Android.Hidden.1902

Technical information

Malicious functions:

Removes its shortcut from the home screen.

Modified file system:

Creates the following files:

/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A5B5012D-0001-0896-E538D04B63A0BeginSession.cls_temp
/data/data/####/shared_prefs/informator.xml
/data/data/####/shared_prefs/####dbadfhbgdefh38y7gb.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A5B5012D-0001-0896-E538D04B63A0SessionDevice.cls_temp
/data/data/####/shared_prefs/TwitterAdvertisingInfoPreferences.xml
/data/data/####/shared_prefs/####dbadfhbgdefh38y7gb.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A5B5012D-0001-0896-E538D04B63A0SessionApp.cls_temp
/data/data/####/files/.Fabric/io.fabric.sdk.android:fabric/mpcom.crashlytics.settings.json
/data/data/####/shared_prefs/io.fabric.sdk.android:fabric:mpio.fabric.sdk.android.Onboarding.xml
/data/data/####/shared_prefs/installTime.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_b644601b-a687-432e-ba6e-7e9a2c7cffd7_1485415861429.tap
/data/data/####/shared_prefs/infMrkPst.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_dd58be64-ed96-4d22-a601-54e740413213_1485415839168.tap
/data/data/####/shared_prefs/mpcom.crashlytics.prefs.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A59F0034-0001-0837-E538D04B63A0SessionDevice.cls_temp
/data/data/####/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A59F0034-0001-0837-E538D04B63A0SessionOS.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_2119254c-4a87-4201-8fb6-f2fb4a010f07_1485415839519.tap
/data/data/####/shared_prefs/####.xml
/data/data/####/cls.dex
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A59F0034-0001-0837-E538D04B63A0SessionApp.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A59F0034-0001-0837-E538D04B63A0BeginSession.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
/data/data/####/shared_prefs/####dmnkpr.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A5B5012D-0001-0896-E538D04B63A0SessionOS.cls_temp
/data/data/####/files/cls.dex
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A59F0034-0001-0837-E538D04B63A0SessionUser.cls_temp
/data/data/####/shared_prefs/####dmnkpr.xml.bak