Android.Packed.20124

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.DownLoader.1846
Android.DownLoader.500.origin

Modified file system:

Creates the following files:

/data/data/####/shared_prefs/informator.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_8de6ecdc-d45d-4783-92f3-b75ab2b239b6_1485418230453.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_27c8d886-9b78-4e97-8259-69d2abf8f017_1485418230488.tap
/data/data/####/files/crypted.zip
/data/data/####/shared_prefs/TwitterAdvertisingInfoPreferences.xml
/data/data/####/shared_prefs/mobproxy.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889AEF50038-0001-082D-2C5327218338SessionOS.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_3711eb1e-db14-4737-b4ef-c877e93df699_1485418251210.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
/data/data/####/shared_prefs/infMrkPst.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_b095a1a3-e916-4d17-9b09-9538adba4c50_1485418229966.tap
/data/data/####/files/BYNMQZdfwOTtAtJH.dex
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_564ddc3e-dccc-43bb-a737-6aafbf4d9fb5_1485418233280.tap
/data/data/####/shared_prefs/mpcom.crashlytics.prefs.xml
/data/data/####/shared_prefs/inf.storage.xml.bak
/data/data/####/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml
/data/data/####/shared_prefs/####.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889AEF50038-0001-082D-2C5327218338SessionDevice.cls_temp
/data/data/####/shared_prefs/####.xml
/data/data/####/shared_prefs/installTime.xml
/data/data/####/files/OgtkSJAluV
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
/data/data/####/shared_prefs/####dmnkpr.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_a131cdd0-6610-4d59-952d-c61db6420384_1485418232262.tap
/data/data/####/shared_prefs/inf.storage.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889AEF50038-0001-082D-2C5327218338BeginSession.cls_temp
/data/data/####/files/cls.dex
/data/data/####/shared_prefs/####dmnkpr.xml.bak
/data/data/####/shared_prefs/mobproxy.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889AEF50038-0001-082D-2C5327218338SessionApp.cls_temp