Android.Packed.19986

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.DownLoader.500.origin
Android.DownLoader.1846

Modified file system:

Creates the following files:

/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A7FA0188-0001-0830-11964F699C19BeginSession.cls_temp
/data/data/####/shared_prefs/informator.xml
/data/data/####/files/kUEHNqKfSv
/data/data/####/files/crypted.zip
/data/data/####/shared_prefs/TwitterAdvertisingInfoPreferences.xml
/data/data/####/shared_prefs/mobproxy.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A7FA0188-0001-0830-11964F699C19SessionDevice.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_8430609d-6f05-4660-8398-8469a2ae3619_1485416443161.tap
/data/data/####/shared_prefs/mpcom.crashlytics.prefs.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_589baf6d-18ea-41ae-a3c4-df466495be17_1485416443672.tap
/data/data/####/files/FKRTATpENVdGfVqE.dex
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
/data/data/####/shared_prefs/infMrkPst.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_f3464221-2734-4ed1-bd1f-a86824753b82_1485416474408.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A7FA0188-0001-0830-11964F699C19SessionApp.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A7FA0188-0001-0830-11964F699C19SessionOS.cls_temp
/data/data/####/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml
/data/data/####/shared_prefs/####.xml
/data/data/####/shared_prefs/installTime.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
/data/data/####/shared_prefs/####dmnkpr.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
/data/data/####/shared_prefs/inf.storage.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_a5591663-544c-4cad-b74c-2dc7d99fb791_1485416446404.tap
/data/data/####/files/cls.dex
/data/data/####/shared_prefs/####dmnkpr.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_27b3b890-cd86-437b-95a2-9f055f93f0e3_1485416443095.tap
/data/data/####/shared_prefs/mobproxy.xml
/data/data/####/shared_prefs/####.xml.bak