Android.SmsSend.18656

Technical information

Malicious functions:

Sends SMS messages:

12114: yzw#####A
13738015114: ####A

Network activity:

Connecting to:

s####.####.com
c####.####.la
t####.####.cn:1088
i####.####.com
a####.####.la
u####.####.cn
s####.####.cn
pass####.####.cn
de####.####.cn
u####.####.cn:8080
b####.####.cn
t####.####.cn

HTTP GET requests:

t####.####.cn/sousuo_1_16.jpg
t####.####.cn/sousuo_1_8.jpg
t####.####.cn/luntan2.jpg
t####.####.cn/sousuo_1_2.jpg
i####.####.com/service/getIpInfo.php?ip=####
t####.####.cn/sousuo_1_4.jpg
s####.####.com/versioncheck.aspx?
t####.####.cn/tiyan27w.jpg
s####.####.cn/getconfig.aspx?
t####.####.cn/luntan6.jpg
t####.####.cn/sousuo_1_7.jpg
t####.####.cn/sousuo_1_12.jpg
s####.####.cn/versioncheck.aspx?
pass####.####.cn/client/authRequest
t####.####.cn/tiyan28q.jpg
s####.####.com/GetFeeData.aspx?iswifi=####
t####.####.cn/sousuo_1_1.jpg
t####.####.cn/sousuo_1_5.jpg
s####.####.com/getconfig.aspx?
b####.####.cn/chongzhic1.jpg
t####.####.cn/sousuo_1_13.jpg
t####.####.cn/luntan10.jpg
t####.####.cn/luntan1.jpg
c####.####.la/sdk_config.js
t####.####.cn/luntan7.jpg
t####.####.cn/sousuo_1_15.jpg
t####.####.cn/luntan4.jpg
t####.####.cn/sousuo_1_10.jpg
t####.####.cn/sousuo_1_14.jpg
t####.####.cn/luntan9.jpg
t####.####.cn/sousuo_1_6.jpg
t####.####.cn:1088/tiyan29q.jpg
t####.####.cn/luntan8.jpg
t####.####.cn/sousuo_1_9.jpg
t####.####.cn/luntan3.jpg
s####.####.cn/GetFeeData.aspx?iswifi=####
t####.####.cn/sousuo_1_11.jpg
t####.####.cn/sousuo_1_3.jpg
t####.####.cn/luntan5.jpg

HTTP POST requests:

u####.####.cn:8080/openapi/services/video/page
u####.####.cn/openapi/services/videoType/page
u####.####.cn/openapi/services/video/page
u####.####.cn/openapi/services/video/videoSearch
c####.####.la/update.ashx
a####.####.la/PayApi/Index?ts=####&rs=####&pid=####
de####.####.cn/index.php?s=####

Modified file system:

Creates the following files:

/data/data/####/cache/picasso-cache/e6a59ed3a37d7116a0e7f12e71ca3ef4.1.tmp
/data/data/####/cache/picasso-cache/be7ca584b6ee1232da95ade820781613.0.tmp
/data/data/####/cache/picasso-cache/3a22151760c7f1df55e4148f47a4fa40.1.tmp
/data/data/####/cache/picasso-cache/6883f9b6b2bc6ee5fce6ebdc66402eea.1.tmp
/data/data/####/cache/picasso-cache/37cdb12a71113107fa60a96ed5ab28f3.0.tmp
/data/data/####/cache/picasso-cache/db78e2e95f14deb4902d68f5748121cc.1.tmp
/data/data/####/cache/picasso-cache/770e1c3d171b889987033a8f664349bb.1.tmp
/data/data/####/shared_prefs/wb.xml.bak
/data/data/####/databases/db_feeList-journal
/data/data/####/cache/picasso-cache/ac9301a0e62f1d0b6f2eab4256edfe11.0.tmp
/data/data/####/shared_prefs/device_id.xml.xml
/data/data/####/cache/picasso-cache/f5fc828eb8a4336484fded65f057b150.1.tmp
/data/data/####/cache/picasso-cache/3a22151760c7f1df55e4148f47a4fa40.0.tmp
/data/data/####/cache/picasso-cache/d64da601c532cec2f89bdd689e54fe1f.1.tmp
/data/data/####/cache/picasso-cache/e169cccb4d32348f8a2305e95c8a6518.0.tmp
/data/data/####/cache/picasso-cache/c814dc7c66f81490028fe26685e5c574.1.tmp
/data/data/####/cache/picasso-cache/db78e2e95f14deb4902d68f5748121cc.0.tmp
/data/data/####/cache/picasso-cache/d64da601c532cec2f89bdd689e54fe1f.0.tmp
/data/data/####/cache/picasso-cache/be7ca584b6ee1232da95ade820781613.1.tmp
/data/data/####/cache/picasso-cache/d32a28c90bbbdd4354ee7837fc880f10.1.tmp
/data/data/####/cache/picasso-cache/007339440391fe60d6178ef3c35193ce.1.tmp
/data/data/####/cache/picasso-cache/dc1bdcdb9891aaa12366a42841f2c37f.1.tmp
/data/data/####/cache/picasso-cache/7b74f1a68b072f7bf9713b7e922bdb52.1.tmp
/data/data/####/cache/picasso-cache/d7d7eb76c2a1acaa2e51687025b81304.1.tmp
/data/data/####/libats.lock
/data/data/####/cache/picasso-cache/d0e1c04e9113ca2b9f588cdc808b7418.0.tmp
/data/data/####/cache/picasso-cache/f5fc828eb8a4336484fded65f057b150.0.tmp
/data/data/####/cache/picasso-cache/c814dc7c66f81490028fe26685e5c574.0.tmp
/data/data/####/cache/picasso-cache/3cc1f7d8aa859a00b9a017baacc47dd7.1.tmp
/data/data/####/cache/picasso-cache/c69278038827ab2249fbb51d4ed987aa.0.tmp
/data/data/####/cache/picasso-cache/d7d7eb76c2a1acaa2e51687025b81304.0.tmp
/data/data/####/cache/picasso-cache/9d51d98356ba327edc2f80ec38d6281e.1.tmp
/data/data/####/cache/picasso-cache/007339440391fe60d6178ef3c35193ce.0.tmp
/data/data/####/cache/picasso-cache/9c1323b25ba418a5e320cd810ddc4f49.1.tmp
/data/data/####/cache/picasso-cache/88c4e7b704304888e6389b20d59ea2ff.1.tmp
/data/data/####/shared_prefs/ui.xml
/data/data/####/cache/picasso-cache/7b74f1a68b072f7bf9713b7e922bdb52.0.tmp
/data/data/####/cache/picasso-cache/a6823c1b25e123dd81bfe3ca66f25c17.0.tmp
/data/data/####/cache/picasso-cache/dc1bdcdb9891aaa12366a42841f2c37f.0.tmp
/data/data/####/cache/picasso-cache/0bf7c91c216ef4ec1100720447642743.0.tmp
/data/data/####/cache/picasso-cache/37cdb12a71113107fa60a96ed5ab28f3.1.tmp
/data/data/####/shared_prefs/sharepafrence.xml
/data/data/####/cache/picasso-cache/9d51d98356ba327edc2f80ec38d6281e.0.tmp
/data/data/####/cache/picasso-cache/6eb1b9efc2f06c857edaf9fd285ef2b9.0.tmp
/data/data/####/cache/picasso-cache/d32a28c90bbbdd4354ee7837fc880f10.0.tmp
/data/data/####/cache/picasso-cache/de1896b25a6457a7e52b317fb121fc3e.1.tmp
/data/data/####/databases/db_feeList
/data/data/####/shared_prefs/device_id.xml
/data/data/####/cache/picasso-cache/0d3bac1780404dbc31e44ad8de7493cb.0.tmp
/data/data/####/cache/picasso-cache/ac9301a0e62f1d0b6f2eab4256edfe11.1.tmp
/data/data/####/cache/picasso-cache/3cc1f7d8aa859a00b9a017baacc47dd7.0.tmp
/data/data/####/cache/picasso-cache/88c4e7b704304888e6389b20d59ea2ff.0.tmp
/data/data/####/cache/picasso-cache/6883f9b6b2bc6ee5fce6ebdc66402eea.0.tmp
/data/data/####/cache/picasso-cache/770e1c3d171b889987033a8f664349bb.0.tmp
/data/data/####/cache/picasso-cache/a6823c1b25e123dd81bfe3ca66f25c17.1.tmp
/data/data/####/cache/picasso-cache/8e1bca5315c14376276bf9a87d6eb271.0.tmp
/data/data/####/cache/picasso-cache/21cc4eb173d8352c19dc5e244431dbe0.0.tmp
/data/data/####/cache/picasso-cache/journal.tmp
/data/data/####/cache/picasso-cache/0d3bac1780404dbc31e44ad8de7493cb.1.tmp
/data/data/####/shared_prefs/wb.xml
/data/data/####/shared_prefs/ui.xml.bak
/data/data/####/cache/picasso-cache/0bf7c91c216ef4ec1100720447642743.1.tmp
/data/data/####/cache/picasso-cache/21cc4eb173d8352c19dc5e244431dbe0.1.tmp
/data/data/####/cache/picasso-cache/e6a59ed3a37d7116a0e7f12e71ca3ef4.0.tmp
/data/data/####/cache/picasso-cache/9c1323b25ba418a5e320cd810ddc4f49.0.tmp
/data/data/####/cache/picasso-cache/d0e1c04e9113ca2b9f588cdc808b7418.1.tmp
/data/data/####/cache/picasso-cache/c69278038827ab2249fbb51d4ed987aa.1.tmp
/data/data/####/cache/picasso-cache/8e1bca5315c14376276bf9a87d6eb271.1.tmp
/data/data/####/cache/picasso-cache/6eb1b9efc2f06c857edaf9fd285ef2b9.1.tmp
/data/data/####/cache/picasso-cache/e169cccb4d32348f8a2305e95c8a6518.1.tmp
/data/data/####/cache/picasso-cache/de1896b25a6457a7e52b317fb121fc3e.0.tmp

Miscellaneous:

Contains functionality to send SMS messages automatically.

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical information

Curing recommendations

Free trial