Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.MobiDash.1.origin
Modified file system:
Creates the following files:
- /data/data/####/files/file
- /data/data/####/shared_prefs/####_preferences.xml
- /data/data/####/shared_prefs/admob.xml
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/shared_prefs/com.google.android.gms.measurement.prefs.xml.bak
- /data/data/####/databases/com.google.android.gms.ads.db/localstorage/https_googleads.g.doubleclick.net_0.localstorage-journal
- /data/data/####/no_backup/com.google.android.gms.appid-no-backup
- /data/data/####/databases/webview.db-journal
- /data/data/####/app_app_apk/detskieskazki.dat.jar
- /data/data/####/shared_prefs/multidex.version.xml
- /data/data/####/cache/1460683162801.jar
- /data/data/####/code_cache/secondary-dexes/tmp-####-1.apk.classes731779361.zip
- /data/data/####/shared_prefs/####_preferences.xml.bak
- /data/data/####/shared_prefs/mysettings.xml
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/1460683162801.tmp
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/shared_prefs/com.google.android.gms.measurement.prefs.xml
- /data/data/####/code_cache/secondary-dexes/MultiDex.lock
- /data/data/####/cache/ApplicationCache.db-journal
- /data/data/####/cache/1460683162801.dex
- /data/data/####/shared_prefs/com.google.android.gms.appid.xml
- /data/data/####/cache/webviewCacheChromium/index
Miscellaneous:
Executes next shell scripts:
- /system/bin/dexopt --dex 27 41 40 1204984 /data/data/####/code_cache/secondary-dexes/####-1.apk.classes2.zip 2168832 -1149960272 45 /system/framework/core.jar /system/framework/core-junit.jar /system/frame
- /system/bin/dexopt --dex 27 40 40 276780 /data/data/####/app_app_apk/detskieskazki.dat.jar 1252233469 -20617408 45 /system/framework/core.jar /system/framework/core-junit.jar /system/framework/bouncycastle.jar /system/framework/ex
- /system/bin/dexopt --dex 27 48 40 10592 /data/data/####/cache/1460683162801.jar 1008795648 -1962367377 45 /system/framework/core.jar /system/framework/core-junit.jar /system/framework/bouncycastle.jar /system/framework/ext.jar /sy
Uses administrator priveleges.
Contains functionality to send SMS messages automatically.
