マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Android.Locker.17077

Added to the Dr.Web virus database: 2023-07-10

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) ht-####.a####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) gmscomp####.google####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) www.google####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) connect####.gst####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • and####.google####.com
  • cdn1-sm####.ph####.com
  • connect####.gst####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • gmscomp####.google####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google####.com
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/01750c5363b38d83_0
  • /data/data/####/0286f4100ada5a03_0
  • /data/data/####/04c2d9f8066a61fb_0
  • /data/data/####/05143edfd34e0979_0
  • /data/data/####/067d7abb805b3efc_0
  • /data/data/####/070423cfc5b3e95a_0
  • /data/data/####/0792cbf03ef2bd00_0
  • /data/data/####/07bb39f9c57b9545_0
  • /data/data/####/08917a0b88d0f142_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a97bc168accc90f_0
  • /data/data/####/0b2533dc94c233fb_0
  • /data/data/####/0b6c3bd569c0aff2_0
  • /data/data/####/0cea320a1856efb0_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/1251c9deb44f08a1_0
  • /data/data/####/1251c9deb44f08a1_s
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/13607241bb1eb5c1_0 (deleted)
  • /data/data/####/1389d4be8da3180e_0
  • /data/data/####/13c8712dcdeedec3_0
  • /data/data/####/13d1b1587015c6b6_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/144c90de263d353c_0
  • /data/data/####/14968192596e74cb_0
  • /data/data/####/15f8932287d876e2_0
  • /data/data/####/15f8932287d876e2_0 (deleted)
  • /data/data/####/1608d5454cf8768e_0
  • /data/data/####/168ea52470f6acb1_0
  • /data/data/####/176e456ad06b8f5c_0
  • /data/data/####/181cb8b25c6b6bec_0
  • /data/data/####/18ac60a2f70217ff_0
  • /data/data/####/1ac5b96ee8e5db35_0
  • /data/data/####/1b438cabde9b923b_0
  • /data/data/####/1c0a495bcaffb09c_0
  • /data/data/####/1c9d0791f1810a50_0
  • /data/data/####/1d31681f96e3c8eb_0
  • /data/data/####/2036fd1fb6dc0945_0
  • /data/data/####/20f67250314f18fa_0
  • /data/data/####/20f67250314f18fa_1
  • /data/data/####/219937642c5998dd_0
  • /data/data/####/228bcad22be86c7f_0
  • /data/data/####/24c6b074afe5f7b0_0
  • /data/data/####/254f024ae0c086cc_0
  • /data/data/####/25bd16d6e9042f00_0
  • /data/data/####/25e10e0598213489_0 (deleted)
  • /data/data/####/25f3463e1c2b5718_0
  • /data/data/####/2631f68692b688e2_0
  • /data/data/####/2809b427efd7ba31_0
  • /data/data/####/288f5275cbd679e6_0 (deleted)
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2b53724512649d17_0
  • /data/data/####/2c5c48bfc8319b77_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d4b2972a9caee53_0
  • /data/data/####/2d85985a37851099_0
  • /data/data/####/2fb4885fff7bd002_0
  • /data/data/####/30ac1bcc247bccd7_0
  • /data/data/####/31095393fa1573c9_0
  • /data/data/####/31ffff8532213837_0
  • /data/data/####/3301c16ea26ef9c2_0
  • /data/data/####/336be744eb410c15_0
  • /data/data/####/33923f6d19d9cc5b_0
  • /data/data/####/33923f6d19d9cc5b_1
  • /data/data/####/36ac7e2d67dec583_0
  • /data/data/####/36b20eddfaa60e69_0
  • /data/data/####/37a52db60518298b_0
  • /data/data/####/38b3b93027851572_0
  • /data/data/####/39e2dba0cfaaa5c1_0
  • /data/data/####/3a40e8f48f756057_0
  • /data/data/####/3a46d72e610e508c_0
  • /data/data/####/3a5b596deb6a8198_0
  • /data/data/####/3b1cacb8ad5de981_0
  • /data/data/####/3b8ab16293efe744_0
  • /data/data/####/3ba682cdea06e67b_0
  • /data/data/####/3c51354a8af0f4a9_0
  • /data/data/####/3dbd712cf966bffb_0
  • /data/data/####/3e46ce04ce54017a_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3ec8386fa7ba5a84_0
  • /data/data/####/400b707d20a9d2d5_0
  • /data/data/####/40cdbf12d63ff390_0
  • /data/data/####/41201213438aae6d_0
  • /data/data/####/413a2fcbed87d4a8_0
  • /data/data/####/42d26cc055b5d19d_0
  • /data/data/####/42ef4cf87d9b77d4_0 (deleted)
  • /data/data/####/450fced46acda05c_0
  • /data/data/####/45afb5b85dc80af1_0
  • /data/data/####/4608a0c39f309d7e_0
  • /data/data/####/46cf45581cf918a1_0
  • /data/data/####/46cf45581cf918a1_1
  • /data/data/####/4793b63b233b4bda_0
  • /data/data/####/47d94c5e9bb4f5c7_0
  • /data/data/####/482c601761ffe816_0
  • /data/data/####/482c601761ffe816_s
  • /data/data/####/488a6f9c95a9fe2e_0
  • /data/data/####/48df86f06f1b934f_0 (deleted)
  • /data/data/####/4936a31db05b73b0_0
  • /data/data/####/49a4d78fc5282b66_0
  • /data/data/####/4a59016d0dcf0ddb_0
  • /data/data/####/4b482d9f778f0483_0
  • /data/data/####/4c82ebf8f44e23d1_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4cba0458cb2f2b7e_0
  • /data/data/####/4e4516c6337cfb07_0
  • /data/data/####/5005224befa4799d_0
  • /data/data/####/50f81ab9141dcb1b_0
  • /data/data/####/518b3ebe7e4e763e_0
  • /data/data/####/518b3ebe7e4e763e_1
  • /data/data/####/519774d583e1ffa7_0
  • /data/data/####/51ffa1dfbf9b2542_0
  • /data/data/####/523f077ba4813a72_0
  • /data/data/####/54530a17be586999_0
  • /data/data/####/552d70f771232473_0
  • /data/data/####/559626588e523cf9_0
  • /data/data/####/568bfc24-9ea6-4fb6-a643-13c4da4a6d0e.dex
  • /data/data/####/568bfc24-9ea6-4fb6-a643-13c4da4a6d0e.dex.flock (deleted)
  • /data/data/####/58bce43e7c3eb393_0
  • /data/data/####/58bce43e7c3eb393_s
  • /data/data/####/597508498e2f471e_0
  • /data/data/####/59766ced2feaa64d_0
  • /data/data/####/5bc92420c15a670f_0 (deleted)
  • /data/data/####/5c26fb24efec749f_0
  • /data/data/####/5c599f4a04756482_0
  • /data/data/####/5cb58b109b1acb2e_0
  • /data/data/####/5cb58b109b1acb2e_1
  • /data/data/####/5cc35809721a88d0_0 (deleted)
  • /data/data/####/5cdc2048bff63a2e_0
  • /data/data/####/5e3d39639bc18ac9_0
  • /data/data/####/5e3d39639bc18ac9_1
  • /data/data/####/5e8285f970616ba5_0
  • /data/data/####/5f0f9c4c9d7c7a29_0
  • /data/data/####/60560c5a4803c975_0
  • /data/data/####/60639ce8b8e958a7_0
  • /data/data/####/61a7438964da0606_0
  • /data/data/####/621e12a1f08aec4a_0 (deleted)
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/63fd5992fa70f35c_0
  • /data/data/####/6567771739b5a659_0
  • /data/data/####/6669323b2a2faac8_0
  • /data/data/####/68cf38761d191f63_0
  • /data/data/####/68d7e2986731e026_0
  • /data/data/####/698d8bb0b3119a94_0
  • /data/data/####/698d8bb0b3119a94_s
  • /data/data/####/6abc317ab565b304_0
  • /data/data/####/6c33f72fe5193130_0
  • /data/data/####/6c64d73829afd6c7_0
  • /data/data/####/6dc5befb07c8e6fc_0 (deleted)
  • /data/data/####/6e3a73f4a27d9901_0
  • /data/data/####/70c54b4f81829f08_0 (deleted)
  • /data/data/####/70dfbfefaa472394_0
  • /data/data/####/710893fbd361cbc2_0 (deleted)
  • /data/data/####/718da43d1c70041f_0
  • /data/data/####/72ab9c9028709146_0
  • /data/data/####/734151022703a189_0
  • /data/data/####/7352baac69156108_0 (deleted)
  • /data/data/####/749c1791231089f8_0
  • /data/data/####/7521762219bdc743_0
  • /data/data/####/752de4ad09921a23_0
  • /data/data/####/75fff9f4906ad7b7_0
  • /data/data/####/76e32c7bbf120562_0
  • /data/data/####/773af43359de9a69_0
  • /data/data/####/77655a0f3632988e_0
  • /data/data/####/77cecf304b7bd76a_0
  • /data/data/####/782beebbe8ae1043_0
  • /data/data/####/782beebbe8ae1043_1
  • /data/data/####/79f2b2f0b1c736f7_0
  • /data/data/####/7b3c688d70cbe030_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c69e09cfced33c4_0
  • /data/data/####/7c69e09cfced33c4_1
  • /data/data/####/7c6c839b7d69bb5b_0 (deleted)
  • /data/data/####/7d05f54f0fa700cb_0
  • /data/data/####/7e75b8e8e17e5881_0
  • /data/data/####/7e75b8e8e17e5881_s
  • /data/data/####/7fe4f8749b31f1a7_0
  • /data/data/####/83449a20cb6e922f_0
  • /data/data/####/848c137783d9c148_0
  • /data/data/####/848c137783d9c148_1
  • /data/data/####/849c0cd7f280fe9a_0
  • /data/data/####/84bdd4bf494fe029_0 (deleted)
  • /data/data/####/85d685f0adcc59de_0
  • /data/data/####/8651e178a0c8ccee_0
  • /data/data/####/871eef64e5c50d61_0
  • /data/data/####/8742140f87ce17b1_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/88c4fa0a0ac6dd42_0
  • /data/data/####/88fa610ad74a0f38_0
  • /data/data/####/8b7b060da2a656f3_0
  • /data/data/####/8ba42ff833cdb63c_0
  • /data/data/####/8bc2c30514adf66a_0
  • /data/data/####/8d370449385ed857_0
  • /data/data/####/8e745a5deaafb374_0
  • /data/data/####/8f16f1489f31d097_0
  • /data/data/####/8f6ee31b-b970-4deb-905d-9a7850577a46.dex
  • /data/data/####/8f6ee31b-b970-4deb-905d-9a7850577a46.dex.flock (deleted)
  • /data/data/####/8fcebe8b268233c8_0
  • /data/data/####/8fd21389d8c47c2f_0
  • /data/data/####/8fd21389d8c47c2f_1
  • /data/data/####/8ff8b74fc2748c78_0
  • /data/data/####/9107f651d3e10db0_0
  • /data/data/####/913e556374075ac5_0
  • /data/data/####/919b5c93797ac643_0
  • /data/data/####/927c81f49c686279_0
  • /data/data/####/93547496a7627d2e_0 (deleted)
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/95342c48b6e8d450_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/96ba6042ff8ff827_0
  • /data/data/####/987499be7dbc2381_0
  • /data/data/####/987499be7dbc2381_1
  • /data/data/####/987804fea6a07e79_0
  • /data/data/####/9b5356b68d3f8e55_0
  • /data/data/####/9b5573620062ab21_0 (deleted)
  • /data/data/####/9b69bd391f787141_0
  • /data/data/####/9be65208026e0b90_0
  • /data/data/####/9ce127f8972c0065_0
  • /data/data/####/9e635611ec969e75_0
  • /data/data/####/9e9305a8799ddca4_0
  • /data/data/####/9ea4b735086718a2_0
  • /data/data/####/9f7c383c6817ebb1_0
  • /data/data/####/9fad95edf2189641_0
  • /data/data/####/9fba23b3d287a38d_0
  • /data/data/####/9fba23b3d287a38d_1
  • /data/data/####/BgfsG.dex
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a016515926470611_0
  • /data/data/####/a0acb3b66654d6e1_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a1de6a4ab6f56e95_0
  • /data/data/####/a2576d99e002deb0_0
  • /data/data/####/a269f749bed9ae8c_0
  • /data/data/####/a3b98cda956f1fc9_0
  • /data/data/####/a45809df79fe6c8d_0
  • /data/data/####/a47afbdc730a4774_0
  • /data/data/####/a497130f7bf612fe_0
  • /data/data/####/a5aad13febc6a967_0
  • /data/data/####/a7553bd288b21cd5_0
  • /data/data/####/a762a77a6c4da4f1_0
  • /data/data/####/a7bdca273b6398f6_0
  • /data/data/####/a83508274291d54b_0 (deleted)
  • /data/data/####/a836e171e33b21ff_0 (deleted)
  • /data/data/####/a887e14cda142498_0
  • /data/data/####/a9349d6b1660255b_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aaf160fde210a92d_0
  • /data/data/####/abbfc53d3d11dc66_0
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/aec31e9fa2700912_0
  • /data/data/####/af3fd0e76bb5b3e3_0
  • /data/data/####/b2575f6ecf380ef9_0
  • /data/data/####/b2b45069752caa03_0
  • /data/data/####/b3fea546deedc979_0
  • /data/data/####/b44ae7d9bdf1146a_0
  • /data/data/####/b704a8d16f5b4ebf_0
  • /data/data/####/b87845ae01cd112f_0
  • /data/data/####/b8d890109701b29f_0
  • /data/data/####/bb3c7cfcfa860f3e_0
  • /data/data/####/bb9b5423852ee814_0
  • /data/data/####/bd07a9e92b60ee7c_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bd9c4b0243b50636_0
  • /data/data/####/bec5eafc9af51afe_0
  • /data/data/####/bf11bdada05cd2b5_0
  • /data/data/####/c139830fa08cc96e_0
  • /data/data/####/c139830fa08cc96e_1
  • /data/data/####/c2c818104e63a95a_0
  • /data/data/####/c342661d1c80ce2e_0
  • /data/data/####/c3791bddd218583b_0 (deleted)
  • /data/data/####/c436505a0b2cd181_0
  • /data/data/####/c4420e5520ee7d4b_0
  • /data/data/####/c451cf81c01502b7_0
  • /data/data/####/c4d7296ddb95928d_0
  • /data/data/####/c55ce3c37b8521da_0
  • /data/data/####/c6e05d7959c76b5a_0
  • /data/data/####/c6e848954fa4816b_0
  • /data/data/####/c7f699bea1b1077c_0
  • /data/data/####/c7f699bea1b1077c_1
  • /data/data/####/cb2631bf77d8de0d_0
  • /data/data/####/cb28dae8f3024377_0
  • /data/data/####/ccb1918df5c1ed67_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/cd4603ae0f6ab07f_0
  • /data/data/####/ce5680518ad1d392_0
  • /data/data/####/cfb111f0a2f0b6aa_0
  • /data/data/####/com.ywc_preferences.xml
  • /data/data/####/d2d43810fad0c558_0
  • /data/data/####/d409b55c8d86283e_0
  • /data/data/####/d40f8ddf9776c842_0
  • /data/data/####/d443ca96d6aff725_0
  • /data/data/####/d497a73fc0025441_0
  • /data/data/####/d53a3157fdc7b7fe_0
  • /data/data/####/d53d5e06a39b05a2_0
  • /data/data/####/d5fcc5725956d847_0
  • /data/data/####/d67f30d503ac8486_0
  • /data/data/####/d6ca0c3238c05159_0
  • /data/data/####/d6ea771d2f00bc27_0
  • /data/data/####/d739fa0802cef74f_0
  • /data/data/####/d771df9f95bdf1fe_0
  • /data/data/####/d7b5f67ebda3dd4e_0
  • /data/data/####/d8f3760b6adaf2b7_0
  • /data/data/####/daabba3b9f4c9b7a_0
  • /data/data/####/db87cf4e1c611555_0
  • /data/data/####/db87cf4e1c611555_1
  • /data/data/####/dc8a6b0dfcc905f9_0
  • /data/data/####/de2e06416403853d_0
  • /data/data/####/de2e06416403853d_1
  • /data/data/####/dff09bbadcfe182f_0
  • /data/data/####/e1bce4a966ac917b_0
  • /data/data/####/e3b1ca0706c92342_0
  • /data/data/####/e6033567eeedb896_0
  • /data/data/####/e6e769fd55d2c2e2_0
  • /data/data/####/e6f8ebf40d0eba62_0
  • /data/data/####/e991fbfedba2aab9_0
  • /data/data/####/e994787c3bde8784_0
  • /data/data/####/ea420e2d7e655b78_0
  • /data/data/####/eb00cf0019add5e8_0
  • /data/data/####/ecacdb6b8749d885_0
  • /data/data/####/ed1e59d6e3822b29_0
  • /data/data/####/eea453bb9d2ed839_0
  • /data/data/####/ef92b74305b6595d_0
  • /data/data/####/ef92b74305b6595d_s
  • /data/data/####/effd37cf07a9b470_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f1a1da9db0c648eb_0
  • /data/data/####/f1cf4233768decb5_0
  • /data/data/####/f208e7a64ae48b49_0 (deleted)
  • /data/data/####/f21c20098b72e87e_0
  • /data/data/####/f240ad85a9dbeaaa_0
  • /data/data/####/f4a7f662183dd5e5_0
  • /data/data/####/f54b31e3f36ed283_0
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/f75b3f6afb775623_0
  • /data/data/####/f8df472d-1995-4dec-b26b-00d879bf5f16.dex
  • /data/data/####/f8df472d-1995-4dec-b26b-00d879bf5f16.dex.flock (deleted)
  • /data/data/####/fd4cec20a966bd5f_0
  • /data/data/####/fe91003f72b74da5_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff2efaac62bf01c5_0
  • /data/data/####/gbDvuhPY.dex
  • /data/data/####/gbDvuhPY.dex.flock (deleted)
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/sGMrl.dex
  • /data/data/####/sGMrl.dex.flock (deleted)
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android