Android.Packed.25579

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.DownLoader.203.origin

Downloads the following detected threats from the Web:

Android.DownLoader.203.origin

Modified file system:

Creates the following files:

<Package Folder>/app_Parse/####/CachedCommand_0000015c5d3fa5a7_00000000_1069955533
<Package Folder>/app_Parse/####/CachedCommand_0000015c5d3faa6f_00000000_1069955533
<Package Folder>/app_Parse/####/CachedCommand_0000015c5d3faded_00000001_-363648989
<Package Folder>/app_Parse/####/local_b591458a20738189
<Package Folder>/app_Parse/####/local_b63696e46ba1dc72
<Package Folder>/app_Parse/applicationId
<Package Folder>/app_Parse/installationId
<Package Folder>/app_Parse/pushState
<Package Folder>/app_sslcache/api.parse.com.443
<Package Folder>/cache/####/journal.tmp
<Package Folder>/databases/google_analytics_v4.db-journal
<Package Folder>/databases/helloAndroid.db-journal
<Package Folder>/files/####/592E665203D5-0001-0846-C76D2B8B6ACABeginSession.cls_temp
<Package Folder>/files/####/592E665203D5-0001-0846-C76D2B8B6ACASessionApp.cls_temp
<Package Folder>/files/####/592E665203D5-0001-0846-C76D2B8B6ACASessionDevice.cls_temp
<Package Folder>/files/####/592E665203D5-0001-0846-C76D2B8B6ACASessionOS.cls_temp
<Package Folder>/files/####/592E665203D5-0001-0846-C76D2B8B6ACASessionUser.cls_temp
<Package Folder>/files/####/592E665300B7-0002-0846-C76D2B8B6ACABeginSession.cls_temp
<Package Folder>/files/####/592E665300B7-0002-0846-C76D2B8B6ACASessionApp.cls_temp
<Package Folder>/files/####/592E665300B7-0002-0846-C76D2B8B6ACASessionDevice.cls_temp
<Package Folder>/files/####/592E665300B7-0002-0846-C76D2B8B6ACASessionOS.cls_temp
<Package Folder>/files/####/com.crashlytics.settings.json
<Package Folder>/files/####/initialization_marker
<Package Folder>/files/####/sa_5cc88b0c-83af-4d80-8776-f601155647a6_1496213075110.tap
<Package Folder>/files/####/session_analytics.tap
<Package Folder>/files/####/session_analytics.tap.tmp
<Package Folder>/files/.FlurrySenderIndex.info.AnalyticsData_DZH5DHNHBF984FDP3983_170
<Package Folder>/files/.FlurrySenderIndex.info.AnalyticsMain
<Package Folder>/files/.flurryagent.76da2d23
<Package Folder>/files/.flurrydatasenderblock.94ca1360-cd62-44d5-ac2d-86c59fa62a89
<Package Folder>/files/gaClientId
<Package Folder>/files/q.dex (deleted)
<Package Folder>/files/q.jar
<Package Folder>/files/tempq.jar
<Package Folder>/shared_prefs/appconfigpre.xml
<Package Folder>/shared_prefs/com.twitter.sdk.android;analytics;com.crashlytics.android.internal.r.xml
<Package Folder>/shared_prefs/com.twitter.sdk.android;analytics;com.crashlytics.prefs.xml
<Package Folder>/shared_prefs/com.twitter.sdk.android;crashlytics;TwitterAdvertisingInfoPreferences.xml
<Package Folder>/shared_prefs/com.twitter.sdk.android;crashlytics;com.crashlytics.prefs.xml
<Package Folder>/shared_prefs/com.twitter.sdk.android;foundation;TwitterAdvertisingInfoPreferences.xml
<Package Folder>/shared_prefs/com.twitter.sdk.android;foundation;com.crashlytics.android.internal.l.xml
<Package Folder>/shared_prefs/com.twitter.sdk.android;foundation;com.crashlytics.prefs.xml
<Package Folder>/shared_prefs/config.xml
<Package Folder>/shared_prefs/config.xml.bak
<Package Folder>/shared_prefs/myspfrojni_gn.xml
<Package Folder>/shared_prefs/oconfig.xml
<Package Folder>/shared_prefs/oconfig.xml.bak