Android.Packed.20015

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.DownLoader.500.origin
Android.DownLoader.1846

Modified file system:

Creates the following files:

/data/data/####/shared_prefs/informator.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_89638100-719a-4946-a550-c6048917bc23_1485418225047.tap
/data/data/####/files/crypted.zip
/data/data/####/shared_prefs/TwitterAdvertisingInfoPreferences.xml
/data/data/####/shared_prefs/mobproxy.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_c6e20bec-62ce-4240-90e3-ec74cce6097e_1485418224741.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889AEF002B7-0001-082A-C79471A0B85BSessionDevice.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
/data/data/####/files/LthNDpjfzx
/data/data/####/shared_prefs/infMrkPst.xml
/data/data/####/shared_prefs/mpcom.crashlytics.prefs.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_d1ea22f9-242c-4b90-9b6b-c02da25804d0_1485418226131.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889AEF002B7-0001-082A-C79471A0B85BSessionOS.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_d0215bd5-c573-40d8-af99-218596f6e9b8_1485418228711.tap
/data/data/####/shared_prefs/inf.storage.xml.bak
/data/data/####/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml
/data/data/####/files/CpPitVKRJSMmQsdO.dex
/data/data/####/shared_prefs/####.xml
/data/data/####/shared_prefs/installTime.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
/data/data/####/shared_prefs/####dmnkpr.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_4fcfba63-d5ed-4d9f-8137-4cc8b2d6a0df_1485418254787.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889AEF002B7-0001-082A-C79471A0B85BSessionApp.cls_temp
/data/data/####/shared_prefs/inf.storage.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889AEF002B7-0001-082A-C79471A0B85BBeginSession.cls_temp
/data/data/####/files/cls.dex
/data/data/####/shared_prefs/####dmnkpr.xml.bak
/data/data/####/shared_prefs/mobproxy.xml
/data/data/####/files/FbBDaqdKTI
/data/data/####/shared_prefs/####.xml.bak