Android.SmsSend.15280

Technical information

Malicious functions:

Sends SMS messages:

15595005292: i2mPNk1AOWWu6IO69LttHIXkg==

Network activity:

Connecting to:

a####.####.la
pa####.tk:1001
ut####.cn
kay####.cn
p####.####.cn
i####.####.cn
ut####.cn:8080
a####.####.com

HTTP GET requests:

kay####.cn/photo/girl/8.jpg
kay####.cn/photo/girl/68.jpg
kay####.cn/photo/girl/16.jpg
kay####.cn/photo/home/q7.jpg
kay####.cn/photo/home/q19.jpg
kay####.cn/photo/home/q12.jpg
kay####.cn/photo/%E8%AF%95%E7%9C%8B%E5%9B%BE%E7%89%87/%E6%92%AD%E6%94%BE%E5%86%85%E9%A1%B5/lb3.jpg
kay####.cn/photo/home/q10.jpg
kay####.cn/photo/girl/5.jpg
kay####.cn/photo/girl/78.jpg
kay####.cn/photo/home/q14.jpg
kay####.cn/photo/ps/jiesuo.jpg
kay####.cn/photo/girl/31.jpg
kay####.cn/photo/girl/67.jpg
kay####.cn/photo/girl/6.jpg
kay####.cn/photo/girl/11.jpg
kay####.cn/photo/girl/30.jpg
kay####.cn/photo/%E8%AF%95%E7%9C%8B%E5%9B%BE%E7%89%87/%E6%92%AD%E6%94%BE%E5%86%85%E9%A1%B5/lb1.jpg
kay####.cn/photo/home/q11.jpg
kay####.cn/photo/home/q3.jpg
kay####.cn/photo/girl/77.jpg
kay####.cn/photo/home/q15.jpg
kay####.cn/photo/girl/71.jpg
kay####.cn/photo/????/????/lb1####
pa####.tk:1001/sdk_config.js
kay####.cn/photo/girl/53.jpg
kay####.cn/photo/girl/90.jpg
kay####.cn/photo/girl/74.jpg
kay####.cn/photo/girl/61.jpg
kay####.cn/photo/home/q2.jpg
kay####.cn/photo/home/q4.jpg
kay####.cn/photo/home/q13.jpg
kay####.cn/photo/girl/14.jpg
kay####.cn/photo/girl/75.jpg
kay####.cn/photo/girl/2.jpg
kay####.cn/photo/girl/4.jpg
kay####.cn/photo/girl/73.jpg
kay####.cn/photo/girl/51.jpg
kay####.cn/photo/girl/57.jpg
kay####.cn/photo/home/q18.jpg
kay####.cn/photo/%E8%AF%95%E7%9C%8B%E5%9B%BE%E7%89%87/%E6%92%AD%E6%94%BE%E5%86%85%E9%A1%B5/lb2.jpg
kay####.cn/photo/girl/70.jpg
kay####.cn/photo/home/q6.jpg
kay####.cn/photo/home/q9.jpg
kay####.cn/photo/home/q20.jpg
kay####.cn/photo/home/q17.jpg
kay####.cn/photo/ps/zf38.jpg
kay####.cn/photo/home/q1.jpg
kay####.cn/photo/girl/12.jpg
kay####.cn/photo/home/q5.jpg
kay####.cn/photo/girl/66.jpg
kay####.cn/photo/girl/7.jpg
kay####.cn/photo/girl/69.jpg
kay####.cn/photo/home/q16.jpg
kay####.cn/photo/ps/video_black_bg18.jpg
kay####.cn/photo/home/q8.jpg
kay####.cn/photo/%E8%AF%95%E7%9C%8B%E5%9B%BE%E7%89%87/%E6%92%AD%E6%94%BE%E5%86%85%E9%A1%B5/lb4.jpg
kay####.cn/photo/ps/nvpn.jpg
i####.####.cn/iplookup/iplookup.php?format=####

HTTP POST requests:

a####.####.com/app_logs
a####.####.la/PayApi/Index?pid=####
ut####.cn/excalibur/avalon/sdk/init.aspx
ut####.cn/excalibur/avalon/sdk/pay.aspx
ut####.cn:8080/excalibur/avalon/sdk/init.aspx
p####.####.cn/api/girl?imei=####&cid=####
p####.####.cn/api/init?imei=####&cid=####

Modified file system:

Creates the following files:

/data/data/####/cache/picasso-cache/87a8aa6c4b0c8bd942386a68bea36d9f.0.tmp
/sdcard/Android/data/####/cache/2umm1c1vxakwr3p5p4l2a4wq0.tmp
/sdcard/Android/data/####/cache/4zuo5510ycut8auunkqktmxr8.tmp
/data/data/####/cache/picasso-cache/93391504ba90086844c49afb0d1bd888.1
/sdcard/Android/data/####/cache/6picswn38hzi29r35t4n3ywi4
/data/data/####/cache/picasso-cache/77234c3080a120ba00db878d0a3c1877.0.tmp
/sdcard/Android/data/####/cache/3lxg1fpcvd6amvernbp0tg8i0.tmp
/sdcard/Android/data/####/cache/7a5d0mkf7cnxh34qckhck941n.tmp
/data/data/####/cache/picasso-cache/88221fad5659db3f2c3d7c0692425824.1
/sdcard/Android/data/####/cache/kf5iop5jw1udbula1zty824v.tmp
/data/data/####/shared_prefs/umeng_general_config.xml
/data/data/####/cache/picasso-cache/7151027bf43722c767ec98bbf414f80c.1
/sdcard/Android/data/####/cache/2597wery7x5jr2au1moa0jy6v
/sdcard/Android/data/####/cache/6gpyxrxd0o3vk8l6iii0ceawf
/sdcard/Android/data/####/cache/6kbnf9vurxehsomqsqywjzzhk.tmp
/sdcard/Android/data/####/cache/39b5sgppkxodmiy5bw6ldlr2o.tmp
/data/data/####/cache/picasso-cache/cfd8cd6ddd9e27efaa63b03dd8449f58.0.tmp
/sdcard/Android/data/####/cache/5jb6xm2g3zleu5nbxmb7oycbe.tmp
/data/data/####/shared_prefs/####_preferences.xml.bak
/data/data/####/cache/picasso-cache/338269b0778d62315ec89e1b03e2bd97.0.tmp
/sdcard/Android/data/####/cache/qdquwtmz438wgz65ubo8px78.tmp
/sdcard/Android/data/####/cache/4bk3t8s64biiusr0fulkea6i7.tmp
/data/data/####/cache/picasso-cache/b8cf94d12e490f7c7c4f2bb03c4edb52.0.tmp
/data/data/####/cache/picasso-cache/5d84456d08e588f5201d5cb8f3a636da.1
/data/data/####/cache/picasso-cache/e4b014cc65cd2fc2602e092fa4c97376.1.tmp
/data/data/####/cache/picasso-cache/journal.tmp
/sdcard/Android/data/####/cache/47q2xptm0pl2fu64mu1f85j8u.tmp
/data/data/####/cache/picasso-cache/5d84456d08e588f5201d5cb8f3a636da.0.tmp
/data/data/####/cache/picasso-cache/bb09590d587d94201cfb0463936abc36.1
/sdcard/Android/data/####/cache/1ngjgpgz2k41jfosx8lqa4pws
/sdcard/Android/data/####/cache/6u9sa1iqeezhvd2tsv8imudrs.tmp
/data/data/####/cache/picasso-cache/68093359017f7630c889a95e1b79f962.0.tmp
/data/data/####/cache/picasso-cache/1be5fc617db18a86bf28e4b397e79e2c.0.tmp
/sdcard/Android/data/####/cache/40u0w5vheixnobaifd2prcujx.tmp
/sdcard/Android/data/####/cache/6bzu5eahhu7pxwjzgs5yefy2u.tmp
/data/data/####/cache/picasso-cache/1361a7dce8df68afa2a235ccf1a6250e.1
/data/data/####/cache/picasso-cache/0c60dc145bdd3e70a31728463ced0c54.1
/data/data/####/cache/picasso-cache/ab9d0b3cb382296544636f80c2bffe9c.1
/data/data/####/cache/picasso-cache/33441fd9eef7eea41176c611838679a7.0.tmp
/data/data/####/cache/picasso-cache/0c998758c526a8675df75458e9c23588.1
/data/data/####/cache/picasso-cache/6893d05a46da2517c9a969ccca444d68.0.tmp
/data/data/####/cache/picasso-cache/a0f749b9f91b770e158ec23f9bbb6429.0.tmp
/sdcard/Android/data/####/cache/719paopxwranfhvg7c7lhomm3.tmp
/data/data/####/cache/picasso-cache/28d1dd474f06a3da2a26705e7941e695.0.tmp
/data/data/####/cache/picasso-cache/baee61689410382552def6794cf7f9cd.1
/data/data/####/cache/picasso-cache/7a81583cebf383866cd1db72f2ace609.1
/data/data/####/cache/picasso-cache/af92e4edafbf08522055962dca7ece27.0.tmp
/data/data/####/cache/picasso-cache/338269b0778d62315ec89e1b03e2bd97.1
/sdcard/Android/data/####/cache/65qaob1vyrylsjm1cwb0lpe8y.tmp
/data/data/####/cache/picasso-cache/82f7d7d8c94012546d2c079177c3a1a9.1
/data/data/####/cache/picasso-cache/f14163fe4cce2dafd391647ca25cdce8.1
/data/data/####/cache/picasso-cache/6c28e063dbaa80c895e0b7e0737d3432.1
/sdcard/Android/data/####/cache/15b2hfpxrqtfhcyjozo9u7e32.tmp
/data/data/####/cache/picasso-cache/f74ff17b966cec9d6f034654567b2d10.1
/sdcard/Android/data/####/cache/3072xs5gq8gzkwhixa4nwwheh.tmp
/data/data/####/cache/picasso-cache/44e013f0ee45000c757d1f513e777edb.0.tmp
/data/data/####/cache/picasso-cache/0bd5455aaff3df2c22398dc2aecf01b6.0.tmp
/data/data/####/cache/picasso-cache/4d8db286ff725cbca6558fd0d5424090.1
/data/data/####/cache/picasso-cache/bc0b3b23b035d409386bdb3411aa7b53.0.tmp
/data/data/####/cache/picasso-cache/892a7a879c1e1fc4577dfeb2e0afe285.0.tmp
/data/data/####/cache/picasso-cache/68093359017f7630c889a95e1b79f962.1
/data/data/####/cache/picasso-cache/243fa1d479704016955159f564b49bd7.0.tmp
/data/data/####/cache/picasso-cache/ab9d0b3cb382296544636f80c2bffe9c.0.tmp
/data/data/####/cache/picasso-cache/dd5bace71f5b290ef0682b6b7aa5e0a5.1
/data/data/####/files/umeng_it.cache
/data/data/####/cache/picasso-cache/c3098bb6cc420914eb355d90bd94e3f8.0.tmp
/data/data/####/app_dex/utopay_close.png
/sdcard/Android/data/####/cache/.nomedia
/data/data/####/cache/picasso-cache/3606f462bdd03948eef85aae159030c5.1.tmp
/data/data/####/cache/picasso-cache/b8cf94d12e490f7c7c4f2bb03c4edb52.1.tmp
/data/data/####/cache/picasso-cache/2e448ce84b6cad76b9ef1282cdc0d7f7.0.tmp
/data/data/####/cache/picasso-cache/0c60dc145bdd3e70a31728463ced0c54.0.tmp
/data/data/####/cache/picasso-cache/d27c70da55b764088db8ed424364f417.1
/data/data/####/cache/picasso-cache/93391504ba90086844c49afb0d1bd888.0.tmp
/sdcard/Android/data/####/cache/quqaova9akv8vb6cmina0sco
/data/data/####/cache/picasso-cache/2e448ce84b6cad76b9ef1282cdc0d7f7.1
/sdcard/Android/data/####/cache/74hc2vcv9uzjotyd27xqwcm01.tmp
/sdcard/Android/data/####/cache/rw66jwlbsb8t08rozy4kc4db
/data/data/####/cache/picasso-cache/243fa1d479704016955159f564b49bd7.1
/sdcard/Android/data/####/cache/1ymrmnvvz9ltt6t0fbd9v7dkg.tmp
/data/data/####/cache/picasso-cache/32c412197198b1469ab6ded57fd3bc19.0.tmp
/data/data/####/cache/picasso-cache/4d8db286ff725cbca6558fd0d5424090.0.tmp
/data/data/####/app_dex/utopay.jar
/data/data/####/cache/picasso-cache/e74a92a28bdfcf412802d9ce212ef868.1
/sdcard/Android/data/####/cache/2p0453eqo8wnc20lqdp0q18mh.tmp
/data/data/####/cache/picasso-cache/0bd5455aaff3df2c22398dc2aecf01b6.1
/data/data/####/cache/picasso-cache/ec264d2cbe9c734f54b81856c265ecfa.0.tmp
/sdcard/Android/data/####/cache/6tm44f1o465ixpdyecu9okq0h
/sdcard/Android/data/####/cache/6eip1fj8qfalbxuiuw6xu6rsi.tmp
/data/data/####/cache/picasso-cache/6893d05a46da2517c9a969ccca444d68.1
/sdcard/Android/data/####/cache/437ebtcld5bgz70svc9vg3kfn
/data/data/####/cache/picasso-cache/345625d8f1b99b4f3914a744ef4349b1.1
/sdcard/Android/data/####/cache/319glbaotmcfq3vnmrrkxepif.tmp
/data/data/####/cache/picasso-cache/d27c70da55b764088db8ed424364f417.0.tmp
/sdcard/Android/data/####/cache/6fu28zajmetuuvm0q4ms3l08o.tmp
/data/data/####/cache/picasso-cache/551794ffac5389faeabf32b76ad39cd7.0.tmp
/data/data/####/cache/picasso-cache/0994dd1c0fe247392c58b4d1260d22cf.1
/sdcard/Android/data/####/cache/1gnt37piktlyl8lzje5krvhy0.tmp
/data/data/####/cache/picasso-cache/f2e98c1c5afd6170616a172e8d655ae1.0
/data/data/####/cache/picasso-cache/f2e98c1c5afd6170616a172e8d655ae1.1
/sdcard/Android/data/####/cache/3st025q0cumhjql81mxj1dky4.tmp
/sdcard/WYKB/play001.txt
/data/data/####/cache/picasso-cache/1be5fc617db18a86bf28e4b397e79e2c.1
/sdcard/Android/data/####/cache/375b1b41bdc2opsks6mkjalz9
/sdcard/Android/data/####/cache/31s4ntrbrzmffzoq8vks1xyfr.tmp
/data/data/####/cache/picasso-cache/dd5bace71f5b290ef0682b6b7aa5e0a5.0.tmp
/data/data/####/cache/picasso-cache/f14163fe4cce2dafd391647ca25cdce8.0.tmp
/data/data/####/cache/picasso-cache/bc0b3b23b035d409386bdb3411aa7b53.1
/data/data/####/cache/picasso-cache/738cfdc4f7ee5cb932f6f69ee49b3f38.1
/data/data/####/cache/picasso-cache/7a81583cebf383866cd1db72f2ace609.0.tmp
/data/data/####/cache/picasso-cache/44e013f0ee45000c757d1f513e777edb.1
/sdcard/Android/data/####/cache/5v4x1j12csja0r7frk0f0jv32.tmp
/sdcard/Android/data/####/cache/p7wqupw1z2f48lnsdigrn1di.tmp
/sdcard/Android/data/####/cache/4lae9ogqwicohbxp4zmk0a9w0.tmp
/data/data/####/cache/picasso-cache/b7030efadba16f9b35b1c24a1d465291.1
/data/data/####/cache/picasso-cache/7151027bf43722c767ec98bbf414f80c.0.tmp
/data/data/####/cache/picasso-cache/3ee6e19fff16c8049e0d06e90de51f00.0.tmp
/data/data/####/cache/picasso-cache/f74ff17b966cec9d6f034654567b2d10.0.tmp
/data/data/####/cache/picasso-cache/ec64e53b5714b5a76b35f55f98d013d6.1
/data/data/####/cache/picasso-cache/c3098bb6cc420914eb355d90bd94e3f8.1.tmp
/data/data/####/cache/picasso-cache/baee61689410382552def6794cf7f9cd.0.tmp
/sdcard/Android/data/####/cache/71x0h34u0c8dwhttqldj0tawn.tmp
/sdcard/Android/data/####/cache/42sjsijmml5pmrbhdt43dmbx7.tmp
/data/data/####/cache/picasso-cache/3ee6e19fff16c8049e0d06e90de51f00.1
/data/data/####/cache/picasso-cache/345625d8f1b99b4f3914a744ef4349b1.0.tmp
/data/data/####/shared_prefs/####_preferences.xml
/data/data/####/cache/picasso-cache/0994dd1c0fe247392c58b4d1260d22cf.0.tmp
/data/data/####/cache/picasso-cache/88221fad5659db3f2c3d7c0692425824.0.tmp
/data/data/####/cache/picasso-cache/28d1dd474f06a3da2a26705e7941e695.1
/sdcard/Android/data/####/cache/2qlyg4ey8njvk0vekb7c7g8vr.tmp
/sdcard/Android/data/####/cache/42zbcyobnyeentmn2ggmuwqfe
/data/data/####/cache/picasso-cache/ec64e53b5714b5a76b35f55f98d013d6.0.tmp
/sdcard/Android/data/####/cache/7eh8ivduywnvnlqf5h2j2j1w7.tmp
/data/data/####/cache/picasso-cache/87a8aa6c4b0c8bd942386a68bea36d9f.1
/sdcard/Android/data/####/cache/4lvbfar71gtg5nejurcmzsvey.tmp
/data/data/####/cache/picasso-cache/6c28e063dbaa80c895e0b7e0737d3432.0.tmp
/data/data/####/cache/picasso-cache/ec264d2cbe9c734f54b81856c265ecfa.1
/data/data/####/cache/picasso-cache/1361a7dce8df68afa2a235ccf1a6250e.0.tmp
/data/data/####/cache/picasso-cache/a0f749b9f91b770e158ec23f9bbb6429.1
/data/data/####/cache/picasso-cache/84ffed0b8314a44fa2281dccb2f82f45.0.tmp
/data/data/####/cache/picasso-cache/738cfdc4f7ee5cb932f6f69ee49b3f38.0.tmp
/data/data/####/cache/picasso-cache/e74a92a28bdfcf412802d9ce212ef868.0.tmp
/data/data/####/cache/picasso-cache/82f7d7d8c94012546d2c079177c3a1a9.0.tmp
/data/data/####/files/.imprint
/data/data/####/cache/picasso-cache/af92e4edafbf08522055962dca7ece27.1
/data/data/####/cache/picasso-cache/0c998758c526a8675df75458e9c23588.0.tmp
/data/data/####/cache/picasso-cache/3606f462bdd03948eef85aae159030c5.0.tmp
/data/data/####/app_dex/utopay_icon.gif
/sdcard/Android/data/####/cache/4ret27g6wdh6ifyedoj3pacbd.tmp
/data/data/####/cache/picasso-cache/77234c3080a120ba00db878d0a3c1877.1
/data/data/####/cache/picasso-cache/cfd8cd6ddd9e27efaa63b03dd8449f58.1
/data/data/####/cache/picasso-cache/8cc1fce1dc855d57601b1e6866e5834f.0.tmp
/data/data/####/cache/picasso-cache/32c412197198b1469ab6ded57fd3bc19.1
/sdcard/Android/data/####/cache/21ty1f4ktj8r1qdeiylawnkgr.tmp
/data/data/####/cache/picasso-cache/8cc1fce1dc855d57601b1e6866e5834f.1
/sdcard/Android/data/####/cache/iikrumnf8g9zyl5w7e3pdf5c.tmp
/data/data/####/cache/picasso-cache/9506464035f785e6494d5779b9cdbfba.0.tmp
/sdcard/Android/data/####/cache/vfaoi5m04otyq5g01ix3do9k.tmp
/sdcard/Android/data/####/cache/33jl7fj23h5f137lw97teecoh.tmp
/data/data/####/cache/picasso-cache/84ffed0b8314a44fa2281dccb2f82f45.1
/data/data/####/cache/picasso-cache/33441fd9eef7eea41176c611838679a7.1
/data/data/####/cache/picasso-cache/e4b014cc65cd2fc2602e092fa4c97376.0.tmp
/data/data/####/cache/picasso-cache/b7030efadba16f9b35b1c24a1d465291.0.tmp
/sdcard/Android/data/####/cache/1m7kakvb3mg5y6adj7o1se45m.tmp
/data/data/####/cache/picasso-cache/892a7a879c1e1fc4577dfeb2e0afe285.1.tmp
/data/data/####/cache/picasso-cache/9506464035f785e6494d5779b9cdbfba.1
/sdcard/Android/data/####/cache/16b1pbhnklgldki2tm6h9uepy.tmp
/sdcard/Android/data/####/cache/793dnidfsy0pcrh0b079y1udl
/data/data/####/cache/picasso-cache/bb09590d587d94201cfb0463936abc36.0.tmp
/sdcard/Android/data/####/cache/73gxlaa71n77bpvawbj98jjz0.tmp
/data/data/####/cache/picasso-cache/551794ffac5389faeabf32b76ad39cd7.1
/sdcard/Android/data/####/cache/3q28b608rcvfruypmrczq9m9s

Miscellaneous:

Executes next shell scripts:

getprop apps.customerservice.device

Contains functionality to send SMS messages automatically.

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical information

Curing recommendations

Free trial