Android.Packed.19970

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.DownLoader.500.origin
Android.DownLoader.1846

Modified file system:

Creates the following files:

/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_1f911957-106e-4385-aee3-2a7368a57e39_1485423467121.tap
/data/data/####/shared_prefs/informator.xml
/data/data/####/files/BGgAznKTgr
/data/data/####/files/crypted.zip
/data/data/####/shared_prefs/TwitterAdvertisingInfoPreferences.xml
/data/data/####/shared_prefs/mobproxy.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_eb2e7e32-af50-4568-b0cc-3ade34326553_1485423488824.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_6a180e99-5a54-4dac-8b67-f1caafceaacc_1485423463639.tap
/data/data/####/files/XNLqOnDlcsfZSSfQ.dex
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889C3670069-0001-0812-0AFA6844F306SessionDevice.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889C3670069-0001-0812-0AFA6844F306BeginSession.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
/data/data/####/shared_prefs/infMrkPst.xml
/data/data/####/shared_prefs/mpcom.crashlytics.prefs.xml
/data/data/####/shared_prefs/inf.storage.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_d17c41aa-28a1-4955-8ff6-0b05605d2cf4_1485423463487.tap
/data/data/####/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml
/data/data/####/shared_prefs/####.xml
/data/data/####/shared_prefs/installTime.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_b6ae447e-76ca-4748-87be-5005b60912df_1485423466060.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889C3670069-0001-0812-0AFA6844F306SessionApp.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
/data/data/####/shared_prefs/####dmnkpr.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
/data/data/####/shared_prefs/inf.storage.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_08a62712-9ae5-4544-896b-215d5bd9378a_1485423463698.tap
/data/data/####/files/cls.dex
/data/data/####/shared_prefs/####dmnkpr.xml.bak
/data/data/####/shared_prefs/mobproxy.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889C3670069-0001-0812-0AFA6844F306SessionOS.cls_temp
/data/data/####/shared_prefs/####.xml.bak