Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.MobiDash.2.origin
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/app_app_apk/halloween.dat.jar
- <Package Folder>/code_cache/####/MultiDex.lock
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-105083858.zip
- <Package Folder>/code_cache/####/tmp-<Package>-1.apk.classes-1603557530.zip
- <Package Folder>/files/####/598466A10249-0001-0842-6F36C3FF1CC5BeginSession.cls_temp
- <Package Folder>/files/####/598466A10249-0001-0842-6F36C3FF1CC5SessionApp.cls_temp
- <Package Folder>/files/####/598466A10249-0001-0842-6F36C3FF1CC5SessionDevice.cls_temp
- <Package Folder>/files/####/598466A10249-0001-0842-6F36C3FF1CC5SessionOS.cls_temp
- <Package Folder>/files/####/598466A2031D-0001-0865-6F36C3FF1CC5BeginSession.cls_temp
- <Package Folder>/files/####/598466A2031D-0001-0865-6F36C3FF1CC5SessionApp.cls_temp
- <Package Folder>/files/####/598466A2031D-0001-0865-6F36C3FF1CC5SessionDevice.cls_temp
- <Package Folder>/files/####/598466A2031D-0001-0865-6F36C3FF1CC5SessionOS.cls_temp
- <Package Folder>/files/####/598466A80005-0001-08A1-6F36C3FF1CC5BeginSession.cls_temp
- <Package Folder>/files/####/598466A80005-0001-08A1-6F36C3FF1CC5SessionApp.cls_temp
- <Package Folder>/files/####/598466A80005-0001-08A1-6F36C3FF1CC5SessionDevice.cls_temp
- <Package Folder>/files/####/598466A80005-0001-08A1-6F36C3FF1CC5SessionOS.cls_temp
- <Package Folder>/files/####/598466AF0195-0001-08F6-6F36C3FF1CC5BeginSession.cls_temp
- <Package Folder>/files/####/598466AF0195-0001-08F6-6F36C3FF1CC5SessionApp.cls_temp
- <Package Folder>/files/####/598466AF0195-0001-08F6-6F36C3FF1CC5SessionDevice.cls_temp
- <Package Folder>/files/####/598466AF0195-0001-08F6-6F36C3FF1CC5SessionOS.cls_temp
- <Package Folder>/files/####/598466B601AD-0001-091B-6F36C3FF1CC5BeginSession.cls_temp
- <Package Folder>/files/####/598466B601AD-0001-091B-6F36C3FF1CC5SessionApp.cls_temp
- <Package Folder>/files/####/598466B601AD-0001-091B-6F36C3FF1CC5SessionDevice.cls_temp
- <Package Folder>/files/####/598466B601AD-0001-091B-6F36C3FF1CC5SessionOS.cls_temp
- <Package Folder>/files/####/598466BD02D8-0001-093E-6F36C3FF1CC5BeginSession.cls_temp
- <Package Folder>/files/####/598466BD02D8-0001-093E-6F36C3FF1CC5SessionApp.cls_temp
- <Package Folder>/files/####/598466BD02D8-0001-093E-6F36C3FF1CC5SessionDevice.cls_temp
- <Package Folder>/files/####/598466BD02D8-0001-093E-6F36C3FF1CC5SessionOS.cls_temp
- <Package Folder>/files/####/598466C4004E-0001-0965-6F36C3FF1CC5BeginSession.cls_temp
- <Package Folder>/files/####/598466C4004E-0001-0965-6F36C3FF1CC5SessionApp.cls_temp
- <Package Folder>/files/####/598466C4004E-0001-0965-6F36C3FF1CC5SessionDevice.cls_temp
- <Package Folder>/files/####/598466C4004E-0001-0965-6F36C3FF1CC5SessionOS.cls_temp
- <Package Folder>/files/####/598466C800CD-0001-0985-6F36C3FF1CC5BeginSession.cls_temp
- <Package Folder>/files/####/598466C800CD-0001-0985-6F36C3FF1CC5SessionApp.cls_temp
- <Package Folder>/files/####/598466C800CD-0001-0985-6F36C3FF1CC5SessionDevice.cls_temp
- <Package Folder>/files/####/598466C800CD-0001-0985-6F36C3FF1CC5SessionOS.cls_temp
- <Package Folder>/files/####/598466C900C2-0001-09A4-6F36C3FF1CC5BeginSession.cls_temp
- <Package Folder>/files/####/598466C900C2-0001-09A4-6F36C3FF1CC5SessionApp.cls_temp
- <Package Folder>/files/####/598466C900C2-0001-09A4-6F36C3FF1CC5SessionDevice.cls_temp
- <Package Folder>/files/####/598466C900C2-0001-09A4-6F36C3FF1CC5SessionOS.cls_temp
- <Package Folder>/files/####/598466D0019D-0001-09F0-6F36C3FF1CC5BeginSession.cls_temp
- <Package Folder>/files/####/598466D0019D-0001-09F0-6F36C3FF1CC5SessionApp.cls_temp
- <Package Folder>/files/####/598466D0019D-0001-09F0-6F36C3FF1CC5SessionDevice.cls_temp
- <Package Folder>/files/####/598466D0019D-0001-09F0-6F36C3FF1CC5SessionOS.cls_temp
- <Package Folder>/files/####/598466D20257-0001-0A0F-6F36C3FF1CC5BeginSession.cls_temp
- <Package Folder>/files/####/598466D20257-0001-0A0F-6F36C3FF1CC5SessionApp.cls_temp
- <Package Folder>/files/####/598466D20257-0001-0A0F-6F36C3FF1CC5SessionDevice.cls_temp
- <Package Folder>/files/####/598466D20257-0001-0A0F-6F36C3FF1CC5SessionOS.cls_temp
- <Package Folder>/files/####/598466D3027D-0001-0A2E-6F36C3FF1CC5BeginSession.cls_temp
- <Package Folder>/files/####/598466D3027D-0001-0A2E-6F36C3FF1CC5SessionApp.cls_temp
- <Package Folder>/files/####/598466D3027D-0001-0A2E-6F36C3FF1CC5SessionDevice.cls_temp
- <Package Folder>/files/####/598466D3027D-0001-0A2E-6F36C3FF1CC5SessionOS.cls_temp
- <Package Folder>/files/####/598466DA01C5-0001-0A6C-6F36C3FF1CC5BeginSession.cls_temp
- <Package Folder>/files/####/598466DA01C5-0001-0A6C-6F36C3FF1CC5SessionApp.cls_temp
- <Package Folder>/files/####/598466DA01C5-0001-0A6C-6F36C3FF1CC5SessionDevice.cls_temp
- <Package Folder>/files/####/598466DA01C5-0001-0A6C-6F36C3FF1CC5SessionOS.cls_temp
- <Package Folder>/files/####/598466E001E6-0001-0ACA-6F36C3FF1CC5BeginSession.cls_temp
- <Package Folder>/files/####/598466E001E6-0001-0ACA-6F36C3FF1CC5SessionApp.cls_temp
- <Package Folder>/files/####/598466E001E6-0001-0ACA-6F36C3FF1CC5SessionDevice.cls_temp
- <Package Folder>/files/####/598466E001E6-0001-0ACA-6F36C3FF1CC5SessionOS.cls_temp
- <Package Folder>/files/####/598466E70228-0001-0AFA-6F36C3FF1CC5BeginSession.cls_temp
- <Package Folder>/files/####/598466E70228-0001-0AFA-6F36C3FF1CC5SessionApp.cls_temp
- <Package Folder>/files/####/598466E70228-0001-0AFA-6F36C3FF1CC5SessionDevice.cls_temp
- <Package Folder>/files/####/598466E70228-0001-0AFA-6F36C3FF1CC5SessionOS.cls_temp
- <Package Folder>/files/####/sa_3adb8a66-d76e-4608-9df4-4f1ae176b84a_1501849249651.tap
- <Package Folder>/files/####/session_analytics.tap
- <Package Folder>/files/####/session_analytics.tap.tmp
- <Package Folder>/files/FGvqwHGMH
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/TwitterAdvertisingInfoPreferences.xml
- <Package Folder>/shared_prefs/com.crashlytics.prefs.xml
- <Package Folder>/shared_prefs/com.crashlytics.sdk.android;answers;settings.xml
- <Package Folder>/shared_prefs/multidex.version.xml
Другие:
Загружает динамические библиотеки:
- FGvqwHGMH
- realm-jni
