Android.SmsSend.15222

Technical information

Malicious functions:

Sends SMS messages:

+972506495951: device: null, id: b9db126c-db90-48ca-a0cd-3e1060375f45

Modified file system:

Creates the following files:

/data/data/####/shared_prefs/Install_Time.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A5DB0255-0001-0834-69E014E87733SessionEvent0000000000.cls_temp
/data/data/####/shared_prefs/TwitterAdvertisingInfoPreferences.xml
/data/data/####/shared_prefs/####_preferences.xml
/data/data/####/files/.Fabric/io.fabric.sdk.android:fabric/com.crashlytics.settings.json
/data/data/####/shared_prefs/com.crashlytics.prefs.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_90871063-77d2-4ab6-b1d6-29bc775dc947_1485415901574.tap
/data/data/####/shared_prefs/com.google.android.gms.measurement.prefs.xml.bak
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/log-files/crashlytics-userlog-5889A5DB0255-0001-0834-69E014E87733.temp
/data/data/####/no_backup/com.google.android.gms.appid-no-backup
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A5DB0255-0001-0834-69E014E87733SessionEvent0000000001.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A5DB0255-0001-0834-69E014E87733user.meta
/data/data/####/shared_prefs/io.fabric.sdk.android:fabric:io.fabric.sdk.android.Onboarding.xml
/data/data/####/shared_prefs/First_Run_Check.xml
/data/data/####/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/log-files/crashlytics-userlog-5889A5DB0255-0001-0834-69E014E87733.temp.tmp
/data/data/####/shared_prefs/com.google.android.gms.measurement.prefs.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_bebbe166-90de-456b-8b2f-d0ed8fc33f20_1485415900877.tap
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
/data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A5DB0255-0001-0834-69E014E87733SessionDevice.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A5DB0255-0001-0834-69E014E87733SessionOS.cls_temp
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A5DB0255-0001-0834-69E014E87733BeginSession.cls_temp
/data/data/####/shared_prefs/com.google.android.gms.appid.xml
/data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A5DB0255-0001-0834-69E014E87733SessionApp.cls_temp