Technical information
Malicious functions:
Threat detection based on machine learning.
Network activity:
Connects to:
- UDP(DNS) 8####.8.4.4:53
- TCP(HTTP/1.1) con####.o####.website:80
- TCP(TLS/1.0) instant####.google####.com:443
- TCP(TLS/1.0) yvk8####.a####.net:443
- TCP(TLS/1.0) cm.ste####.com:443
- TCP(TLS/1.0) yrg6####.a####.net:443
- TCP(TLS/1.0) f####.gst####.com:443
- TCP(TLS/1.0) o####.website:443
- TCP(TLS/1.0) jsc.adske####.co.uk:443
- TCP(TLS/1.0) www.googlet####.com:443
- TCP(TLS/1.0) safebro####.google####.com:443
- TCP(TLS/1.0) syndica####.exdy####.com:443
- TCP(TLS/1.0) www.google-####.com:443
- TCP(TLS/1.0) onesi####.com:443
- TCP(TLS/1.0) 1####.217.17.106:443
- TCP(TLS/1.0) f####.google####.com:443
- TCP(TLS/1.0) 1####.217.20.74:443
- TCP(TLS/1.2) 2####.58.214.14:443
- TCP(TLS/1.2) 2####.58.214.10:443
- TCP(TLS/1.2) 1####.217.17.106:443
- TCP(TLS/1.2) 1####.217.17.35:443
DNS requests:
- a.exdy####.com
- c.adske####.co.uk
- cdn.adske####.co.uk
- cm.adske####.co.uk
- cm.ste####.com
- con####.o####.website
- f####.google####.com
- f####.gst####.com
- instant####.google####.com
- jsc.adske####.co.uk
- m####.go####.com
- o####.website
- onesi####.com
- s####.adske####.co.uk
- s3t3####.ac####.net
- safebro####.google####.com
- serv####.adske####.co.uk
- syndica####.exdy####.com
- www.google-####.com
- www.googlet####.com
HTTP GET requests:
- con####.o####.website/AmineData.json
File system changes:
Creates the following files:
- /data/data/####/0337d8a06fee39ff_0
- /data/data/####/10db0f0ec292930f_0
- /data/data/####/115c8d43211937a7_0
- /data/data/####/15899d9f04f34f2d_0
- /data/data/####/2534125770a5a71a_0
- /data/data/####/2864800ebf62641d_0
- /data/data/####/2940195bd9870d6e_0
- /data/data/####/2940195bd9870d6e_1
- /data/data/####/2a74a5c8e96d07e2_0
- /data/data/####/31669300281fee47_0
- /data/data/####/330ae09144e64a41_0
- /data/data/####/36d43bdd8d9ba7d4_0
- /data/data/####/39fe36acb38519a3_0
- /data/data/####/45ca1e71f57e5106_0 (deleted)
- /data/data/####/4db8f160948aa22e_0 (deleted)
- /data/data/####/4f03a6795e163632_0
- /data/data/####/4f03a6795e163632_s
- /data/data/####/55ae065d442fa837_0
- /data/data/####/574d31adc60d1c71_0
- /data/data/####/5cfeb7a6ce9a8b00_0 (deleted)
- /data/data/####/5f8bb38a8f9a986e_0
- /data/data/####/641d3a895f5e7204_0
- /data/data/####/67e0bf748762c5a9_0
- /data/data/####/67e0bf748762c5a9_1
- /data/data/####/6da559af78269495_0
- /data/data/####/6fe17ab83b64bd09_0
- /data/data/####/6fe17ab83b64bd09_1
- /data/data/####/71f18766f73d98d0_0
- /data/data/####/7bcb7a0ed943231a_0
- /data/data/####/7bcb7a0ed943231a_1
- /data/data/####/80fc3e4dfc4f1dd2_0
- /data/data/####/85382c8ca074a357_0
- /data/data/####/87b926c76470e062_0
- /data/data/####/87b926c76470e062_1
- /data/data/####/97de81f0a4595744_0
- /data/data/####/Cookies-journal
- /data/data/####/GTPlayerPurchases.xml
- /data/data/####/OneSignal.db-journal
- /data/data/####/OneSignal.xml
- /data/data/####/OneSignalTriggers.xml
- /data/data/####/WebViewChromiumPrefs.xml
- /data/data/####/a8eb22aa8688d63e_0
- /data/data/####/ab66403c1cf10448_0
- /data/data/####/ac84e1f0ef69c4e7_0
- /data/data/####/b82ee623b928cc6a_0
- /data/data/####/bbeb11c618c2005a_0
- /data/data/####/c70bc7a919da8874_0
- /data/data/####/c7a75b4a49748626_0
- /data/data/####/cba05ce7dbdf6470_0
- /data/data/####/ccb41d4a869ddc4c_0
- /data/data/####/cd72e90eec36762e_0
- /data/data/####/cd72e90eec36762e_1
- /data/data/####/cf290366fe0c80fc_0
- /data/data/####/com.CORONAVIRUS.OUTBREAK_preferences.xml
- /data/data/####/com.google.InstanceId.properties
- /data/data/####/com.google.android.gms.appid-no-backup
- /data/data/####/com.google.android.gms.appid.xml
- /data/data/####/d338b2825f4e443a_0
- /data/data/####/d3d6c4e45c9c1534_0
- /data/data/####/d6580fff8a743da5_0
- /data/data/####/db7b120372b7a1e3_0
- /data/data/####/dba3cf0faeb73276_0
- /data/data/####/e341acd9a8b5c099_0 (deleted)
- /data/data/####/e644612385bd9366_0
- /data/data/####/e8160fc3ac66f9b8_0
- /data/data/####/eff0b168c42063a4_0
- /data/data/####/evernote_jobs.db-journal
- /data/data/####/f0515e863ed79afb_0
- /data/data/####/f28c78e1ee3e41d4_0
- /data/data/####/f48bccff456f6adc_0
- /data/data/####/f9844468ce8274fb_0
- /data/data/####/faf63f48cb4748df_0
- /data/data/####/index
- /data/data/####/metrics_guid
- /data/data/####/motyaJson.json
- /data/data/####/the-real-index
- /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Displays its own windows over windows of other apps.