Android.Packed.21418

Added to the Dr.Web virus database: 2017-05-11

Virus description added: 2017-05-11

Malicious functions:

Executes code of the following detected threats:

Modified file system:

Creates the following files:

Miscellaneous:

Executes next shell scripts:

/system/bin/dexopt --dex 27 44 40 30568 /data/data/####/files/XNLkQhSJZalsFRPudynamicloader.jar 1252752641 -371938044 45 /system/framework/core.jar /system/framework/core-junit.jar /system/framework/bouncycastle.jar /system/framework/ext.jar /s
/system/bin/dexopt --dex 27 47 40 35056 /data/data/####/files/grPzjHJuHfphKoYmbt.jar 1250721955 -1090894027 45 /system/framework/core.jar /system/framework/core-junit.jar /system/framework/bouncycastle.jar /system/framework/ext.jar /system/fram
/system/bin/dexopt --dex 27 43 40 883160 /data/data/####/files/SUqwojBsruhxdYTxlala.jar 1252752653 -866399229 45 /system/framework/core.jar /system/framework/core-junit.jar /system/framework/bouncycastle.jar /system/framework/ext.jar /system/fr
/system/bin/dexopt --dex 27 44 40 1220 /data/data/####/files/CKJwauvgFOIFpUIyzxc.jar 1252752653 1621607479 45 /system/framework/core.jar /system/framework/core-junit.jar /system/framework/bouncycastle.jar /system/framework/ext.jar /system/frame

Contains functionality to send SMS messages automatically.