マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Android.Locker.17241

Added to the Dr.Web virus database: 2023-07-28

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) i.cam####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) galle####.vcmd####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) www.google####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) pt-sta####.js####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) ei.ph####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) c####.liveja####.com:443
  • TCP(TLS/1.0) connect####.gst####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) i.dy####.com:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • and####.google####.com
  • c####.liveja####.com
  • cdn1-sm####.ph####.com
  • connect####.gst####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • galle####.vcmd####.com
  • gmscomp####.google####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.cam####.com
  • i.dy####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • pt-sta####.js####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google####.com
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/0036ebeaa3f9f264_0 (deleted)
  • /data/data/####/00c7a0d1028d694d_0
  • /data/data/####/041cb99e11651247_0
  • /data/data/####/04c977e1a6cbbd03_0
  • /data/data/####/050604f743a91806_0
  • /data/data/####/050604f743a91806_1
  • /data/data/####/06c09a23c9e45876_0
  • /data/data/####/070423cfc5b3e95a_0
  • /data/data/####/071218f356f34560_0
  • /data/data/####/0830a4c2514fda16_0 (deleted)
  • /data/data/####/087cde5c5d1d418f_0
  • /data/data/####/08917a0b88d0f142_0
  • /data/data/####/09732bd101765fb6_0
  • /data/data/####/09732bd101765fb6_1
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a5aba9515a13005_0
  • /data/data/####/0b6c3bd569c0aff2_0
  • /data/data/####/0c2997c512bad1e1_0
  • /data/data/####/0c81f89881d509aa_0
  • /data/data/####/0df7244c2d759fd6_0
  • /data/data/####/0e163c94b80a473d_0
  • /data/data/####/0ecb30fb8a971d3e_0 (deleted)
  • /data/data/####/10beb9ae50362417_0
  • /data/data/####/10f7d8e4384d35b5_0
  • /data/data/####/10f86f3951a121f1_0
  • /data/data/####/112599fc61126c69_0
  • /data/data/####/11d2583430aab26f_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/1251c9deb44f08a1_0
  • /data/data/####/1251c9deb44f08a1_s
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/13c6497106fc539d_0
  • /data/data/####/13d1b1587015c6b6_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/14acb7fbbc98f153_0
  • /data/data/####/14acb7fbbc98f153_1
  • /data/data/####/14bc925370a4f918_0
  • /data/data/####/164c81662f546972_0
  • /data/data/####/1756e6fdc0b163e8_0
  • /data/data/####/178d497239eb81b1_0
  • /data/data/####/18ac60a2f70217ff_0
  • /data/data/####/19be86308106a40c_0
  • /data/data/####/1ac5b96ee8e5db35_0
  • /data/data/####/1af66e86f6c32353_0
  • /data/data/####/1afb0e86269bf3d4_0
  • /data/data/####/1c9d0791f1810a50_0
  • /data/data/####/1ca68c1afb37099c_0
  • /data/data/####/1cae5da6352415b8_0
  • /data/data/####/1d31681f96e3c8eb_0
  • /data/data/####/1d3cffe9179db8e6_0
  • /data/data/####/1d66eae5e5b59d45_0
  • /data/data/####/20c5967b3da888c7_0
  • /data/data/####/24b4cecebd3a490e_0
  • /data/data/####/24ba96fed104013c_0 (deleted)
  • /data/data/####/25817850f469ef85_0
  • /data/data/####/25817850f469ef85_1
  • /data/data/####/25f3463e1c2b5718_0
  • /data/data/####/264d629e78428259_0 (deleted)
  • /data/data/####/27738c109de1965e_0 (deleted)
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2ad3f1606b0b34b7_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2ccb458a974270f6_0
  • /data/data/####/2f80edf2c154d110_0
  • /data/data/####/2fb4885fff7bd002_0
  • /data/data/####/3229f993cd2254be_0
  • /data/data/####/3241a2abdc0d9e44_0
  • /data/data/####/32fd475e7de3c0e1_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/344262079301aca9_0
  • /data/data/####/34459b2740d4caf4_0
  • /data/data/####/34459b2740d4caf4_1
  • /data/data/####/3599d7fe27511169_0
  • /data/data/####/362a9c87952c3f8c_0
  • /data/data/####/362a9c87952c3f8c_1
  • /data/data/####/36ac7e2d67dec583_0
  • /data/data/####/3741e92b7d19e420_0
  • /data/data/####/37c4c8df92d952a6_0
  • /data/data/####/38470f7a81b5f20d_0
  • /data/data/####/38b3b93027851572_0
  • /data/data/####/3bd614b9b1f21684_0
  • /data/data/####/3d7d3c634506d55d_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/40cdbf12d63ff390_0
  • /data/data/####/417424906a776e25_0
  • /data/data/####/43380b82b5ffddc1_0
  • /data/data/####/43440f6b5e4418c8_0
  • /data/data/####/436378f79a0109b1_0
  • /data/data/####/45e44712f5abd67c_0
  • /data/data/####/47f29cca7ceb83ed_0
  • /data/data/####/47f29cca7ceb83ed_1
  • /data/data/####/486295e4677799b6_0
  • /data/data/####/48cd995cebf44754_0
  • /data/data/####/48cd995cebf44754_1
  • /data/data/####/48fd4e12ac447cb1_0 (deleted)
  • /data/data/####/4955c5df5edd6212_0
  • /data/data/####/49be54174b6a7d9c_0
  • /data/data/####/4a7d5b2e8e252c57_0
  • /data/data/####/4b4755f58803c3e8_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4e29dff9e646028d_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4f1eb48fd7f35506_0
  • /data/data/####/5005224befa4799d_0
  • /data/data/####/50b5584252890638_0
  • /data/data/####/5505ba76bfec8424_0
  • /data/data/####/552d70f771232473_0
  • /data/data/####/55ef85bbb1fe94a9_0
  • /data/data/####/561bab11678cffa7_0
  • /data/data/####/563ae8fccfa4862e_0
  • /data/data/####/56c1951bb090ca64_0
  • /data/data/####/56cbfccaf25bb48a_0
  • /data/data/####/59f8385b031ae421_0
  • /data/data/####/5c599f4a04756482_0
  • /data/data/####/5c67f1d8b93d175a_0
  • /data/data/####/5dfe071ae0b3d328_0 (deleted)
  • /data/data/####/60560c5a4803c975_0
  • /data/data/####/61a1b58fbe187bbf_0
  • /data/data/####/61e92a81e5990326_0
  • /data/data/####/628fd421166019ae_0
  • /data/data/####/628fd421166019ae_s
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/6302ab4dda60ec26_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/6453d2b6ddaf56ed_0
  • /data/data/####/64bd479c901d40a0_0
  • /data/data/####/6564723d1c5d6942_0
  • /data/data/####/6631fcd46ab76c8c_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/67577b5dfb769af5_0 (deleted)
  • /data/data/####/67789c2958a0e380_0
  • /data/data/####/67789c2958a0e380_1
  • /data/data/####/67e8dee0562a4b54_0
  • /data/data/####/689bcdf185ac0b23_0
  • /data/data/####/68d7e2986731e026_0
  • /data/data/####/69526a0bd219ab10_0 (deleted)
  • /data/data/####/698d8bb0b3119a94_0
  • /data/data/####/698d8bb0b3119a94_s
  • /data/data/####/6a2ba17f2db89c59_0
  • /data/data/####/6be335153b4f5cb8_0
  • /data/data/####/6c21d59dfb04dbfa_0
  • /data/data/####/6c6e9bf9fdce0741_0
  • /data/data/####/6c8ccd8b0e65707c_0
  • /data/data/####/6f1d6d73aa4178e3_0
  • /data/data/####/6f3d9ee119585ec9_0
  • /data/data/####/706a42c09f987b10_0
  • /data/data/####/710f4cd27a2a3cff_0
  • /data/data/####/71d6e1821e2a5b72_0
  • /data/data/####/734151022703a189_0
  • /data/data/####/7415868d9d21d08f_0 (deleted)
  • /data/data/####/744e3e0ee6abd316_0
  • /data/data/####/768f7fde687e8db9_0 (deleted)
  • /data/data/####/789c297f73be70ed_0
  • /data/data/####/789c297f73be70ed_1
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c3df9f65ed5afc2_0
  • /data/data/####/7cf7f895ef00b94b_0
  • /data/data/####/7d20f1828d7b1cbe_0
  • /data/data/####/7dc13dd3bebbdfbc_0
  • /data/data/####/7e75b8e8e17e5881_0
  • /data/data/####/7e75b8e8e17e5881_s
  • /data/data/####/7f1950baceab160d_0
  • /data/data/####/81297a439c774582_0
  • /data/data/####/8168d137de7c9b8b_0
  • /data/data/####/820483acd33ae95f_0
  • /data/data/####/826446ab9e739a73_0
  • /data/data/####/8270bd3a1e4c095d_0
  • /data/data/####/8386d11d46a60f6f_0
  • /data/data/####/8460f8fb3f6f0f68_0
  • /data/data/####/862dc0b5015a4633_0
  • /data/data/####/869ae8a2a55067e0_0
  • /data/data/####/869ae8a2a55067e0_s
  • /data/data/####/86f62170862ec654_0
  • /data/data/####/8753fa2389d0efa0_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/8945c1c43ff02128_0
  • /data/data/####/89963bd91632dae4_0
  • /data/data/####/8c254af9d88d9949_0
  • /data/data/####/8c3cee66e572cd97_0
  • /data/data/####/8c4b981c4ca0f3d9_0
  • /data/data/####/8c9586589a6865cd_0
  • /data/data/####/91415dcca986ec83_0 (deleted)
  • /data/data/####/92a0e20fff614adb_0
  • /data/data/####/9302633ce3622679_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/9423a93bb8ba0714_0
  • /data/data/####/952c770ea4d62dff_0
  • /data/data/####/952c770ea4d62dff_1
  • /data/data/####/953d94f32fd2c53d_0 (deleted)
  • /data/data/####/9580bd5658df0ad8_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/963472d6ab51775e_0
  • /data/data/####/9ae1ed240112f4c8_0
  • /data/data/####/9e635611ec969e75_0
  • /data/data/####/9ea4b735086718a2_0
  • /data/data/####/AgIDy.dex
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/ZAjtIC.dex
  • /data/data/####/ZAjtIC.dex.flock (deleted)
  • /data/data/####/a04d5d7ae8de84d2_0 (deleted)
  • /data/data/####/a0bf9c8025b66e02_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a3dccdf763d5feb4_0
  • /data/data/####/a408a65d578da851_0
  • /data/data/####/a4a86499d9012f9b_0
  • /data/data/####/a4f7c90e3bbfd3c6_0
  • /data/data/####/a581aa67840cc633_0
  • /data/data/####/a678b742007dfe1e_0
  • /data/data/####/a678b742007dfe1e_1
  • /data/data/####/a7f0e64b417bb0db_0
  • /data/data/####/a92461069be73c88_0
  • /data/data/####/a964c902f1f31db2_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aad4be480424f9bb_0
  • /data/data/####/aba7b6fe97ee88d3_0
  • /data/data/####/ad0ab0a3846e9ea6_0
  • /data/data/####/ada50a2f6b89a4a7_0
  • /data/data/####/ae2a9887724b9c08_0
  • /data/data/####/aea00573b58051a4_0
  • /data/data/####/aea00573b58051a4_1
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/aff9f5ff4c2969e2_0
  • /data/data/####/b1f93927bd84b0bb_0
  • /data/data/####/b258436e303131ac_0
  • /data/data/####/b2b45069752caa03_0
  • /data/data/####/b6fce855da1eadc3_0 (deleted)
  • /data/data/####/b6fe02e6d0bbe713_0
  • /data/data/####/b6fe02e6d0bbe713_1
  • /data/data/####/b7f0b8af329d36f5_0
  • /data/data/####/bb8c17658c7cd906_0 (deleted)
  • /data/data/####/bceec9c7fa9ed778_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bf21c0c23afeb2b1_0
  • /data/data/####/bfb4cff3537cb932_0
  • /data/data/####/bfb4cff3537cb932_1
  • /data/data/####/bff4d42301399db9_0
  • /data/data/####/bff6dcdc72ad5d41_0
  • /data/data/####/c14ca00c05ad58f4_0
  • /data/data/####/c266ea00fa3764b9_0
  • /data/data/####/c2903ac74d8f040d_0
  • /data/data/####/c2f21f3d41747605_0
  • /data/data/####/c3487d1b5c0281ae_0
  • /data/data/####/c4420e5520ee7d4b_0
  • /data/data/####/c451cf81c01502b7_0
  • /data/data/####/c4d7296ddb95928d_0
  • /data/data/####/c585d0a2903e6e22_0 (deleted)
  • /data/data/####/c5d18910a2e0c017_0 (deleted)
  • /data/data/####/c6e848954fa4816b_0
  • /data/data/####/c723f4f1ac6925d5_0
  • /data/data/####/c7698d66661fb44b_0
  • /data/data/####/c76a5c1b3cc7aa9c_0
  • /data/data/####/c946995cbd566094_0
  • /data/data/####/cb4cf0fa582cb59a_0
  • /data/data/####/cc40f1ccd60547a4_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/ccdc5c52035e7b54_0
  • /data/data/####/cd4ada075d0e9822_0
  • /data/data/####/cefe8b30135e530d_0
  • /data/data/####/cf8d2febce4497cd_0
  • /data/data/####/cfc182382710ae70_0
  • /data/data/####/com.xlr_preferences.xml
  • /data/data/####/d04986ebf6869bb3_0
  • /data/data/####/d08fef34c1d42e53_0
  • /data/data/####/d11ab2a640112800_0
  • /data/data/####/d18448241a9699fc_0
  • /data/data/####/d30bf4ab4b1cf8ff_0
  • /data/data/####/d33d5fd8de91fa7f_0
  • /data/data/####/d33d5fd8de91fa7f_s
  • /data/data/####/d3f9c68e0b18830c_0
  • /data/data/####/d3f9c68e0b18830c_1
  • /data/data/####/d402d30542144a16_0
  • /data/data/####/d419db3afe189859_0
  • /data/data/####/d53b3e6c767746c5_0
  • /data/data/####/d65588eedfb1d0b0_0
  • /data/data/####/d81ab99c87abe37e_0
  • /data/data/####/d81ab99c87abe37e_1
  • /data/data/####/d8e5b5e630a80c53_0
  • /data/data/####/d8f79924ef12a451_0
  • /data/data/####/d971ec9d01a209b9_0
  • /data/data/####/d97687764f00595a_0
  • /data/data/####/d9f60e015c7b3e30_0
  • /data/data/####/d9f80e8c819191a4_0
  • /data/data/####/d9f80e8c819191a4_1
  • /data/data/####/dc62971a25afc6f5_0
  • /data/data/####/dcb4131abede4280_0
  • /data/data/####/dcb4131abede4280_1
  • /data/data/####/dcf9723c0a0c1215_0
  • /data/data/####/e04ecf0bca57320a_0
  • /data/data/####/e0d83eb4e6cd321a_0
  • /data/data/####/e294c3d7499992f4_0
  • /data/data/####/e34931fd2638c251_0
  • /data/data/####/e3ad45eced088db9_0
  • /data/data/####/e466578ab3dbaf93_0
  • /data/data/####/e497bd9aae6ac084_0
  • /data/data/####/e6033567eeedb896_0
  • /data/data/####/e6dea900bbb9756a_0
  • /data/data/####/e8550a4789b36a63_0
  • /data/data/####/e8f6e07663bc3549_0
  • /data/data/####/e8fbf59748f3a525_0 (deleted)
  • /data/data/####/e968e70577b08170_0
  • /data/data/####/e968e70577b08170_1
  • /data/data/####/e991fbfedba2aab9_0
  • /data/data/####/ea1dd2ecb218614b_0
  • /data/data/####/ea420e2d7e655b78_0
  • /data/data/####/eb41035d9d71b83f_0
  • /data/data/####/ec3008cc1cd1334e_0
  • /data/data/####/ecacdb6b8749d885_0
  • /data/data/####/ed1e59d6e3822b29_0
  • /data/data/####/edf292f624515dc6_0
  • /data/data/####/eff835d284593fbb_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f02c7ff8ef6b9314_0
  • /data/data/####/f09c029d53f8a3ee_0
  • /data/data/####/f1056fdf405aaf1d_0
  • /data/data/####/f1a1da9db0c648eb_0
  • /data/data/####/f240ad85a9dbeaaa_0
  • /data/data/####/f339e0b081948019_0
  • /data/data/####/f4a7f662183dd5e5_0
  • /data/data/####/f508d6449c414d07_0
  • /data/data/####/f677f433f90f8759_0
  • /data/data/####/f75b3f6afb775623_0
  • /data/data/####/f79cf8f032ece7bd_0
  • /data/data/####/f79cf8f032ece7bd_1
  • /data/data/####/f7d92c30518bcced_0
  • /data/data/####/f89e1d27a535c981_0
  • /data/data/####/f8dc574918582933_0
  • /data/data/####/fb4e526d2f30e7e2_0
  • /data/data/####/fb50a4e30a24db02_0
  • /data/data/####/fbb9ec685bb58fa1_0
  • /data/data/####/fbb9ec685bb58fa1_1
  • /data/data/####/fd25b41018938db5_0
  • /data/data/####/fd25b41018938db5_1
  • /data/data/####/fd2ed5dc79a11bd7_0
  • /data/data/####/fdefc575db20e972_0
  • /data/data/####/fdefc575db20e972_1
  • /data/data/####/fea3cd024645363a_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff2efaac62bf01c5_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/qFpiSAPf.dex
  • /data/data/####/qFpiSAPf.dex.flock (deleted)
  • /data/data/####/the-real-index
  • /data/data/####/vVHdlBc.dex
  • /data/data/####/vVHdlBc.dex.flock (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android