Android.Packed.19974

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.DownLoader.500.origin
Android.DownLoader.1846

Modified file system:

Creates the following files:

/data/data/####/shared_prefs/informator.xml
/data/data/####/files/crypted.zip
/data/data/####/shared_prefs/TwitterAdvertisingInfoPreferences.xml
/data/data/####/shared_prefs/mobproxy.xml.bak
/data/data/####/files/pfXaqkXPAw
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A37A034F-0001-082E-CB489FDB4109BeginSession.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_7acaead7-dd79-4bb6-89f0-a8f1727c2922_1485415294864.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
/data/data/####/files/lssfkpAawxllxSfv.dex
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A37A034F-0001-082E-CB489FDB4109SessionOS.cls_temp
/data/data/####/files/MrOBySbkws
/data/data/####/shared_prefs/mpcom.crashlytics.prefs.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A37A034F-0001-082E-CB489FDB4109SessionDevice.cls_temp
/data/data/####/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_9e5c1b25-1cd9-438a-af77-978f616e93c5_1485415291213.tap
/data/data/####/shared_prefs/####.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_13072672-0388-4033-b0ec-3e6cdc0ed52b_1485415291865.tap
/data/data/####/shared_prefs/installTime.xml
/data/data/####/shared_prefs/inf.storage.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
/data/data/####/shared_prefs/####dmnkpr.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
/data/data/####/shared_prefs/inf.storage.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_39b34f52-63c1-4233-afc4-4beabc9a880c_1485415290921.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_b905abef-c5ab-4ec6-84e9-5a13ebc7ffcf_1485415319094.tap
/data/data/####/files/cls.dex
/data/data/####/shared_prefs/infMrkPst.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A37A034F-0001-082E-CB489FDB4109SessionApp.cls_temp
/data/data/####/shared_prefs/####dmnkpr.xml.bak
/data/data/####/shared_prefs/mobproxy.xml
/data/data/####/shared_prefs/####.xml.bak