
- <Package Folder>/files/####/592EB0F103AC-0001-08D5-166974FA0B74BeginSession.cls_temp
- <Package Folder>/files/####/592EB0F103AC-0001-08D5-166974FA0B74SessionApp.cls_temp
- <Package Folder>/files/####/592EB0F103AC-0001-08D5-166974FA0B74SessionDevice.cls_temp
- <Package Folder>/files/####/592EB0F103AC-0001-08D5-166974FA0B74SessionOS.cls_temp
- <Package Folder>/files/####/592EB0F800D4-0001-08FC-166974FA0B74BeginSession.cls_temp
- <Package Folder>/files/####/592EB0F800D4-0001-08FC-166974FA0B74SessionApp.cls_temp
- <Package Folder>/files/####/592EB0F800D4-0001-08FC-166974FA0B74SessionDevice.cls_temp
- <Package Folder>/files/####/592EB0F800D4-0001-08FC-166974FA0B74SessionOS.cls_temp
- <Package Folder>/files/####/592EB0FE0141-0001-091E-166974FA0B74BeginSession.cls_temp
- <Package Folder>/files/####/592EB0FE0141-0001-091E-166974FA0B74SessionApp.cls_temp
- <Package Folder>/files/####/592EB0FE0141-0001-091E-166974FA0B74SessionDevice.cls_temp
- <Package Folder>/files/####/592EB0FE0141-0001-091E-166974FA0B74SessionOS.cls_temp
- <Package Folder>/files/####/592EB10402C4-0001-0942-166974FA0B74BeginSession.cls_temp
- <Package Folder>/files/####/592EB10402C4-0001-0942-166974FA0B74SessionApp.cls_temp
- <Package Folder>/files/####/592EB10402C4-0001-0942-166974FA0B74SessionDevice.cls_temp
- <Package Folder>/files/####/592EB10402C4-0001-0942-166974FA0B74SessionOS.cls_temp
- <Package Folder>/files/####/592EB105029E-0001-0961-166974FA0B74BeginSession.cls_temp
- <Package Folder>/files/####/592EB105029E-0001-0961-166974FA0B74SessionApp.cls_temp
- <Package Folder>/files/####/592EB105029E-0001-0961-166974FA0B74SessionDevice.cls_temp
- <Package Folder>/files/####/592EB105029E-0001-0961-166974FA0B74SessionOS.cls_temp
- <Package Folder>/files/####/592EB10C0092-0001-099D-166974FA0B74BeginSession.cls_temp
- <Package Folder>/files/####/592EB10C0092-0001-099D-166974FA0B74SessionApp.cls_temp
- <Package Folder>/files/####/592EB10C0092-0001-099D-166974FA0B74SessionDevice.cls_temp
- <Package Folder>/files/####/592EB10C0092-0001-099D-166974FA0B74SessionOS.cls_temp
- <Package Folder>/files/####/592EB11200AA-0001-09C3-166974FA0B74BeginSession.cls_temp
- <Package Folder>/files/####/592EB11200AA-0001-09C3-166974FA0B74SessionApp.cls_temp
- <Package Folder>/files/####/592EB11200AA-0001-09C3-166974FA0B74SessionDevice.cls_temp
- <Package Folder>/files/####/592EB11200AA-0001-09C3-166974FA0B74SessionOS.cls_temp
- <Package Folder>/files/####/592EB11702C5-0001-09E8-166974FA0B74BeginSession.cls_temp
- <Package Folder>/files/####/592EB11702C5-0001-09E8-166974FA0B74SessionApp.cls_temp
- <Package Folder>/files/####/592EB11702C5-0001-09E8-166974FA0B74SessionDevice.cls_temp
- <Package Folder>/files/####/592EB11702C5-0001-09E8-166974FA0B74SessionOS.cls_temp
- <Package Folder>/files/####/592EB118024D-0001-0A07-166974FA0B74BeginSession.cls_temp
- <Package Folder>/files/####/592EB118024D-0001-0A07-166974FA0B74SessionApp.cls_temp
- <Package Folder>/files/####/592EB118024D-0001-0A07-166974FA0B74SessionDevice.cls_temp
- <Package Folder>/files/####/592EB118024D-0001-0A07-166974FA0B74SessionOS.cls_temp
- <Package Folder>/files/####/592EB11F0043-0001-0A76-166974FA0B74BeginSession.cls_temp
- <Package Folder>/files/####/592EB11F0043-0001-0A76-166974FA0B74SessionApp.cls_temp
- <Package Folder>/files/####/592EB11F0043-0001-0A76-166974FA0B74SessionDevice.cls_temp
- <Package Folder>/files/####/592EB11F0043-0001-0A76-166974FA0B74SessionOS.cls_temp
- <Package Folder>/files/####/592EB1250073-0001-0AAE-166974FA0B74BeginSession.cls_temp
- <Package Folder>/files/####/592EB1250073-0001-0AAE-166974FA0B74SessionApp.cls_temp
- <Package Folder>/files/####/592EB1250073-0001-0AAE-166974FA0B74SessionDevice.cls_temp
- <Package Folder>/files/####/592EB1250073-0001-0AAE-166974FA0B74SessionOS.cls_temp
- <Package Folder>/files/####/sa_6747f718-4c29-44fc-8e7c-904cc4ec9c29_1496232161844.tap
- <Package Folder>/files/####/session_analytics.tap
- <Package Folder>/files/####/session_analytics.tap.tmp
- <Package Folder>/files/sCnXHIvVK
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
- <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
- <Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
- <Package Folder>/shared_prefs/multidex.version.xml
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
