Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.2.origin
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/app_app_apk/monster.dat.jar
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-1988482097.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes1513063667.zip
- <Package Folder>/files/####/5984694A01C4-0001-083B-809C0B236CDFBeginSession.cls_temp
- <Package Folder>/files/####/5984694A01C4-0001-083B-809C0B236CDFSessionApp.cls_temp
- <Package Folder>/files/####/5984694A01C4-0001-083B-809C0B236CDFSessionDevice.cls_temp
- <Package Folder>/files/####/5984694A01C4-0001-083B-809C0B236CDFSessionOS.cls_temp
- <Package Folder>/files/####/5984694B01C9-0001-085E-809C0B236CDFBeginSession.cls_temp
- <Package Folder>/files/####/5984694B01C9-0001-085E-809C0B236CDFSessionApp.cls_temp
- <Package Folder>/files/####/5984694B01C9-0001-085E-809C0B236CDFSessionDevice.cls_temp
- <Package Folder>/files/####/5984694B01C9-0001-085E-809C0B236CDFSessionOS.cls_temp
- <Package Folder>/files/####/5984694C00F5-0001-087E-809C0B236CDFBeginSession.cls_temp
- <Package Folder>/files/####/5984694C00F5-0001-087E-809C0B236CDFSessionApp.cls_temp
- <Package Folder>/files/####/5984694C00F5-0001-087E-809C0B236CDFSessionDevice.cls_temp
- <Package Folder>/files/####/5984694C00F5-0001-087E-809C0B236CDFSessionOS.cls_temp
- <Package Folder>/files/####/5984695200EF-0001-08A6-809C0B236CDFBeginSession.cls_temp
- <Package Folder>/files/####/5984695200EF-0001-08A6-809C0B236CDFSessionApp.cls_temp
- <Package Folder>/files/####/5984695200EF-0001-08A6-809C0B236CDFSessionDevice.cls_temp
- <Package Folder>/files/####/5984695200EF-0001-08A6-809C0B236CDFSessionOS.cls_temp
- <Package Folder>/files/####/5984695A03A4-0001-0912-809C0B236CDFBeginSession.cls_temp
- <Package Folder>/files/####/5984695A03A4-0001-0912-809C0B236CDFSessionApp.cls_temp
- <Package Folder>/files/####/5984695A03A4-0001-0912-809C0B236CDFSessionDevice.cls_temp
- <Package Folder>/files/####/5984695A03A4-0001-0912-809C0B236CDFSessionOS.cls_temp
- <Package Folder>/files/####/598469610040-0001-0943-809C0B236CDFBeginSession.cls_temp
- <Package Folder>/files/####/598469610040-0001-0943-809C0B236CDFSessionApp.cls_temp
- <Package Folder>/files/####/598469610040-0001-0943-809C0B236CDFSessionDevice.cls_temp
- <Package Folder>/files/####/598469610040-0001-0943-809C0B236CDFSessionOS.cls_temp
- <Package Folder>/files/####/598469670022-0001-096B-809C0B236CDFBeginSession.cls_temp
- <Package Folder>/files/####/598469670022-0001-096B-809C0B236CDFSessionApp.cls_temp
- <Package Folder>/files/####/598469670022-0001-096B-809C0B236CDFSessionDevice.cls_temp
- <Package Folder>/files/####/598469670022-0001-096B-809C0B236CDFSessionOS.cls_temp
- <Package Folder>/files/####/5984696D0140-0001-0993-809C0B236CDFBeginSession.cls_temp
- <Package Folder>/files/####/5984696D0140-0001-0993-809C0B236CDFSessionApp.cls_temp
- <Package Folder>/files/####/5984696D0140-0001-0993-809C0B236CDFSessionDevice.cls_temp
- <Package Folder>/files/####/5984696D0140-0001-0993-809C0B236CDFSessionOS.cls_temp
- <Package Folder>/files/####/5984697200B4-0001-09B7-809C0B236CDFBeginSession.cls_temp
- <Package Folder>/files/####/5984697200B4-0001-09B7-809C0B236CDFSessionApp.cls_temp
- <Package Folder>/files/####/5984697200B4-0001-09B7-809C0B236CDFSessionDevice.cls_temp
- <Package Folder>/files/####/5984697200B4-0001-09B7-809C0B236CDFSessionOS.cls_temp
- <Package Folder>/files/####/59846973000C-0001-09D6-809C0B236CDFBeginSession.cls_temp
- <Package Folder>/files/####/59846973000C-0001-09D6-809C0B236CDFSessionApp.cls_temp
- <Package Folder>/files/####/59846973000C-0001-09D6-809C0B236CDFSessionDevice.cls_temp
- <Package Folder>/files/####/59846973000C-0001-09D6-809C0B236CDFSessionOS.cls_temp
- <Package Folder>/files/####/59846973038E-0001-09F4-809C0B236CDFBeginSession.cls_temp
- <Package Folder>/files/####/59846973038E-0001-09F4-809C0B236CDFSessionApp.cls_temp
- <Package Folder>/files/####/5984697903A5-0001-0A15-809C0B236CDFBeginSession.cls_temp
- <Package Folder>/files/####/5984697903A5-0001-0A15-809C0B236CDFSessionApp.cls_temp
- <Package Folder>/files/####/5984697903A5-0001-0A15-809C0B236CDFSessionDevice.cls_temp
- <Package Folder>/files/####/5984697903A5-0001-0A15-809C0B236CDFSessionOS.cls_temp
- <Package Folder>/files/####/5984697E0225-0001-0A3A-809C0B236CDFBeginSession.cls_temp
- <Package Folder>/files/####/5984697E0225-0001-0A3A-809C0B236CDFSessionApp.cls_temp
- <Package Folder>/files/####/5984697E0225-0001-0A3A-809C0B236CDFSessionDevice.cls_temp
- <Package Folder>/files/####/5984697E0225-0001-0A3A-809C0B236CDFSessionOS.cls_temp
- <Package Folder>/files/####/59846985029A-0001-0AB9-809C0B236CDFBeginSession.cls_temp
- <Package Folder>/files/####/59846985029A-0001-0AB9-809C0B236CDFSessionApp.cls_temp
- <Package Folder>/files/####/59846985029A-0001-0AB9-809C0B236CDFSessionDevice.cls_temp
- <Package Folder>/files/####/59846985029A-0001-0AB9-809C0B236CDFSessionOS.cls_temp
- <Package Folder>/files/####/5984698C0033-0001-0B04-809C0B236CDFBeginSession.cls_temp
- <Package Folder>/files/####/5984698C0033-0001-0B04-809C0B236CDFSessionApp.cls_temp
- <Package Folder>/files/####/5984698C0033-0001-0B04-809C0B236CDFSessionDevice.cls_temp
- <Package Folder>/files/####/5984698C0033-0001-0B04-809C0B236CDFSessionOS.cls_temp
- <Package Folder>/files/####/sa_08287ef3-8bb4-4946-9538-73c609a4e7ee_1501849930501.tap
- <Package Folder>/files/####/session_analytics.tap
- <Package Folder>/files/####/session_analytics.tap.tmp
- <Package Folder>/files/RgGyVpJaT
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
- <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
- <Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
- <Package Folder>/shared_prefs/multidex.version.xml
Другие:
Загружает динамические библиотеки:
- RgGyVpJaT
- realm-jni
