Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.Banker.1373.origin
Threat detection based on machine learning.
File system changes:
Creates the following files:
- /data/data/####/Anonymous-DexFile@319077421.vdex
- /data/data/####/cxwerkfhqj
- /data/data/####/lbjamspkrn.xml
- /data/data/####/s0.json
- /data/data/####/s1.json
- /data/data/####/s10.json
- /data/data/####/s11.json
- /data/data/####/s12.json
- /data/data/####/s13.json
- /data/data/####/s14.json
- /data/data/####/s15.json
- /data/data/####/s16.json
- /data/data/####/s17.json
- /data/data/####/s18.json
- /data/data/####/s19.json
- /data/data/####/s2.json
- /data/data/####/s20.json
- /data/data/####/s21.json
- /data/data/####/s22.json
- /data/data/####/s23.json
- /data/data/####/s24.json
- /data/data/####/s25.json
- /data/data/####/s26.json
- /data/data/####/s27.json
- /data/data/####/s28.json
- /data/data/####/s29.json
- /data/data/####/s3.json
- /data/data/####/s30.json
- /data/data/####/s31.json
- /data/data/####/s32.json
- /data/data/####/s33.json
- /data/data/####/s34.json
- /data/data/####/s35.json
- /data/data/####/s4.json
- /data/data/####/s5.json
- /data/data/####/s6.json
- /data/data/####/s7.json
- /data/data/####/s8.json
- /data/data/####/s9.json
- /data/data/####/zjuchnfeqm
Miscellaneous:
Loads the following dynamic libraries:
- libowekisulaqcuh
Appears corrupted in a way typical for malicious files.