Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.2.origin
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/app_app_apk/ptbyaskolesa.dat.jar
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-1041562151.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes793269485.zip
- <Package Folder>/files/####/5979A2380182-0001-0846-A6833C0356DBBeginSession.cls_temp
- <Package Folder>/files/####/5979A2380182-0001-0846-A6833C0356DBSessionApp.cls_temp
- <Package Folder>/files/####/5979A2380182-0001-0846-A6833C0356DBSessionDevice.cls_temp
- <Package Folder>/files/####/5979A2380182-0001-0846-A6833C0356DBSessionOS.cls_temp
- <Package Folder>/files/####/5979A2390105-0001-0868-A6833C0356DBBeginSession.cls_temp
- <Package Folder>/files/####/5979A2390105-0001-0868-A6833C0356DBSessionApp.cls_temp
- <Package Folder>/files/####/5979A2390105-0001-0868-A6833C0356DBSessionDevice.cls_temp
- <Package Folder>/files/####/5979A2390105-0001-0868-A6833C0356DBSessionOS.cls_temp
- <Package Folder>/files/####/5979A2400055-0001-08A7-A6833C0356DBBeginSession.cls_temp
- <Package Folder>/files/####/5979A2400055-0001-08A7-A6833C0356DBSessionApp.cls_temp
- <Package Folder>/files/####/5979A2400055-0001-08A7-A6833C0356DBSessionDevice.cls_temp
- <Package Folder>/files/####/5979A2400055-0001-08A7-A6833C0356DBSessionOS.cls_temp
- <Package Folder>/files/####/5979A246022D-0001-08CB-A6833C0356DBBeginSession.cls_temp
- <Package Folder>/files/####/5979A246022D-0001-08CB-A6833C0356DBSessionApp.cls_temp
- <Package Folder>/files/####/5979A246022D-0001-08CB-A6833C0356DBSessionDevice.cls_temp
- <Package Folder>/files/####/5979A246022D-0001-08CB-A6833C0356DBSessionOS.cls_temp
- <Package Folder>/files/####/5979A24C02D0-0001-08ED-A6833C0356DBBeginSession.cls_temp
- <Package Folder>/files/####/5979A24C02D0-0001-08ED-A6833C0356DBSessionApp.cls_temp
- <Package Folder>/files/####/5979A24C02D0-0001-08ED-A6833C0356DBSessionDevice.cls_temp
- <Package Folder>/files/####/5979A24C02D0-0001-08ED-A6833C0356DBSessionOS.cls_temp
- <Package Folder>/files/####/5979A253014E-0001-090B-A6833C0356DBBeginSession.cls_temp
- <Package Folder>/files/####/5979A253014E-0001-090B-A6833C0356DBSessionApp.cls_temp
- <Package Folder>/files/####/5979A253014E-0001-090B-A6833C0356DBSessionDevice.cls_temp
- <Package Folder>/files/####/5979A253014E-0001-090B-A6833C0356DBSessionOS.cls_temp
- <Package Folder>/files/####/5979A25A01B5-0001-0933-A6833C0356DBBeginSession.cls_temp
- <Package Folder>/files/####/5979A25A01B5-0001-0933-A6833C0356DBSessionApp.cls_temp
- <Package Folder>/files/####/5979A25A01B5-0001-0933-A6833C0356DBSessionDevice.cls_temp
- <Package Folder>/files/####/5979A25A01B5-0001-0933-A6833C0356DBSessionOS.cls_temp
- <Package Folder>/files/####/5979A26003B0-0001-0954-A6833C0356DBBeginSession.cls_temp
- <Package Folder>/files/####/5979A26003B0-0001-0954-A6833C0356DBSessionApp.cls_temp
- <Package Folder>/files/####/5979A26003B0-0001-0954-A6833C0356DBSessionDevice.cls_temp
- <Package Folder>/files/####/5979A26003B0-0001-0954-A6833C0356DBSessionOS.cls_temp
- <Package Folder>/files/####/5979A26702A8-0001-0978-A6833C0356DBBeginSession.cls_temp
- <Package Folder>/files/####/5979A26702A8-0001-0978-A6833C0356DBSessionApp.cls_temp
- <Package Folder>/files/####/5979A26702A8-0001-0978-A6833C0356DBSessionDevice.cls_temp
- <Package Folder>/files/####/5979A26702A8-0001-0978-A6833C0356DBSessionOS.cls_temp
- <Package Folder>/files/####/5979A26D0278-0001-0999-A6833C0356DBBeginSession.cls_temp
- <Package Folder>/files/####/5979A26D0278-0001-0999-A6833C0356DBSessionApp.cls_temp
- <Package Folder>/files/####/5979A26D0278-0001-0999-A6833C0356DBSessionDevice.cls_temp
- <Package Folder>/files/####/5979A26D0278-0001-0999-A6833C0356DBSessionOS.cls_temp
- <Package Folder>/files/####/5979A2730219-0001-09BF-A6833C0356DBBeginSession.cls_temp
- <Package Folder>/files/####/5979A2730219-0001-09BF-A6833C0356DBSessionApp.cls_temp
- <Package Folder>/files/####/5979A2730219-0001-09BF-A6833C0356DBSessionDevice.cls_temp
- <Package Folder>/files/####/5979A2730219-0001-09BF-A6833C0356DBSessionOS.cls_temp
- <Package Folder>/files/####/5979A2790266-0001-0A1A-A6833C0356DBBeginSession.cls_temp
- <Package Folder>/files/####/5979A2790266-0001-0A1A-A6833C0356DBSessionApp.cls_temp
- <Package Folder>/files/####/5979A2790266-0001-0A1A-A6833C0356DBSessionDevice.cls_temp
- <Package Folder>/files/####/5979A2790266-0001-0A1A-A6833C0356DBSessionOS.cls_temp
- <Package Folder>/files/####/sa_482a9a8f-ab8e-4b0b-8485-5c0f8b331e59_1501143608412.tap
- <Package Folder>/files/####/session_analytics.tap
- <Package Folder>/files/####/session_analytics.tap.tmp
- <Package Folder>/files/jLSovSkfL
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
- <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
- <Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
- <Package Folder>/shared_prefs/multidex.version.xml
Другие:
Загружает динамические библиотеки:
- jLSovSkfL
- realm-jni
