Android.Packed.19955

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.DownLoader.500.origin
Android.DownLoader.1846

Modified file system:

Creates the following files:

/data/data/####/shared_prefs/informator.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_679401f9-07a3-46c7-9650-d5d7336b6623_1485418094065.tap
/data/data/####/files/crypted.zip
/data/data/####/shared_prefs/TwitterAdvertisingInfoPreferences.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_1a849876-437a-4b8a-a400-b65fa50f3827_1485418096787.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889AE6C030C-0001-084D-F458EC8AD286SessionApp.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_a6c9af08-8492-4858-99d4-b648d563134a_1485418092838.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889AE6C030C-0001-084D-F458EC8AD286BeginSession.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_4091a38a-11bd-4ec0-95b5-a25c6c609ac9_1485418123225.tap
/data/data/####/shared_prefs/infMrkPst.xml
/data/data/####/shared_prefs/mpcom.crashlytics.prefs.xml
/data/data/####/shared_prefs/inf.storage.xml.bak
/data/data/####/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml
/data/data/####/shared_prefs/####.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
/data/data/####/shared_prefs/installTime.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889AE6C030C-0001-084D-F458EC8AD286SessionOS.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_09e174c2-a5d8-4bfa-997c-75c78418146d_1485418093140.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
/data/data/####/shared_prefs/####dmnkpr.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
/data/data/####/shared_prefs/inf.storage.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889AE6C030C-0001-084D-F458EC8AD286SessionDevice.cls_temp
/data/data/####/files/cls.dex
/data/data/####/shared_prefs/####dmnkpr.xml.bak
/data/data/####/shared_prefs/####.xml.bak