Android.RemoteCode.7739

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.RemoteCode.337.origin

Network activity:

Connects to:

UDP(DNS) 8####.8.4.4:53
TCP(HTTP/1.1) cdn-im####.lud####.com:80
TCP(TLS/1.0) innerac####.s3-eu-w####.amazo####.com:443
TCP(TLS/1.0) tls.vu####.edges####.net:443
TCP(TLS/1.0) api-acc####.edges####.net:443
TCP(TLS/1.0) sdk-ev####.inner-a####.mobi:443
TCP(TLS/1.0) app.ad####.com:443
TCP(TLS/1.0) dualspa####.com:443
TCP(TLS/1.0) reg####.app-mea####.com:443
TCP(TLS/1.0) 1####.251.36.42:443
TCP(TLS/1.0) gmscomp####.google####.com:443
TCP(TLS/1.0) rr3---s####.g####.com:443
TCP(TLS/1.0) p####.google####.com:443
TCP(TLS/1.0) android####.adco####.com:443
TCP(TLS/1.0) fk-conf####.ray####.com:443
TCP(TLS/1.0) firebas####.google####.com:443
TCP(TLS/1.0) eve####.adco####.com:443
TCP(TLS/1.0) f####.gst####.com:443
TCP(TLS/1.0) events####.adco####.com:443
TCP(TLS/1.0) ms.appl####.com.####.net:443
TCP(TLS/1.0) api.face####.com:443
TCP(TLS/1.0) cdn-inn####.edg####.net:443
TCP(TLS/1.0) and####.google####.com:443
TCP(TLS/1.0) adc3-la####.adco####.com:443
TCP(TLS/1.0) app-mea####.com:443
TCP(TLS/1.0) googl####.g.doublec####.net:443
TCP(TLS/1.0) rr5---s####.g####.com:443
TCP(TLS/1.2) 1####.217.168.195:443
TCP(TLS/1.2) 1####.250.179.174:443
TCP(TLS/1.2) 1####.251.36.42:443
UDP rr5---s####.g####.com:443
UDP p####.google####.com:443
UDP rr3---s####.g####.com:443
TCP s.dualspa####.com:443
TCP 1####.251.36.42:443
TCP analyti####.minte####.net:9377
UDP 1####.251.36.42:443
TCP arm.lc####.cn:10020

DNS requests:

adc-ad-####.ad####.com
adc3-la####.adco####.com
ads.api.vu####.com
analyti####.minte####.net
and####.google####.com
android####.adco####.com
api.vu####.com
app-mea####.com
app.ad####.com
arm.lc####.cn
c####.inner-a####.mobi
c4d####.adco####.com
cd####.vu####.com
cdn-im####.lud####.com
confi####.ray####.com
dualspa####.com
eve####.adco####.com
events####.adco####.com
f####.gst####.com
firebas####.google####.com
g####.face####.com
gmscomp####.google####.com
googl####.g.doublec####.net
innerac####.s3-eu-w####.amazo####.com
ms.appl####.com
p####.google####.com
reg####.app-mea####.com
rr3---s####.g####.com
rr3---s####.g####.com
rr5---s####.g####.com
rt.appl####.com
s.dualspa####.com
sdk-ev####.inner-a####.mobi

HTTP GET requests:

api.face####.com:443/v3.2/132912770718858/mobile_sdk_gk?fields=####&form...
api.face####.com:443/v3.2/132912770718858?fields=####&format=####&advert...
api.face####.com:443/v3.2/132912770718858?fields=####&format=####&sdk=####
cdn-im####.lud####.com/c/201810/19/5bc9756d4788c.jpg
cdn-im####.lud####.com/c/201901/08/5c346d207f872.jpg
cdn-im####.lud####.com/c/201911/12/5dca904a4aa75.jpg
cdn-im####.lud####.com/c/201911/12/5dca916cd916f.jpg
cdn-im####.lud####.com/c/202007/02/5efd9f3337f9b.png
cdn-im####.lud####.com/c/202107/06/60e444a734216.jpg

HTTP POST requests:

api.face####.com:443/v3.2/132912770718858/activities
app.ad####.com:443/session
dualspa####.com:443/api?token=####

File system changes:

Creates the following files:

/data/data/####/.cl
/data/data/####/.jg.ac
/data/data/####/0.xml
/data/data/####/026ae9c9824b3e483fa6c71fa88f57ae27816141
/data/data/####/05021bc928410f4808d53f17bff79b94.js
/data/data/####/0dbae666-f2b0-4ef0-be96-7cb75ee49b1f.js
/data/data/####/1114f8a35b28bf051009090601c052cf.js
/data/data/####/1633031840514.dex
/data/data/####/1633031840514.dex.flock (deleted)
/data/data/####/1633031840514.jar
/data/data/####/1633031840514.tmp
/data/data/####/1977133ae333f521cf024f81109cbfc4.js
/data/data/####/211c3445-25ee-4b87-893b-498d3ddd3f5f
/data/data/####/232632c5e1cc78a9a0ce6934c37ef6e2
/data/data/####/232632c5e1cc78a9a0ce6934c37ef6e2.tmp
/data/data/####/232632c5e1cc78a9a0ce6934c37ef6e2.tmp (deleted)
/data/data/####/35a66f7c-4e51-400c-b198-81dbabb12edd.png
/data/data/####/4.5-stars.svg
/data/data/####/422de421e0f4e019426b9abfd780746bc40740eb
/data/data/####/4Od5mlOkKMGBwss03FnWf1z0PnACHJsPJqCf73k1yB0=
/data/data/####/4Od5mlOkKMGBwss03FnWf1z0PnACHJsPJqCf73k1yB0=.vng_meta
/data/data/####/4f0dba9c717f597a31d294da6a16bbe4
/data/data/####/4f0dba9c717f597a31d294da6a16bbe4.tmp
/data/data/####/53xOx6jBwPXx3LWk3JIU58LtiCOPqFKm7sSBo-4_B28=
/data/data/####/53xOx6jBwPXx3LWk3JIU58LtiCOPqFKm7sSBo-4_B28=.vng_meta
/data/data/####/7bf3a1e7bbd31e612eda3310c2cdb8075c43c6b5
/data/data/####/81aae894-2745-444d-be66-712fdd320f5f.js
/data/data/####/960ddf93bec24d286f478368be3e2cfa.js
/data/data/####/A6PvgotHWGNwg9H2gIsz09eOkOSaAL4pFDAoMNKxFkk=
/data/data/####/A6PvgotHWGNwg9H2gIsz09eOkOSaAL4pFDAoMNKxFkk=.vng_meta
/data/data/####/AdjustAttribution
/data/data/####/AdjustIoActivityState
/data/data/####/AdjustIoPackageQueue
/data/data/####/AppInfo
/data/data/####/AppVersion
/data/data/####/Cookies-journal
/data/data/####/FirebaseAppHeartBeat.xml
/data/data/####/HiAdSharedPreferences.xml
/data/data/####/IAConfigurationPreferences.xml
/data/data/####/IAConfigurationPreferences.xml.bak
/data/data/####/LYbFxhoGvPpJlVw5hnIj8tDnX8I9wAk68_fTc8gRjCo=
/data/data/####/LYbFxhoGvPpJlVw5hnIj8tDnX8I9wAk68_fTc8gRjCo=.vng_meta
/data/data/####/LocalAlertDialog.xml
/data/data/####/LocalAlertDialog.xml.bak
/data/data/####/MRAID-VIDEO.js
/data/data/####/PDuGMxdVRW9IRod9GMzO4yVzYSdV-6UnuPoD1mqqtEg=
/data/data/####/PDuGMxdVRW9IRod9GMzO4yVzYSdV-6UnuPoD1mqqtEg=.vng_meta
/data/data/####/PersistedInstallation1162172100tmp
/data/data/####/PersistedInstallation549413553tmp
/data/data/####/PersistentfileState
/data/data/####/PowerAssistService_native_connect
/data/data/####/PowerAssistService_native_core
/data/data/####/PowerAssistService_service_connect
/data/data/####/PowerAssistService_service_core
/data/data/####/PowerCleanService_native_core
/data/data/####/PowerCleanService_native_message
/data/data/####/PowerCleanService_service_core
/data/data/####/PowerCleanService_service_message
/data/data/####/PowerOtherService_native_connect
/data/data/####/PowerOtherService_native_message
/data/data/####/PowerOtherService_service_connect
/data/data/####/PowerOtherService_service_message
/data/data/####/T3sqclsNjazSl4hrm1yKzfDcd_mP8Zt0CG3-AG5kjSU=
/data/data/####/T3sqclsNjazSl4hrm1yKzfDcd_mP8Zt0CG3-AG5kjSU=.vng_meta
/data/data/####/W3D000-068-PLAY-en.html
/data/data/####/W3D_713_A22_720x1280_EN_30s-270x480-Q2.mp4
/data/data/####/WXovo7QJD8CKQM0WRto-3LheHVvCNx9s-qRfzKuel_k=
/data/data/####/WXovo7QJD8CKQM0WRto-3LheHVvCNx9s-qRfzKuel_k=.vng_meta
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/__default__.xml
/data/data/####/__default__.xml.bak
/data/data/####/a5f785a627f6d2a395f351dc01c413dc.png
/data/data/####/a8670432850eaec2573d0cd7b202ac47
/data/data/####/a8670432850eaec2573d0cd7b202ac47.tmp
/data/data/####/a8670432850eaec2573d0cd7b202ac47.tmp (deleted)
/data/data/####/accounts.xml
/data/data/####/ad-css-injection.css
/data/data/####/ad-js-injection.js
/data/data/####/ad.html
/data/data/####/adUnitConfig.json
/data/data/####/adc_events_db-journal
/data/data/####/adjust_preferences.xml
/data/data/####/admob.xml
/data/data/####/ads_cloud_config_sp.cfg.xml
/data/data/####/androidx.work.workdb-journal (deleted)
/data/data/####/b7623b9f6a231a05e10935ee39cbf15f
/data/data/####/b7623b9f6a231a05e10935ee39cbf15f.tmp
/data/data/####/cJZKeOuBrn4kERxqtaUH3SZ2oysoEQEeKwjgmXLRnTc.ttf
/data/data/####/cache_policy_journal
/data/data/####/cache_touch_timestamp
/data/data/####/centering_v1.css
/data/data/####/centering_v1.js
/data/data/####/classes.dex
/data/data/####/classes.dex;classes2.dex
/data/data/####/classes.dex;classes3.dex
/data/data/####/classes.dex;classes4.dex
/data/data/####/classes.dex;classes5.dex
/data/data/####/classes.dex;classes6.dex
/data/data/####/classes.oat
/data/data/####/com.applovin.sdk.1.xml
/data/data/####/com.applovin.sdk.preferences.p2IGUfNUvTbuVh_b8m...ml.bak
/data/data/####/com.applovin.sdk.preferences.p2IGUfNUvTbuVh_b8m...rC.xml
/data/data/####/com.applovin.sdk.shared.xml
/data/data/####/com.facebook.internal.preferences.APP_GATEKEEPERS.xml
/data/data/####/com.facebook.internal.preferences.APP_SETTINGS.xml
/data/data/####/com.facebook.sdk.USER_SETTINGS.xml
/data/data/####/com.facebook.sdk.appEventPreferences.xml
/data/data/####/com.facebook.sdk.attributionTracking.xml
/data/data/####/com.google.android.gms.measurement.prefs.xml
/data/data/####/com.ludashi.dualspace_preferences.xml
/data/data/####/com.vungle.sdk.xml
/data/data/####/com.vungle.sdk.xml.bak (deleted)
/data/data/####/cv.xml
/data/data/####/d88474dcdc6b4dd6_0
/data/data/####/device-config.ini
/data/data/####/dfe6b2497a7513ba_0
/data/data/####/eae6296f-54ea-41e9-9ab0-73055680bbf4.js
/data/data/####/f038e94cb33282ab_0
/data/data/####/f87dd0e09bafc6e7bc000ddcbd9dfa84
/data/data/####/f87dd0e09bafc6e7bc000ddcbd9dfa84.tmp
/data/data/####/fdaf9921a2da4812a28dc6fb85bd931e
/data/data/####/fdaf9921a2da4812a28dc6fb85bd931e.tmp
/data/data/####/ffa978aaefc55657829548a6428728bb.mp4-270x480-hevc-Q2.mp4
/data/data/####/fileState
/data/data/####/fyber.ua.xml
/data/data/####/generatefid.lock
/data/data/####/google_app_measurement_local.db
/data/data/####/google_app_measurement_local.db-journal
/data/data/####/hiad_sp_properties_cache.xml
/data/data/####/https_googleads.g.doubleclick.net_0.localstorage-journal
/data/data/####/ia-global.config
/data/data/####/ia-remote.config
/data/data/####/icon.png
/data/data/####/index
/data/data/####/index.html
/data/data/####/inneractive.config
/data/data/####/jmXzavcXKxyytjW_p7aXmO2KZ_zhNEMZd5xQHFu0wuM=
/data/data/####/jmXzavcXKxyytjW_p7aXmO2KZ_zhNEMZd5xQHFu0wuM=.vng_meta
/data/data/####/journal
/data/data/####/libAppDataSearch.so
/data/data/####/libWhisper.so
/data/data/####/libbrotli_native.so
/data/data/####/libgeller_jni_lite_lib.so
/data/data/####/libgmscore.so
/data/data/####/libinertial-anchor-jni.so
/data/data/####/libjgcastservice.so
/data/data/####/libjiagu.so
/data/data/####/libjiagu_64.so
/data/data/####/libjingle_peerconnection_so.so
/data/data/####/libmatching.so
/data/data/####/libpulp_jni.so
/data/data/####/libsemanticlocation_inference_jni.so
/data/data/####/libvcdiffjni.so
/data/data/####/libwearable-selector.so
/data/data/####/log_16553390807045ef8c98d-872b-49f8-8965-afa5a61d33dd
/data/data/####/mbridge.msdk.db-journal
/data/data/####/mbridge.xml
/data/data/####/media
/data/data/####/metrics_guid
/data/data/####/mraid.js
/data/data/####/network_requests
/data/data/####/omid-latest.js
/data/data/####/pP4SWWcketo-o_TZszG0nwZKZbFjbAyxpveyz9sB4UA=
/data/data/####/pP4SWWcketo-o_TZszG0nwZKZbFjbAyxpveyz9sB4UA=.vng_meta
/data/data/####/package.ini
/data/data/####/packages.ini
/data/data/####/pay_config.xml
/data/data/####/pending.xml
/data/data/####/persistent_postback_cache.json
/data/data/####/proc_auxv
/data/data/####/server_recommend_apps.cfg
/data/data/####/share_date.xml
/data/data/####/signature.ini
/data/data/####/sp_app_file.xml
/data/data/####/sp_app_file.xml.bak
/data/data/####/stats.bin
/data/data/####/status.bin
/data/data/####/superboost.log
/data/data/####/template
/data/data/####/the-real-index
/data/data/####/tmp.5wDf2w
/data/data/####/tmp.Ev5Ig4
/data/data/####/tmp.K3nPCs
/data/data/####/tmp.Wie5zp
/data/data/####/tmp.hiD3iY
/data/data/####/tmp.mTpvzG
/data/data/####/tmp.xHIBbV
/data/data/####/uid-list.ini
/data/data/####/upgrade_file.cfg.xml
/data/data/####/userlist.xml
/data/data/####/vungle-privacy.svg
/data/data/####/vungle.svg
/data/data/####/vungle_db-journal
/data/data/####/vungle_settings
/data/data/####/vungle_settings (deleted)
/data/data/####/wallpaper_bg.jpg
/data/misc/####/primary.prof
/data/user_de/####/hiad_sp_properties_cache.xml
/data/user_de/####/hiad_sp_story_book_file.xml
/data/user_de/####/pps_de_migration.xml

Miscellaneous:

Executes the following shell scripts:

/system/bin/sh
app_process64 / okhttp3.internal.platform.inner.PowerGemEntrance AgAAAE4AAAAvAGQAYQB0AGEALwB1AHMAZQByAC8AMAAvAGMAbwBtAC4AbAB1AGQAYQBzAGgAaQAuAGQAdQBhAGwAcwBwAGEAYwBlAC8AYQBwAHAAXwBUAG0AcABEAGkAcgAvAFAAbwB3AGUAcgBDAGwAZQBhAG4AUwBlAHIAdgBpAGMAZQBfAG4AYQB0AGkAdgBlAF8AbQBlAHMAcwBhAGcAZQAAAAAATgAAAC8AZABhAHQAYQAvAHUAcwBlAHIALwAwAC8AYwBvAG0ALgBsAHUAZABhAHMAaABpAC4AZAB1AGEAbABzAHAAYQBjAGUALwBhAHAAcABfAFQAbQBwAEQAaQByAC8AUABvAHcAZQByAE8AdABoAGUAcgBTAGUAcgB2AGkAYwBlAF8AbgBhAHQAaQB2AGUAXwBtAGUAcwBzAGEAZwBlAAAAAAAHAAAAbQBlAHMAcwBhAGcAZQAAAAEAAAD/////AAAAAP////8AAAAA/////xUAAABjAG8AbQAuAGwAdQBkAGEAcwBoAGkALgBkAHUAYQBsAHMAcABhAGMAZQAAACQAAABhAG4AZAByAG8AaQBkAHgALgBjAG8AcgBlAC4AYQBwAHAALgBQAG8AdwBlAHIARQB4AHAAbwByAHQAUwBlAHIAdgBpAGMAZQAAAAAAAAAAAAAAAAAAAAAAAAAAAP7///8AAAAAAQAAACEAAABhAG4AZAByAG8AaQBkAHgALgBjAG8AcgBlAC4AYQBwAHAALgBVAFAARABBAFQARQBfAFIARQBDAEUASQBWAEUAUgAAAAAAAAD/////AAAAABUAAABjAG8AbQAuAGwAdQBkAGEAcwBoAGkALgBkAHUAYQBsAHMAcABhAGMAZQAAAP////8AAAAAAAAAAAAAAAAAAAAA/v///wAAAAABAAAA/////wAAAAD/////AAAAAP////8VAAAAYwBvAG0ALgBsAHUAZABhAHMAaABpAC4AZAB1AGEAbABzAHAAYQBjAGUAAAA0AAAAbwBrAGgAdAB0AHAAMwAuAGkAbgB0AGUAcgBuAGEAbAAuAHAAbABhAHQAZgBvAHIAbQAuAGkAbgBuAGUAcgAuAFAAbwB3AGUAcgBJAG4AcwB0AHIAdQBtAGUAbgB0AGEAdABpAG8AbgAAAAAAAAAAAAAAAAAAAAAAAAAAAP7///8AAAAA --application --nice-name=message --daemon
app_process64 / okhttp3.internal.platform.inner.PowerGemEntrance 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 --application --nice-name=connect --daemon
app_process64 / okhttp3.internal.platform.inner.PowerGemEntrance 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 --application --nice-name=core --daemon
getprop ro.product.cpu.abi

Loads the following dynamic libraries:

libconscrypt_gmscore_jni
libjiagu_64
libnets
libv++_64

Uses the following algorithms to encrypt data:

AES-CBC-PKCS5Padding
AES-GCM-NoPadding
DES-ECB-PKCS5Padding
RSA-ECB-PKCS1Padding

Uses the following algorithms to decrypt data:

AES-CBC-PKCS5Padding
RSA-ECB-PKCS1Padding

Accesses the ITelephony private interface.

Uses special library to hide executable bytecode.

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Displays its own windows over windows of other apps.

Requests the system alert window permission.

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical information

Curing recommendations

Free trial