Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.2.origin
Загружает из Интернета следующие детектируемые угрозы:
- Android.MobiDash.2.origin
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/app_app_apk/felfbr.dat.jar
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-1792577928.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-213993696.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes230502182.zip
- <Package Folder>/files/####/592E66660251-0001-0831-B97CF506D60DBeginSession.cls_temp
- <Package Folder>/files/####/592E66660251-0001-0831-B97CF506D60DSessionApp.cls_temp
- <Package Folder>/files/####/592E66660251-0001-0831-B97CF506D60DSessionDevice.cls_temp
- <Package Folder>/files/####/592E66660251-0001-0831-B97CF506D60DSessionOS.cls_temp
- <Package Folder>/files/####/592E6667035C-0001-0858-B97CF506D60DBeginSession.cls_temp
- <Package Folder>/files/####/592E6667035C-0001-0858-B97CF506D60DSessionApp.cls_temp
- <Package Folder>/files/####/592E6667035C-0001-0858-B97CF506D60DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6667035C-0001-0858-B97CF506D60DSessionOS.cls_temp
- <Package Folder>/files/####/592E666F0196-0001-0897-B97CF506D60DBeginSession.cls_temp
- <Package Folder>/files/####/592E666F0196-0001-0897-B97CF506D60DSessionApp.cls_temp
- <Package Folder>/files/####/592E666F0196-0001-0897-B97CF506D60DSessionDevice.cls_temp
- <Package Folder>/files/####/592E666F0196-0001-0897-B97CF506D60DSessionOS.cls_temp
- <Package Folder>/files/####/592E667601C4-0001-08BA-B97CF506D60DBeginSession.cls_temp
- <Package Folder>/files/####/592E667601C4-0001-08BA-B97CF506D60DSessionApp.cls_temp
- <Package Folder>/files/####/592E667601C4-0001-08BA-B97CF506D60DSessionDevice.cls_temp
- <Package Folder>/files/####/592E667601C4-0001-08BA-B97CF506D60DSessionOS.cls_temp
- <Package Folder>/files/####/592E6679030C-0001-08DB-B97CF506D60DBeginSession.cls_temp
- <Package Folder>/files/####/592E6679030C-0001-08DB-B97CF506D60DSessionApp.cls_temp
- <Package Folder>/files/####/592E6679030C-0001-08DB-B97CF506D60DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6679030C-0001-08DB-B97CF506D60DSessionOS.cls_temp
- <Package Folder>/files/####/592E667C0019-0001-0912-B97CF506D60DBeginSession.cls_temp
- <Package Folder>/files/####/592E667C0019-0001-0912-B97CF506D60DSessionApp.cls_temp
- <Package Folder>/files/####/592E6682013E-0001-092F-B97CF506D60DBeginSession.cls_temp
- <Package Folder>/files/####/592E6682013E-0001-092F-B97CF506D60DSessionApp.cls_temp
- <Package Folder>/files/####/592E6682013E-0001-092F-B97CF506D60DSessionDevice.cls_temp
- <Package Folder>/files/####/592E6682013E-0001-092F-B97CF506D60DSessionOS.cls_temp
- <Package Folder>/files/####/592E668801A4-0001-0954-B97CF506D60DBeginSession.cls_temp
- <Package Folder>/files/####/592E668801A4-0001-0954-B97CF506D60DSessionApp.cls_temp
- <Package Folder>/files/####/592E668801A4-0001-0954-B97CF506D60DSessionDevice.cls_temp
- <Package Folder>/files/####/592E668801A4-0001-0954-B97CF506D60DSessionOS.cls_temp
- <Package Folder>/files/####/592E668F02F2-0001-0979-B97CF506D60DBeginSession.cls_temp
- <Package Folder>/files/####/592E668F02F2-0001-0979-B97CF506D60DSessionApp.cls_temp
- <Package Folder>/files/####/592E668F02F2-0001-0979-B97CF506D60DSessionDevice.cls_temp
- <Package Folder>/files/####/592E668F02F2-0001-0979-B97CF506D60DSessionOS.cls_temp
- <Package Folder>/files/####/592E669503AE-0001-09AD-B97CF506D60DBeginSession.cls_temp
- <Package Folder>/files/####/592E669503AE-0001-09AD-B97CF506D60DSessionApp.cls_temp
- <Package Folder>/files/####/592E669503AE-0001-09AD-B97CF506D60DSessionDevice.cls_temp
- <Package Folder>/files/####/592E669503AE-0001-09AD-B97CF506D60DSessionOS.cls_temp
- <Package Folder>/files/####/592E669C0134-0001-09D5-B97CF506D60DBeginSession.cls_temp
- <Package Folder>/files/####/592E669C0134-0001-09D5-B97CF506D60DSessionApp.cls_temp
- <Package Folder>/files/####/592E669C0134-0001-09D5-B97CF506D60DSessionDevice.cls_temp
- <Package Folder>/files/####/592E669C0134-0001-09D5-B97CF506D60DSessionOS.cls_temp
- <Package Folder>/files/####/592E669E0176-0001-09F3-B97CF506D60DBeginSession.cls_temp
- <Package Folder>/files/####/592E669E0176-0001-09F3-B97CF506D60DSessionApp.cls_temp
- <Package Folder>/files/####/592E669E0176-0001-09F3-B97CF506D60DSessionDevice.cls_temp
- <Package Folder>/files/####/592E669E0176-0001-09F3-B97CF506D60DSessionOS.cls_temp
- <Package Folder>/files/####/592E669F0235-0001-0A12-B97CF506D60DBeginSession.cls_temp
- <Package Folder>/files/####/592E669F0235-0001-0A12-B97CF506D60DSessionApp.cls_temp
- <Package Folder>/files/####/592E669F0235-0001-0A12-B97CF506D60DSessionDevice.cls_temp
- <Package Folder>/files/####/592E669F0235-0001-0A12-B97CF506D60DSessionOS.cls_temp
- <Package Folder>/files/####/592E66A503D3-0001-0A71-B97CF506D60DBeginSession.cls_temp
- <Package Folder>/files/####/592E66A503D3-0001-0A71-B97CF506D60DSessionApp.cls_temp
- <Package Folder>/files/####/592E66A503D3-0001-0A71-B97CF506D60DSessionDevice.cls_temp
- <Package Folder>/files/####/592E66A503D3-0001-0A71-B97CF506D60DSessionOS.cls_temp
- <Package Folder>/files/####/sa_6d7cde61-b5f3-4ec5-b0c6-deaaefc87b11_1496213094652.tap
- <Package Folder>/files/####/session_analytics.tap
- <Package Folder>/files/####/session_analytics.tap.tmp
- <Package Folder>/files/IJJVpAsDf
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
- <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
- <Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
- <Package Folder>/shared_prefs/multidex.version.xml
Другие:
Запускает следующие shell-скрипты:
- <dexopt>
