Android.Hidden.1903

Technical information

Malicious functions:

Removes its shortcut from the home screen.

Modified file system:

Creates the following files:

/data/data/####/shared_prefs/informator.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_d86c09f3-86de-4422-8017-2383eaedc00d_1485415597855.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_adde7dd4-4107-4124-8809-8d2501a21726_1485415632891.tap
/data/data/####/shared_prefs/TwitterAdvertisingInfoPreferences.xml
/data/data/####/shared_prefs/####dbadfhbgdefh38y7gb.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_80aebc5e-66b9-4aa4-94ee-f5f63b63fde7_1485415632815.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A4AB0081-0001-083E-14C9D5D14FA2SessionOS.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A4D002BF-0001-08A7-14C9D5D14FA2SessionOS.cls_temp
/data/data/####/files/.Fabric/io.fabric.sdk.android:fabric/mpcom.crashlytics.settings.json
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_04b9585e-9f9a-4214-8ba1-652e4ec27780_1485415595749.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A4AB0081-0001-083E-14C9D5D14FA2BeginSession.cls_temp
/data/data/####/shared_prefs/io.fabric.sdk.android:fabric:mpio.fabric.sdk.android.Onboarding.xml
/data/data/####/cls.dex
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A4AB0081-0001-083E-14C9D5D14FA2SessionApp.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
/data/data/####/shared_prefs/infMrkPst.xml
/data/data/####/shared_prefs/mpcom.crashlytics.prefs.xml
/data/data/####/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A4D002BF-0001-08A7-14C9D5D14FA2SessionApp.cls_temp
/data/data/####/shared_prefs/####dbadfhbgdefh38y7gb.xml
/data/data/####/shared_prefs/####.xml
/data/data/####/shared_prefs/installTime.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A4AB0081-0001-083E-14C9D5D14FA2SessionDevice.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
/data/data/####/shared_prefs/####dmnkpr.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A4AB0081-0001-083E-14C9D5D14FA2SessionUser.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A4D002BF-0001-08A7-14C9D5D14FA2BeginSession.cls_temp
/data/data/####/files/cls.dex
/data/data/####/files/opDpIFLHJo
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_1815d2e4-5e21-4693-a5a1-cd3935dd73aa_1485415597234.tap
/data/data/####/shared_prefs/####dmnkpr.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A4D002BF-0001-08A7-14C9D5D14FA2SessionDevice.cls_temp