Android.SmsSend.24421

Technical information

Malicious functions:

Sends SMS:

17688729107: //sberbank.ru/sms/h1
17688729107: <SMS Content>
17688729107: VISA2615 Баланс: 5683.31р. Подробности в мобильном приложении http:
17688729107: 您的手机号[<Phone Number>]在湖南卫视快乐大本营节目被抽中奖啦！请登陆<www.happycamp.hntv.com>领取。
17688729107: 逾时未领将取消资格！

Intercepts incoming SMS and terminates the process of their transmission to handlers of other apps.

Network activity:

Connects to:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) m.0####.com:80
TCP(HTTP/1.1) www.0####.com:80

DNS requests:

m.0####.com
www.0####.com

HTTP GET requests:

m.0####.com/a/top/
m.0####.com/shuaigeshenghuozhao/3364.html
m.0####.com/style/css/css.css
m.0####.com/style/images/logo.png
m.0####.com/style/images/morelist.png
www.0####.com/d/file/20161015/1-161015162611.jpg
www.0####.com/d/file/20161018/1-16101R24116.jpg
www.0####.com/d/file/20161018/1-16101R30945.jpg
www.0####.com/d/file/20161021/1-161021232256.jpg
www.0####.com/d/file/20161102/1-161102162313.jpg
www.0####.com/d/file/20161120/1-161120124J0.jpg
www.0####.com/d/file/20161122/1-161122230330.jpg
www.0####.com/d/file/20161126/1-161126223G9.jpg
www.0####.com/d/file/20161130/1-161130224018.jpg
www.0####.com/d/file/20161201/1-161201224525.jpg
www.0####.com/d/file/20161206/1-161206200R3.jpg
www.0####.com/d/file/20161209/1-161209221648.jpg
www.0####.com/d/file/20161215/1-161215221P5.jpg
www.0####.com/d/file/20161216/1-161216220616.jpg
www.0####.com/d/file/20161221/1-161221222123.jpg
www.0####.com/d/file/20161221/1-161221231333.jpg
www.0####.com/d/file/20161221/1-161221231335.jpg
www.0####.com/d/file/20161221/1-161221231336.jpg
www.0####.com/d/file/20161221/1-161221231337.jpg
www.0####.com/d/file/20161223/1-161223221152.jpg
www.0####.com/d/file/20161228/1-16122R25Q4.jpg
www.0####.com/d/file/20161229/1-161229224501.jpg
www.0####.com/d/file/20170106/1-1F106233055.jpg
www.0####.com/d/file/20170110/1-1F110223K2.jpg
www.0####.com/d/file/20170405/799022b21c23c39a42b3eb15e5137d86.jpg
www.0####.com/d/file/20170405/d76ad5f3ea6a77b86bf79f426125abcd.jpg
www.0####.com/d/file/20170804/1-1FP4112437.jpg
www.0####.com/d/file/20171001/0P6353604_0.jpg?x-oss-process=####
www.0####.com/d/file/20171002/0P4035303_0.jpg?x-oss-process=####
www.0####.com/d/file/20171003/0P4491Y3_0.jpg?x-oss-process=####
www.0####.com/d/file/20171004/0P61I434_0.jpg
www.0####.com/d/file/20171004/0P61I434_0.jpg?x-oss-process=####
www.0####.com/d/file/20171015/c7edaf8ad6a209a49e2d298c5b544898.jpg
www.0####.com/d/file/20171024/0P13N424_0.jpg
www.0####.com/d/file/20180314/0P54cQ8_0.jpg
www.0####.com/d/file/20180320/0P03T254_0.jpg?x-oss-process=####
www.0####.com/d/file/20180321/0P03Nc1_0.jpg?x-oss-process=####
www.0####.com/d/file/20180321/0P2354013_0.jpg?x-oss-process=####
www.0####.com/d/file/20180322/0P0435C7_0.jpg
www.0####.com/d/file/20180322/0P0435C7_0.jpg?x-oss-process=####
www.0####.com/d/file/20180515/1-1P325103133.jpg
www.0####.com/d/file/20180517/1-1P51F92G1.jpg
www.0####.com/d/file/20180521/1-1P521091423.jpg
www.0####.com/d/file/20180526/1-1P5260S430.jpg
www.0####.com/d/file/20180526/1-1P5260S936.jpg
www.0####.com/d/file/20180526/1-1P5260U203.jpg
www.0####.com/d/file/20180530/1-1P530111229.jpg
www.0####.com/d/file/20180530/1-1P530112205.jpg
www.0####.com/d/file/20180531/1-1P5310PA4.jpg
www.0####.com/d/file/20180601/1-1P6010J427.png
www.0####.com/d/file/20180601/1-1P6010J427.png?x-oss-process=####
www.0####.com/d/file/20180601/1-1P6010K237.png
www.0####.com/d/file/20180601/1-1P6010K242.png
www.0####.com/d/file/20180601/1-1P6010K308.png
www.0####.com/d/file/20180601/1-1P6010P212.png
www.0####.com/d/file/20180601/1-1P6010P212.png?x-oss-process=####
www.0####.com/d/file/20180601/1-1P6010PU5.png
www.0####.com/d/file/20180601/1-1P6010PU5.png?x-oss-process=####
www.0####.com/d/file/20180601/1-1P6010Q502.png?x-oss-process=####
www.0####.com/d/file/20180613/1-1P6130AR6.png
www.0####.com/d/file/20180615/1-1P615055553.png
www.0####.com/d/file/20180615/1-1P615062129.png
www.0####.com/d/file/20180615/1-1P615064628.png
www.0####.com/e/tags/?tagname=####
www.0####.com/shuaigeshenghuozhao/3364_2.html
www.0####.com/tags.html
www.0####.com/wangluoshuaige/1670.html
www.0####.com/wangluoshuaige/1670_2.html
www.0####.com/wangluoshuaige/1670_3.html
www.0####.com/wangluoshuaige/1670_4.html
www.0####.com/zhongguoshuaige/
www.0####.com/zhongguoshuaige/22614.html
www.0####.com/zhongguoshuaige/22614_2.html
www.0####.com/zhongguoshuaige/22614_3.html

File system changes:

Creates the following files:

/data/data/####/data_0
/data/data/####/data_1
/data/data/####/data_2
/data/data/####/data_3
/data/data/####/f_000001
/data/data/####/f_000002
/data/data/####/f_000003
/data/data/####/f_000004
/data/data/####/f_000005
/data/data/####/f_000006
/data/data/####/f_000007
/data/data/####/f_000008
/data/data/####/f_000009
/data/data/####/f_00000a
/data/data/####/f_00000b
/data/data/####/f_00000c
/data/data/####/f_00000d
/data/data/####/f_00000e
/data/data/####/f_00000f
/data/data/####/f_000010
/data/data/####/f_000011
/data/data/####/f_000012
/data/data/####/f_000013
/data/data/####/f_000014
/data/data/####/f_000015
/data/data/####/f_000016
/data/data/####/f_000017
/data/data/####/f_000018
/data/data/####/f_000019
/data/data/####/f_00001a
/data/data/####/f_00001b
/data/data/####/f_00001c
/data/data/####/f_00001d
/data/data/####/f_00001e
/data/data/####/f_00001f
/data/data/####/f_000020
/data/data/####/f_000021
/data/data/####/f_000022
/data/data/####/f_000023
/data/data/####/f_000024
/data/data/####/f_000025
/data/data/####/f_000026
/data/data/####/f_000027
/data/data/####/f_000028
/data/data/####/f_000029
/data/data/####/f_00002a
/data/data/####/f_00002b
/data/data/####/f_00002c
/data/data/####/f_00002d
/data/data/####/f_00002e
/data/data/####/f_00002f
/data/data/####/f_000030
/data/data/####/f_000031
/data/data/####/f_000032
/data/data/####/f_000033
/data/data/####/f_000034
/data/data/####/f_000035
/data/data/####/f_000036
/data/data/####/f_000037
/data/data/####/f_000038
/data/data/####/f_000039
/data/data/####/index
/data/data/####/webview.db-journal
/data/data/####/webviewCookiesChromium.db-journal

Miscellaneous:

Contains functionality for automatic SMS sending.

Gets information about phone status (number, IMEI, etc.).

Displays its own windows over windows of other apps.

Parses information from SMS.

Gets information about sent/received SMS.

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical information

Curing recommendations

Free trial