Android.SmsSend.15481

Technical information

Malicious functions:

Sends SMS messages:

15595005292: i2mPNk1AOWWu6IO69LttHIXkg==

Network activity:

Connecting to:

ut####.cn
pa####.tk:1001
adi####.cn
a####.####.la
p####.####.cn
i####.####.cn
ut####.cn:8080
a####.####.com

HTTP GET requests:

adi####.cn/photo/ps/4.jpg
adi####.cn/photo/ps/2.jpg
adi####.cn/photo/us/1.png
adi####.cn/photo/us/3.png
adi####.cn/photo/????/????/lb1####
adi####.cn/photo/ps/05.jpg
i####.####.cn/iplookup/iplookup.php?format=####
adi####.cn/photo/%E8%AF%95%E7%9C%8B%E5%9B%BE%E7%89%87/%E6%92%AD%E6%94%BE%E5%86%85%E9%A1%B5/lb1.jpg
adi####.cn/photo/jp/2.png
adi####.cn/photo/jp/p%20(11).jpg
adi####.cn/photo/ps/02.jpg
adi####.cn/photo/jp/p%20(25).jpg
adi####.cn/photo/ps/01.jpg
adi####.cn/photo/ps/28.jpg
adi####.cn/photo/ps/video_black_bg18.png
adi####.cn/photo/us/4.png
pa####.tk:1001/sdk_config.js
adi####.cn/photo/ps/zf38.jpg
adi####.cn/photo/jp/p%20(74).jpg
adi####.cn/photo/%E8%AF%95%E7%9C%8B%E5%9B%BE%E7%89%87/%E6%92%AD%E6%94%BE%E5%86%85%E9%A1%B5/lb3.jpg
adi####.cn/photo/jp/p%20(31).jpg
adi####.cn/photo/ps/03.jpg
adi####.cn/photo/ps/3.jpg
adi####.cn/photo/ps/1.jpg
adi####.cn/photo/ps/kissnight.jpg
adi####.cn/photo/jp/p%20(60).jpg
adi####.cn/photo/jp/7.png
adi####.cn/photo/%E8%AF%95%E7%9C%8B%E5%9B%BE%E7%89%87/%E6%92%AD%E6%94%BE%E5%86%85%E9%A1%B5/lb2.jpg
adi####.cn/photo/jp/p%20(13).jpg
adi####.cn/photo/jp/p%20(81).jpg
adi####.cn/photo/%E8%AF%95%E7%9C%8B%E5%9B%BE%E7%89%87/%E6%92%AD%E6%94%BE%E5%86%85%E9%A1%B5/lb4.jpg
adi####.cn/photo/jp/p%20(77).jpg
adi####.cn/photo/us/11.png
adi####.cn/photo/ps/KAWD-367B.jpg
adi####.cn/photo/jp/9.png
adi####.cn/photo/ps/nvpn.jpg
adi####.cn/photo/ps/jiesuo.jpg
adi####.cn/photo/jp/1.png
adi####.cn/photo/ps/58.jpg

HTTP POST requests:

ut####.cn:8080/excalibur/avalon/sdk/init.aspx
ut####.cn/excalibur/avalon/sdk/pay.aspx
a####.####.la/PayApi/Index?pid=####
a####.####.com/app_logs
p####.####.cn/api/init?imei=####&cid=####

Modified file system:

Creates the following files:

/data/data/####/cache/picasso-cache/c300c245329c8837a4598b298c7b6c04.0.tmp
/data/data/####/cache/picasso-cache/222643fbc166bac54a4807cd1b5b95ad.1
/sdcard/Android/data/####/cache/w8rpb5opa2ap3a36x71ifsvy.tmp
/data/data/####/cache/picasso-cache/d21d9a704eda08da17b3ad9c61cec6a7.0.tmp
/sdcard/Android/data/####/cache/516irufsdiyjrpf654y71j5vb
/data/data/####/cache/picasso-cache/4b932a1dae21f91f62b62c64ae791b38.0.tmp
/data/data/####/shared_prefs/umeng_general_config.xml
/data/data/####/cache/picasso-cache/c300c245329c8837a4598b298c7b6c04.1
/sdcard/Android/data/####/cache/yy1g2py1jj7a4vb68tejmvz5.tmp
/data/data/####/cache/picasso-cache/0107699a169445e92ad1f378b44763d8.0.tmp
/data/data/####/cache/picasso-cache/4bc76b7e27559a5bf23beebb66588124.1
/data/data/####/cache/picasso-cache/070e4a1405b0438126f2abde712ca412.1
/sdcard/Android/data/####/cache/2o7jqgw3e21b2ic1rpyc5rris.tmp
/data/data/####/cache/picasso-cache/aafd634e6b431ca5a56178c4e1781e89.1
/data/data/####/shared_prefs/####_preferences.xml.bak
/data/data/####/cache/picasso-cache/c89a37f951751abdf4b101d9ed09b075.0.tmp
/data/data/####/cache/picasso-cache/a0f749b9f91b770e158ec23f9bbb6429.1.tmp
/data/data/####/cache/picasso-cache/64eac8af5196d742d0318469665bfa04.1
/sdcard/Android/data/####/cache/6yenpnbtkxr8kv5bgw3nqdhml.tmp
/data/data/####/cache/picasso-cache/26d14939361b8f83820c08f22c7e2db0.0.tmp
/sdcard/Android/data/####/cache/yu8u0s4e5o1mq4rfz9527h5g.tmp
/sdcard/Android/data/####/cache/69s12nrzf09q637wkoa2k8myi.tmp
/data/data/####/cache/picasso-cache/journal.tmp
/data/data/####/cache/picasso-cache/96108e2d5f381e1ea659afe2eab35dc6.1
/sdcard/Android/data/####/cache/6tzoaik2pbmbnptuw4mrfofcb.tmp
/data/data/####/cache/picasso-cache/79e353ce84f18b0aad2a4fbd66403118.1
/data/data/####/cache/picasso-cache/330e7200d666013b288dd625ec79707e.1
/data/data/####/cache/picasso-cache/c46183411e02349be991569b66ee044f.0.tmp
/sdcard/Android/data/####/cache/4rtv7flanxifuhsdteq0fv387.tmp
/data/data/####/cache/picasso-cache/58a68ad931a1a701e432d161418a33fe.0.tmp
/data/data/####/cache/picasso-cache/86998f9902e3c93344bfccabd5b995cb.0.tmp
/data/data/####/cache/picasso-cache/a0f749b9f91b770e158ec23f9bbb6429.0.tmp
/data/data/####/cache/picasso-cache/79e353ce84f18b0aad2a4fbd66403118.0.tmp
/data/data/####/cache/picasso-cache/34ff88ac824a29c17d8b2c3a2103b5c0.1
/data/data/####/cache/picasso-cache/0f20f25018437c28fe5efbf0d5a4e5fe.0.tmp
/data/data/####/cache/picasso-cache/9febb161bf97eac6c3b7c5dbd631aac2.1
/data/data/####/cache/picasso-cache/345551db334602efd44312086e9c7c2d.1
/sdcard/Android/data/####/cache/1amgyi9jljqp7et295b8xlj8.tmp
/data/data/####/cache/picasso-cache/330e7200d666013b288dd625ec79707e.0.tmp
/data/data/####/cache/picasso-cache/48a91140bb0f5d7f240b50076dee6a70.1
/data/data/####/cache/picasso-cache/736b41a64306761507dc4d157d2d7eab.0.tmp
/data/data/####/cache/picasso-cache/b2d48ff620572a4f2bcb849bb40be84a.1
/data/data/####/cache/picasso-cache/96108e2d5f381e1ea659afe2eab35dc6.0.tmp
/data/data/####/files/umeng_it.cache
/data/data/####/app_dex/utopay_close.png
/sdcard/Android/data/####/cache/.nomedia
/data/data/####/cache/picasso-cache/58a68ad931a1a701e432d161418a33fe.1.tmp
/sdcard/Android/data/####/cache/6imatomuu6acyqw79o7ceot4y.tmp
/data/data/####/cache/picasso-cache/4b932a1dae21f91f62b62c64ae791b38.1
/data/data/####/cache/picasso-cache/eddd0dbd822fb978601ffa9c49446241.1
/data/data/####/app_dex/utopay.jar
/sdcard/Android/data/####/cache/26y4jtx6ip3pfb3cq0a7l6mw
/sdcard/Android/data/####/cache/1y548v49tq25mj6rwrf9poxnu.tmp
/sdcard/Android/data/####/cache/4f35hopo5mqo5w5prwmu7rj47.tmp
/sdcard/Android/data/####/cache/4kgy2xxyzmtc7bj7h59bu3bna
/data/data/####/cache/picasso-cache/c89a37f951751abdf4b101d9ed09b075.1
/data/data/####/cache/picasso-cache/7544cd12aba87297aef59537165b2e3a.0.tmp
/data/data/####/cache/picasso-cache/0107699a169445e92ad1f378b44763d8.1
/data/data/####/cache/picasso-cache/9e7ad3debb5f8bc31aed7061e4376b5e.0.tmp
/sdcard/Android/data/####/cache/6xxlo2iz5j86c26itjnyxu52y.tmp
/data/data/####/cache/picasso-cache/070e4a1405b0438126f2abde712ca412.0.tmp
/data/data/####/cache/picasso-cache/9390257b74511736dacc97b00dcd83ea.0.tmp
/data/data/####/cache/picasso-cache/345551db334602efd44312086e9c7c2d.0.tmp
/data/data/####/cache/picasso-cache/9e7ad3debb5f8bc31aed7061e4376b5e.1.tmp
/sdcard/Android/data/####/cache/1x75xticy158009kuvm4x2lx6.tmp
/data/data/####/cache/picasso-cache/0f20f25018437c28fe5efbf0d5a4e5fe.1
/sdcard/Android/data/####/cache/4h2kylni941sggkggkzoj99h4.tmp
/data/data/####/cache/picasso-cache/d5b64edce134feb8709cd56795b520c9.0.tmp
/sdcard/Android/data/####/cache/20s5woce6tm35h5k9ylcckf59
/data/data/####/cache/picasso-cache/d5e67678fc4c937b1e1d541b69e67db5.1
/sdcard/Android/data/####/cache/76ql7b7igzz5gom1lob5dlk51.tmp
/sdcard/Android/data/####/cache/12njq2vyqnoy3yfxnal1ijfzz
/sdcard/Android/data/####/cache/6f3yuudyo010oqutpsbbmb47q
/data/data/####/cache/picasso-cache/e09c60320cb70254ecd11958844b9672.1
/sdcard/Android/data/####/cache/30tdewelzj1b94zc24dikerum
/data/data/####/cache/picasso-cache/9caa5dc13a19ceb371cc9ee1a43d99cb.0.tmp
/data/data/####/cache/picasso-cache/669d0e543c5bd911236d6b6f458b5961.0.tmp
/sdcard/Android/data/####/cache/3j2crcuhfgdvy48xo0zni6nqp
/data/data/####/cache/picasso-cache/48a91140bb0f5d7f240b50076dee6a70.0.tmp
/data/data/####/cache/picasso-cache/9febb161bf97eac6c3b7c5dbd631aac2.0.tmp
/data/data/####/app_dex/utopay_icon.gif
/sdcard/Android/data/####/cache/5vpkmd8qpimmp06kchmiophrp.tmp
/sdcard/Android/data/####/cache/36lk0oh9xa0os3qdfy1vjdang.tmp
/data/data/####/shared_prefs/####_preferences.xml
/data/data/####/cache/picasso-cache/d5b64edce134feb8709cd56795b520c9.1
/data/data/####/cache/picasso-cache/b2d48ff620572a4f2bcb849bb40be84a.0.tmp
/data/data/####/cache/picasso-cache/736b41a64306761507dc4d157d2d7eab.1
/sdcard/Android/data/####/cache/79n8thvva55t57nz5rq7qjyxq.tmp
/data/data/####/cache/picasso-cache/d21d9a704eda08da17b3ad9c61cec6a7.1.tmp
/sdcard/Android/data/####/cache/62p5oojzzyph0pg7gekfv0oyp
/data/data/####/cache/picasso-cache/9390257b74511736dacc97b00dcd83ea.1
/data/data/####/files/.imprint
/sdcard/Android/data/####/cache/4s8suw6my43p1tsvjlx5xmcx3
/data/data/####/cache/picasso-cache/7544cd12aba87297aef59537165b2e3a.1
/data/data/####/cache/picasso-cache/4bc76b7e27559a5bf23beebb66588124.0.tmp
/data/data/####/cache/picasso-cache/222643fbc166bac54a4807cd1b5b95ad.0.tmp
/sdcard/Android/data/####/cache/4hi8s071qkk7egxu85zmmsaas
/sdcard/Android/data/####/cache/4luemcdud7w508cbk0sp3l29z
/data/data/####/cache/picasso-cache/64eac8af5196d742d0318469665bfa04.0.tmp
/data/data/####/cache/picasso-cache/26d14939361b8f83820c08f22c7e2db0.1
/sdcard/Android/data/####/cache/2i4lbweqp1ofxhfpl8uf8lkjb.tmp
/data/data/####/cache/picasso-cache/c46183411e02349be991569b66ee044f.1
/sdcard/play.txt
/sdcard/Android/data/####/cache/5rud8zk10earcv99h0ztch8de
/data/data/####/cache/picasso-cache/34ff88ac824a29c17d8b2c3a2103b5c0.0.tmp
/sdcard/Android/data/####/cache/4auyu9xjb10pt2x7q2cvnm92o
/data/data/####/cache/picasso-cache/86998f9902e3c93344bfccabd5b995cb.1
/data/data/####/cache/picasso-cache/e09c60320cb70254ecd11958844b9672.0.tmp
/data/data/####/cache/picasso-cache/eddd0dbd822fb978601ffa9c49446241.0.tmp
/sdcard/Android/data/####/cache/77s0pb3mi8bpafheopnz3mqzc
/data/data/####/cache/picasso-cache/669d0e543c5bd911236d6b6f458b5961.1
/data/data/####/cache/picasso-cache/aafd634e6b431ca5a56178c4e1781e89.0.tmp
/data/data/####/cache/picasso-cache/d5e67678fc4c937b1e1d541b69e67db5.0.tmp
/data/data/####/cache/picasso-cache/9caa5dc13a19ceb371cc9ee1a43d99cb.1

Miscellaneous:

Executes next shell scripts:

getprop apps.customerservice.device

Contains functionality to send SMS messages automatically.

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical information

Curing recommendations

Free trial