Android.SmsSend.20024

Malicious functions:

Sends SMS messages:

Modified file system:

Creates the following files:

<Package Folder>/databases/mixpanel
<Package Folder>/databases/mixpanel-journal
<Package Folder>/files/####/592E6EE2022F-0001-083B-DD2CF6D3C892BeginSession.cls_temp
<Package Folder>/files/####/592E6EE2022F-0001-083B-DD2CF6D3C892SessionApp.cls_temp
<Package Folder>/files/####/592E6EE2022F-0001-083B-DD2CF6D3C892SessionDevice.cls_temp
<Package Folder>/files/####/592E6EE2022F-0001-083B-DD2CF6D3C892SessionOS.cls_temp
<Package Folder>/files/####/592E6EE2022F-0001-083B-DD2CF6D3C892SessionUser.cls_temp
<Package Folder>/files/####/592E6EE300E8-0002-083B-DD2CF6D3C892BeginSession.cls_temp
<Package Folder>/files/####/592E6EE300E8-0002-083B-DD2CF6D3C892SessionApp.cls_temp
<Package Folder>/files/####/592E6EE300E8-0002-083B-DD2CF6D3C892SessionDevice.cls_temp
<Package Folder>/files/####/592E6EE300E8-0002-083B-DD2CF6D3C892SessionOS.cls_temp
<Package Folder>/files/####/com.crashlytics.settings.json
<Package Folder>/files/####/initialization_marker
<Package Folder>/files/####/sa_013fa683-0f19-466a-8c32-d82e5efd1ef1_1496215266610.tap
<Package Folder>/files/####/sa_d937f788-5968-45a6-80e9-ec386ca27383_1496215267619.tap
<Package Folder>/files/####/session_analytics.tap
<Package Folder>/files/####/session_analytics.tap.tmp
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/com.crashlytics.android.internal.D.xml
<Package Folder>/shared_prefs/com.crashlytics.prefs.xml
<Package Folder>/shared_prefs/com.mixpanel.android.mpmetrics.MixpanelAPI_5e6c395562f9e64336f5a1b6755c9ad7.xml