Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.Banker.1373.origin
Threat detection based on machine learning.
File system changes:
Creates the following files:
- /data/data/####/Anonymous-DexFile@2865656889.vdex
- /data/data/####/accqsjaycb
- /data/data/####/mxjiufzrwq.xml
- /data/data/####/riflzmfjuv
- /data/data/####/s0.card
- /data/data/####/s1.card
- /data/data/####/s10.card
- /data/data/####/s11.card
- /data/data/####/s12.card
- /data/data/####/s13.card
- /data/data/####/s14.card
- /data/data/####/s15.card
- /data/data/####/s16.card
- /data/data/####/s17.card
- /data/data/####/s18.card
- /data/data/####/s19.card
- /data/data/####/s2.card
- /data/data/####/s20.card
- /data/data/####/s21.card
- /data/data/####/s22.card
- /data/data/####/s23.card
- /data/data/####/s24.card
- /data/data/####/s25.card
- /data/data/####/s26.card
- /data/data/####/s27.card
- /data/data/####/s28.card
- /data/data/####/s29.card
- /data/data/####/s3.card
- /data/data/####/s30.card
- /data/data/####/s31.card
- /data/data/####/s32.card
- /data/data/####/s33.card
- /data/data/####/s34.card
- /data/data/####/s35.card
- /data/data/####/s4.card
- /data/data/####/s5.card
- /data/data/####/s6.card
- /data/data/####/s7.card
- /data/data/####/s8.card
- /data/data/####/s9.card
Miscellaneous:
Loads the following dynamic libraries:
- libovorotkaehtp
Appears corrupted in a way typical for malicious files.