マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Android.Locker.16744

Added to the Dr.Web virus database: 2023-05-26

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) v.dy####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) rr6---s####.g####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) 2####.85.233.94:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.2) 2####.85.233.94:443
  • TCP(TLS/1.2) and####.google####.com:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • and####.google####.com
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • rr6---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/0015d056bdd18816_0
  • /data/data/####/0029a619119e5381_0
  • /data/data/####/005e0039596f0a03_0 (deleted)
  • /data/data/####/014513153ddb2e19_0
  • /data/data/####/0149e2485409c75f_0
  • /data/data/####/0149e2485409c75f_1
  • /data/data/####/017875e72309d2d8_0
  • /data/data/####/02f7cf4c50ccc275_0
  • /data/data/####/05a326d54e9100c2_0
  • /data/data/####/05b5f9a52765cee8_0
  • /data/data/####/087118d8a04f8ee9_0
  • /data/data/####/08790570ec795a2f_0
  • /data/data/####/08f58059e293687c_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0ab0d8b98d74300c_0
  • /data/data/####/0aca2a2df8e8a61b_0
  • /data/data/####/0ccd23d6380ac5c4_0
  • /data/data/####/0cd3445d4a620356_0
  • /data/data/####/0cd48769cc0a71e2_0
  • /data/data/####/0d633a62b797fe1d_0
  • /data/data/####/0f26c200229407c4_0
  • /data/data/####/108e9001c48d8e49_0
  • /data/data/####/10e5f51bbc6c8cec_0
  • /data/data/####/11681d94fd44d4ba_0
  • /data/data/####/1181cee7abacf2e4_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/14cde537d40eb4f7_0 (deleted)
  • /data/data/####/150e0e0c2b540753_0
  • /data/data/####/150e0e0c2b540753_s
  • /data/data/####/1621a659d0794ef9_0
  • /data/data/####/18c80a2056aa0d70_0 (deleted)
  • /data/data/####/1a9edfc8d746d4d3_0
  • /data/data/####/1c3aae2ffc5a59d8_0
  • /data/data/####/1c4199eafb005916_0
  • /data/data/####/1c4199eafb005916_s
  • /data/data/####/1cdd810033177545_0
  • /data/data/####/1d79692484cf863b_0
  • /data/data/####/1f3b11e29e0e2db2_0
  • /data/data/####/1f3b11e29e0e2db2_1
  • /data/data/####/1f811b9a0c092d81_0
  • /data/data/####/22560ac717f52d25_0
  • /data/data/####/22560ac717f52d25_1
  • /data/data/####/238bf135198c9ebc_0
  • /data/data/####/238d535a802c0681_0
  • /data/data/####/23ed19829be7e7dc_0
  • /data/data/####/24b20b0e69d901ee_0
  • /data/data/####/253db71cfe15d4bd_0
  • /data/data/####/25f99ed4a38a2487_0 (deleted)
  • /data/data/####/26235d40dbdcb73d_0 (deleted)
  • /data/data/####/272bebb1f82fbdc7_0
  • /data/data/####/27eedaa5d8cc9846_0
  • /data/data/####/2822c45fe895ea42_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2a0115f5fb2e24ef_0
  • /data/data/####/2b00e1fec7690351_0
  • /data/data/####/2c5b8558ab65fa3e_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2dae205149747ba6_0
  • /data/data/####/3109e4a6e401b5fd_0
  • /data/data/####/3109e4a6e401b5fd_1
  • /data/data/####/3301c16ea26ef9c2_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/34cf31afe5385f74_0 (deleted)
  • /data/data/####/350008baf88d2b52_0
  • /data/data/####/353b27e0a17a260e_0
  • /data/data/####/35b1b2de7f451e57_0
  • /data/data/####/360dc48c1751811f_0 (deleted)
  • /data/data/####/36cdb1adee788ae0_0
  • /data/data/####/3806f950a6cb9ef7_0
  • /data/data/####/38f2f0d93343a4c9_0
  • /data/data/####/38f4f4b6250c8f26_0
  • /data/data/####/3b2028978c8596c0_0
  • /data/data/####/3b2cd0f85392d15c_0
  • /data/data/####/3b396958ef9d2dbd_0
  • /data/data/####/3c24d3e58f4b20b4_0
  • /data/data/####/3ce8ab1b4442720c_0
  • /data/data/####/3da8339896f45611_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/407f7ba7056c3f68_0
  • /data/data/####/407f7ba7056c3f68_1
  • /data/data/####/448a1373a92e3548_0
  • /data/data/####/4518834d54933bb6_0
  • /data/data/####/45440df98dd6e1a5_0
  • /data/data/####/454eb3154cad5739_0
  • /data/data/####/454eb3154cad5739_1
  • /data/data/####/45582836e632036c_0
  • /data/data/####/46488e6fa36d32d1_0
  • /data/data/####/4793b63b233b4bda_0
  • /data/data/####/482c601761ffe816_0
  • /data/data/####/482c601761ffe816_s
  • /data/data/####/4867748e5ab26002_0
  • /data/data/####/496cc25234a2e478_0
  • /data/data/####/4a874d2372b2bee4_0
  • /data/data/####/4b150acac53daf05_0
  • /data/data/####/4b482d9f778f0483_0
  • /data/data/####/4b6e80d196903b11_0
  • /data/data/####/4c10d6dc9c5c3392_0
  • /data/data/####/4c52f1098424f900_0
  • /data/data/####/4c54432125694238_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4db5abfd1f3d4305_0
  • /data/data/####/4e9d35a0265f4163_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4f35ca258c2ee409_0
  • /data/data/####/4f37abe332f0a2a4_0
  • /data/data/####/4f37abe332f0a2a4_1
  • /data/data/####/4fffb28765d4b69c_0
  • /data/data/####/50f182e1c3d7352b_0
  • /data/data/####/51e1ddeeca65893f_0
  • /data/data/####/51e1ddeeca65893f_1
  • /data/data/####/5239560409ddafeb_0
  • /data/data/####/545684dca0fc263d_0
  • /data/data/####/56270704fa8832bf_0
  • /data/data/####/568453935ba2fb10_0 (deleted)
  • /data/data/####/56b00c3e6a235433_0
  • /data/data/####/579621fe03c7eabf_0
  • /data/data/####/58bb22e8378cac8b_0
  • /data/data/####/5a3ebfb203298532_0
  • /data/data/####/5cc1e43a8bfb1276_0
  • /data/data/####/5dd7d0ec1bb9fe34_0
  • /data/data/####/5fb6dbd2e5015b31_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/632aed3e14d13d13_0
  • /data/data/####/63bcbd1481e393db_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/676ba0a0c522604e_0
  • /data/data/####/6887c2426388e671_0
  • /data/data/####/6887c2426388e671_1
  • /data/data/####/690fd838ce6389e4_0
  • /data/data/####/690fd838ce6389e4_s
  • /data/data/####/691b4dbf35cc94eb_0
  • /data/data/####/6a3ef89392daf914_0
  • /data/data/####/6d444989c36fe1b7_0
  • /data/data/####/6d444989c36fe1b7_1
  • /data/data/####/6d658f0afb5f9d07_0
  • /data/data/####/6dc427d540a3aa82_0
  • /data/data/####/6e178f8d0f0c587b_0
  • /data/data/####/6e180f3e53b300cf_0
  • /data/data/####/6e5675efab9b2610_0
  • /data/data/####/6e9fa5dc2faef67e_0
  • /data/data/####/6ec7abfd0021f1a5_0
  • /data/data/####/6fe8c1d0a61f5fdc_0
  • /data/data/####/70206293812224ce_0
  • /data/data/####/70206293812224ce_s
  • /data/data/####/707e9f97baf6a4dc_0
  • /data/data/####/7421c8a703f0ead2_0
  • /data/data/####/74e6e342c9173050_0
  • /data/data/####/75281fc7b2ea3441_0
  • /data/data/####/788e2bd6919e51b1_0
  • /data/data/####/78956e07dc3bea7d_0
  • /data/data/####/7a4db008c007fcfa_0
  • /data/data/####/7a8a597854eefbfb_0
  • /data/data/####/7b18d78c043b68df_0
  • /data/data/####/7bd66c27e8ca5f88_0
  • /data/data/####/7be1e6770f52a640_0
  • /data/data/####/7c0c3670ce8c6ef4_0
  • /data/data/####/7c0c3670ce8c6ef4_s
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c8d1c4e74746a38_0
  • /data/data/####/7c8d1c4e74746a38_1
  • /data/data/####/7cf39f6f79b20200_0
  • /data/data/####/7d5452cfc1b2c8d3_0
  • /data/data/####/7d632781d55a8733_0
  • /data/data/####/7dcb61e15de2d57b_0
  • /data/data/####/7dd023d61715bc7e_0
  • /data/data/####/7e4836cacaad7bf5_0
  • /data/data/####/7eb1ba78cfac9f0a_0
  • /data/data/####/7eb1ba78cfac9f0a_1
  • /data/data/####/7ec17a010d60d355_0
  • /data/data/####/7f76fb8f1061ae4c_0
  • /data/data/####/7fd0043b20627493_0
  • /data/data/####/80c133648cbcb00b_0
  • /data/data/####/80f468ecf75b6b3f_0
  • /data/data/####/812633a381be10b0_0 (deleted)
  • /data/data/####/814c03ea5abd8e83_0
  • /data/data/####/83a7ba793820430f_0
  • /data/data/####/84529f67452f618f_0
  • /data/data/####/84a76658744bee65_0 (deleted)
  • /data/data/####/85a674fcf0c3df92_0
  • /data/data/####/85e6366e5f9634ea_0
  • /data/data/####/865cc12b9926319f_0
  • /data/data/####/86a39c337d9c6a40_0
  • /data/data/####/87ae53f35cd4d376_0
  • /data/data/####/87dd04bba849e944_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/898f4048f09cc6bd_0
  • /data/data/####/8c91e3c9150f8244_0
  • /data/data/####/8ca1343c93b7b00b_0
  • /data/data/####/8fac3e25ceffaa2b_0
  • /data/data/####/9015da98a0c6d92c_0
  • /data/data/####/913f519559d44805_0
  • /data/data/####/92c955b84e014367_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/94321d0409c64065_0
  • /data/data/####/949b2d4f2b3274cb_0 (deleted)
  • /data/data/####/94bf555c6c6dcd29_0
  • /data/data/####/94bf555c6c6dcd29_1
  • /data/data/####/953104ba30dfe9be_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/977bf23d65429ce5_0 (deleted)
  • /data/data/####/990afffd393f0b58_0
  • /data/data/####/9b82a4f0550e8348_0
  • /data/data/####/9d0ec0b1c17328a2_0
  • /data/data/####/9f55810857f008e8_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/LPqUj.dex
  • /data/data/####/LPqUj.dex.flock (deleted)
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/QzLcytJWd.dex
  • /data/data/####/QzLcytJWd.dex.flock (deleted)
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a1e79494dd2053dc_0
  • /data/data/####/a49ecd20dc961816_0
  • /data/data/####/a618431a4212d801_0
  • /data/data/####/a682759e467240db_0
  • /data/data/####/a7161918d3dd1058_0
  • /data/data/####/a75ec65e758e7323_0
  • /data/data/####/a75fdb11d5785716_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aaaedafbf983f728_0
  • /data/data/####/ac250ec7ea192dae_0
  • /data/data/####/ac250ec7ea192dae_1
  • /data/data/####/adb0161b1a8010b0_0
  • /data/data/####/aeafb3fb47587c43_0
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/aec5b5f07b0f77ad_0
  • /data/data/####/b088c912433d5779_0
  • /data/data/####/b099e26ffc5e4c90_0
  • /data/data/####/b099e26ffc5e4c90_1
  • /data/data/####/b1746c7a7748450c_0
  • /data/data/####/b1e6891f3b969b61_0
  • /data/data/####/b2faefda4f4a389a_0
  • /data/data/####/b44ae7d9bdf1146a_0
  • /data/data/####/b534cdab968733b1_0
  • /data/data/####/b59a41653508ff1f_0 (deleted)
  • /data/data/####/b65efbbd4b359604_0
  • /data/data/####/b6d4f4442f9c523d_0
  • /data/data/####/b7073f0280ff0ebb_0
  • /data/data/####/b8363af800a05a3d_0 (deleted)
  • /data/data/####/b86ba1bd8dd7cb18_0
  • /data/data/####/b905ed819aa2234d_0
  • /data/data/####/b93e535116ace1fb_0
  • /data/data/####/b942469032ef214f_0
  • /data/data/####/ba3145df04d10ced_0
  • /data/data/####/ba97653c4ee760d4_0
  • /data/data/####/bb4d8ffcb8448efb_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/be08a3cdd135a8f9_0
  • /data/data/####/bf0fe2bbd4f3fb0a_0
  • /data/data/####/bff91512c092579d_0
  • /data/data/####/c123a18d61bb69f0_0
  • /data/data/####/c1312d8476130b1f_0 (deleted)
  • /data/data/####/c15e0f60bb18a110_0
  • /data/data/####/c1d67f7e47b7030c_0
  • /data/data/####/c32ff360cd3630b5_0 (deleted)
  • /data/data/####/c3b7f75ab229848e_0
  • /data/data/####/c40cc76ebccc3517_0
  • /data/data/####/c424b6a6bfa16c9e_0
  • /data/data/####/c424b6a6bfa16c9e_1
  • /data/data/####/c74841f9f0469751_0
  • /data/data/####/c8a714d171c71d57_0 (deleted)
  • /data/data/####/c8b6878a8369442f_0
  • /data/data/####/c982dcf4b02dbd8c_0
  • /data/data/####/cb21163042d8660e_0
  • /data/data/####/cb21163042d8660e_s
  • /data/data/####/cb80aeeacb66ab24_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/ccdc5c52035e7b54_0
  • /data/data/####/cd9ae6e50aa5fb61_0
  • /data/data/####/cebc7aa9940ca00b_0
  • /data/data/####/com.lipohrmq_preferences.xml
  • /data/data/####/d0a9d1b7166d1746_0
  • /data/data/####/d268c57d6d7fab3a_0
  • /data/data/####/d26e7ea5458a253b_0
  • /data/data/####/d2f0b41a238b9d13_0
  • /data/data/####/d2fede76df72a882_0
  • /data/data/####/d2fede76df72a882_1
  • /data/data/####/d37d2fcb4446f350_0
  • /data/data/####/d49281a647c57da6_0
  • /data/data/####/d5c75480b58f6e9b_0
  • /data/data/####/d67a81e0fe9049b8_0
  • /data/data/####/d757f9f32b5eaab1_0
  • /data/data/####/d7702cb1e409bd62_0
  • /data/data/####/d77d655ec40a4bfd_0
  • /data/data/####/d79837f3b1d601d4_0
  • /data/data/####/d81f4a55c717935a_0
  • /data/data/####/d8705bfc0c56b9fd_0
  • /data/data/####/d922f9740d4ce710_0
  • /data/data/####/d97ac7dfd2b9e438_0
  • /data/data/####/d992c70432b86ba0_0
  • /data/data/####/d9f60e015c7b3e30_0
  • /data/data/####/da6d4a8043a5955a_0
  • /data/data/####/da6d4a8043a5955a_1
  • /data/data/####/daaadb02239c5c68_0
  • /data/data/####/dcd37a536dff139b_0
  • /data/data/####/dd4355938b3c5839_0 (deleted)
  • /data/data/####/de4359e6e9d13050_0
  • /data/data/####/dff29db6807a2a3a_0
  • /data/data/####/dff82a12f0a04e52_0
  • /data/data/####/e16adb5713fce02c_0
  • /data/data/####/e19f2c34183a9a08_0
  • /data/data/####/e26c136f8fc8cd1d_0 (deleted)
  • /data/data/####/e369e1303da1bc13_0
  • /data/data/####/e3d48a51efd5a838_0
  • /data/data/####/e6fe05eee09b598a_0
  • /data/data/####/e8295dbd46a5946a_0
  • /data/data/####/e8576cc23211b20d_0
  • /data/data/####/e89a866587ac4710_0
  • /data/data/####/e8eb80236ce3b384_0
  • /data/data/####/e965cabeb0a0165c_0 (deleted)
  • /data/data/####/e9b1a5ba76e96285_0
  • /data/data/####/ea499e4bef7f9103_0
  • /data/data/####/ea5a6f44c8eaf6f7_0
  • /data/data/####/eb27e6838fdf8b11_0
  • /data/data/####/eb32f841a913e0f5_0
  • /data/data/####/eb8fcfe3cb455784_0
  • /data/data/####/ec3aff5edf2f1a90_0 (deleted)
  • /data/data/####/ec91127e9573091f_0
  • /data/data/####/ef92b74305b6595d_0
  • /data/data/####/ef92b74305b6595d_s
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f0be53be0244bcab_0
  • /data/data/####/f0bea11eed716e67_0
  • /data/data/####/f2021ff34f881b15_0
  • /data/data/####/f242e90453eb54eb_0
  • /data/data/####/f242e90453eb54eb_1
  • /data/data/####/f311666ca3520b36_0
  • /data/data/####/f362012a033b8a5f_0
  • /data/data/####/f362012a033b8a5f_1
  • /data/data/####/f52ac0e889b4b979_0
  • /data/data/####/f5e8fdf50d5296ab_0
  • /data/data/####/f5e8fdf50d5296ab_1
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/f791a8ba9d8a6458_0
  • /data/data/####/f7ac427ab8211cf2_0
  • /data/data/####/f9af25bf44c2445f_0
  • /data/data/####/fa8bbc348a0eac8b_0 (deleted)
  • /data/data/####/fb0a062839608aed_0
  • /data/data/####/fb19c18ed156f3fd_0
  • /data/data/####/fb4daf629a4e64be_0
  • /data/data/####/fc79d7e61b559820_0
  • /data/data/####/fdc323ec8c565ca0_0
  • /data/data/####/fdec0ce659f8ac9b_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff889b32b3df0497_0
  • /data/data/####/index
  • /data/data/####/juKJtu.dex
  • /data/data/####/juKJtu.dex.flock (deleted)
  • /data/data/####/mYntLVxPY.dex
  • /data/data/####/mYntLVxPY.dex.flock (deleted)
  • /data/data/####/metrics_guid
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android