マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Android.Locker.17271

Added to the Dr.Web virus database: 2023-08-03

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.0) ei.ph####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) i.cam####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.2) connect####.gst####.com:443
  • TCP(TLS/1.2) and####.google####.com:443
  • UDP and####.google####.com:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • and####.google####.com
  • cdn1-sm####.ph####.com
  • connect####.gst####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • h####.por####.com
  • hw-####.a####.com
  • i.cam####.com
  • i.dy####.com
  • m####.traffic####.net
  • md####.google####.com
  • p####.google####.com
  • pla####.google####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/0105ef25c53e7c13_0
  • /data/data/####/01d8e178a80ce658_0
  • /data/data/####/054dfdc9b6402370_0
  • /data/data/####/06e0c57c53f0b634_0
  • /data/data/####/0817e3ee7f425717_0
  • /data/data/####/0858c3bc06ab9eb7_0
  • /data/data/####/087cde5c5d1d418f_0
  • /data/data/####/08ce1c349c5e135a_0
  • /data/data/####/09089db2c9ca0410_0
  • /data/data/####/0a17789e61d34fb5_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0b53a4b0bcecccae_0 (deleted)
  • /data/data/####/0cc6f538aa1943fe_0
  • /data/data/####/0da8d053b8d7b754_0
  • /data/data/####/0dfb700435dcb891_0
  • /data/data/####/0e6021950d99d6c2_0
  • /data/data/####/0f81e82dcbca7aad_0
  • /data/data/####/0fdacaf0b23f640a_0
  • /data/data/####/1062454ec4b41643_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/11f46253574d04a0_0
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/1308872eb35d17c5_0
  • /data/data/####/130eb9bc01570748_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/1419cc6473c87fb8_0
  • /data/data/####/15bdf06e83e99b40_0
  • /data/data/####/163f94e9330fc8ec_0
  • /data/data/####/1650a17953216008_0
  • /data/data/####/1702bcdbd2e41ead_0
  • /data/data/####/17bbde1ecaa5f2a3_0
  • /data/data/####/18cff4bcd8f975d6_0
  • /data/data/####/19b41c20310f10a7_0
  • /data/data/####/1b53640ef634c818_0
  • /data/data/####/1b53640ef634c818_1
  • /data/data/####/1bf6967b45686528_0
  • /data/data/####/1d66eae5e5b59d45_0
  • /data/data/####/1de85f2a422b9e1b_0
  • /data/data/####/1ef988a467c5808b_0
  • /data/data/####/1f6bfe5dd116fb7c_0
  • /data/data/####/1f7c1486-d405-4c92-8a5c-2b51ea117c73.dex
  • /data/data/####/1f7c1486-d405-4c92-8a5c-2b51ea117c73.dex.flock (deleted)
  • /data/data/####/2179a515c7bff436_0
  • /data/data/####/223cd70cd7c7d975_0
  • /data/data/####/233036d8e0b60a87_0
  • /data/data/####/23f0b595ef2a0c18_0
  • /data/data/####/23f0b595ef2a0c18_1
  • /data/data/####/24212bf1b216ec2f_0
  • /data/data/####/2453c3da4aec78fd_0
  • /data/data/####/2702c2907e17ac49_0 (deleted)
  • /data/data/####/273f949923941ebe_0
  • /data/data/####/28e4ff871b565c12_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/29e88bb3eec77167_0
  • /data/data/####/2a92497997be0975_0 (deleted)
  • /data/data/####/2be54bdf8c75a050_0
  • /data/data/####/2d4b2972a9caee53_0
  • /data/data/####/2d8a3a0a7dc028a6_0
  • /data/data/####/2e67b28fe3b93a43_0
  • /data/data/####/2f0329575d55feff_0
  • /data/data/####/32bd1538c186f7ac_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/338289c045459595_0
  • /data/data/####/33f5348ad0d74fab_0
  • /data/data/####/33f5348ad0d74fab_1
  • /data/data/####/348f4a742e0cc440_0
  • /data/data/####/35347b594484fecc_0
  • /data/data/####/3538ccf6994d7664_0
  • /data/data/####/35d75d94503cd2c6_0 (deleted)
  • /data/data/####/3735f0ffcd9a80e1_0
  • /data/data/####/38c33b2e286dff30_0
  • /data/data/####/39938bfaae32da61_0
  • /data/data/####/39f686249d7a5209_0
  • /data/data/####/3a834681d06de049_0
  • /data/data/####/3b8eb77f3b6b7d10_0
  • /data/data/####/3e26358a9f50ef60_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3f45ac12286f84a7_0
  • /data/data/####/3f45ac12286f84a7_s
  • /data/data/####/3fc9a202aaa42cde_0
  • /data/data/####/408d3a802a4a9708_0
  • /data/data/####/40a17df2669a90df_0
  • /data/data/####/4298228d65203cc5_0
  • /data/data/####/42e5eae11ed80266_0
  • /data/data/####/42eccc293bb9a4c1_0
  • /data/data/####/439ed652eb420bc7_0
  • /data/data/####/43afd699-891a-457d-b4fa-b7365d529232.dex
  • /data/data/####/43afd699-891a-457d-b4fa-b7365d529232.dex.flock (deleted)
  • /data/data/####/44ebfd0291cedcf7_0
  • /data/data/####/44f8c1358caeeeef_0 (deleted)
  • /data/data/####/47013c9db4c8e037_0
  • /data/data/####/472e58c456998a58_0
  • /data/data/####/4793b63b233b4bda_0
  • /data/data/####/47d94c5e9bb4f5c7_0
  • /data/data/####/4854cfab8bfae6d7_0
  • /data/data/####/4a942275e5ca6285_0
  • /data/data/####/4e82927b37f07a86_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4f260e9f5ebc64df_0
  • /data/data/####/50566be5d26640d4_0 (deleted)
  • /data/data/####/50956aec5f29cc13_0
  • /data/data/####/50956aec5f29cc13_1
  • /data/data/####/51fccc1a0f9c2dff_0
  • /data/data/####/54c9879fb1aefce2_0
  • /data/data/####/5571a526ba1a4974_0
  • /data/data/####/5706e48a80245dce_0
  • /data/data/####/57acd8fe4bcc4d89_0
  • /data/data/####/57dd0aa4d60e9c54_0
  • /data/data/####/57f8fdde5797ad8e_0
  • /data/data/####/592325aadad9441b_0
  • /data/data/####/596b02d6558f6231_0
  • /data/data/####/598a4a1ab5ab975f_0
  • /data/data/####/5a5f6ad364193de2_0
  • /data/data/####/5a6b81e481257600_0
  • /data/data/####/5ac4bc54d70c1c47_0
  • /data/data/####/5c0a3494b2d9e228_0
  • /data/data/####/5c0a3494b2d9e228_1
  • /data/data/####/5c67f1d8b93d175a_0
  • /data/data/####/5de7107c31747809_0
  • /data/data/####/5e607f7ca31bf008_0
  • /data/data/####/5ed31226de23b718_0
  • /data/data/####/607fa6e3f53992d1_0
  • /data/data/####/61505b570b5a0c00_0
  • /data/data/####/61a1b58fbe187bbf_0
  • /data/data/####/61dddfa248e863e7_0
  • /data/data/####/6276bdbb16cb15ed_0
  • /data/data/####/62c226458ed71f6d_0
  • /data/data/####/647f54b0bbbfbd0c_0
  • /data/data/####/6525569bba0cb3ba_0
  • /data/data/####/6591c4938d5cba67_0
  • /data/data/####/66401b0c20b0e3a0_0
  • /data/data/####/66ea86198e4706da_0
  • /data/data/####/675c7e9d757240d9_0
  • /data/data/####/67b0a8f7427c44fd_0
  • /data/data/####/67e215caa4a283b9_0
  • /data/data/####/67e5a398350fdb22_0
  • /data/data/####/688c4925dcfbb7a6_0
  • /data/data/####/6a75ce0b2c176985_0
  • /data/data/####/6b6e19bcba6efde8_0
  • /data/data/####/6bcffe2a36969236_0
  • /data/data/####/6c66b5d4bab07c86_0
  • /data/data/####/6fd36cb8d3a4ab18_0
  • /data/data/####/6fe972ae1904757f_0
  • /data/data/####/70a3e59cefc84555_0
  • /data/data/####/71d60aab444b1a3e_0
  • /data/data/####/71dcd1e66f1e34a3_0
  • /data/data/####/723e7e52d885ff4a_0
  • /data/data/####/74f09ef62b2f3c93_0
  • /data/data/####/7510b8cc6d764359_0
  • /data/data/####/7843705b8739a887_0
  • /data/data/####/785d59adc38a6a03_0
  • /data/data/####/7b1a33091ea16143_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7cf7f895ef00b94b_0
  • /data/data/####/7d20f1828d7b1cbe_0
  • /data/data/####/7dac50556c442b7d_0
  • /data/data/####/7daf53d96b278a9a_0
  • /data/data/####/7daf53d96b278a9a_s
  • /data/data/####/7ec989bc84577fec_0
  • /data/data/####/7edcdad616af1199_0
  • /data/data/####/7edcdad616af1199_1
  • /data/data/####/7ee1fcc6ef46a1d0_0
  • /data/data/####/7f321e70b534c9c1_0
  • /data/data/####/80425a97c1bc3da3_0
  • /data/data/####/80c5c538010e2146_0
  • /data/data/####/810008438dc66b19_0
  • /data/data/####/826cde98a2fc5977_0
  • /data/data/####/82b0b3a51a53c8d0_0
  • /data/data/####/83ad24c80e35f9a2_0
  • /data/data/####/84b235b03a14db5e_0
  • /data/data/####/8546cca46c5bb2e7_0
  • /data/data/####/864ba7b3147d1391_0
  • /data/data/####/884d2c7ab47d10fc_0
  • /data/data/####/8881f52805ff5c2b_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/89a4e3cd2beb7d42_0
  • /data/data/####/8b9cbf140798267e_0
  • /data/data/####/8bf428ba1b6d6bfd_0
  • /data/data/####/8bfdbffb0f3e5662_0
  • /data/data/####/8d13d21ca7e3ee7e_0
  • /data/data/####/8e194b42ce860b24_0
  • /data/data/####/8ed62bf86e2c5042_0
  • /data/data/####/90222881b73b1f67_0
  • /data/data/####/90ff3023cda5ae39_0
  • /data/data/####/91138498174f7926_0
  • /data/data/####/92768e89e95c3776_0
  • /data/data/####/929ea4e3fe06d19e_0
  • /data/data/####/929ea4e3fe06d19e_1
  • /data/data/####/92bdfabb10f0948e_0
  • /data/data/####/92f87a7791750684_0
  • /data/data/####/93835cab233805c4_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/963472d6ab51775e_0
  • /data/data/####/96549e26655239bf_0
  • /data/data/####/96c31be2f6ed33ed_0
  • /data/data/####/9846f8c613a6387a_0
  • /data/data/####/986ac81aa5512dc1_0
  • /data/data/####/9883685c06c3972e_0
  • /data/data/####/9889bd74a4f9f15f_0
  • /data/data/####/9955c3965a5ff4af_0
  • /data/data/####/99599a85fe69c3a0_0
  • /data/data/####/99b770917f59a4ad_0
  • /data/data/####/9ba08bc51351b6a4_0
  • /data/data/####/9d1b44e2edf843d2_0
  • /data/data/####/9e6906b8d5eda057_0
  • /data/data/####/9ef6af65c92b4e10_0
  • /data/data/####/9f620c1809401fa0_0
  • /data/data/####/Clizb.dex
  • /data/data/####/Clizb.dex.flock (deleted)
  • /data/data/####/Cookies-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a0093d32161a73d0_0 (deleted)
  • /data/data/####/a026fc1e8fa6c498_0
  • /data/data/####/a02fc5c38c5705bd_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a2775fffb6a35622_0
  • /data/data/####/a477d2d4f902b346_0
  • /data/data/####/a4e4c2e5-5384-4a5e-8f6d-bd9f6fc25bbc.dex
  • /data/data/####/a4e4c2e5-5384-4a5e-8f6d-bd9f6fc25bbc.dex.flock (deleted)
  • /data/data/####/a5f779333fbc53d3_0
  • /data/data/####/a6198e49276ff811_0
  • /data/data/####/a73495d8f4eed396_0
  • /data/data/####/a78f2c0631c8078e_0
  • /data/data/####/a941cc5cf5572d85_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aa587e13858dc871_0
  • /data/data/####/ab7606b22b9657f0_0
  • /data/data/####/abc3ab77f866ba98_0
  • /data/data/####/abc3ab77f866ba98_1
  • /data/data/####/acf8542fe8f4c0b0_0
  • /data/data/####/ae56dc7fe1bbe72f_0
  • /data/data/####/ae790da3f3b78ced_0
  • /data/data/####/aea8844bef82975b_0
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/af2e7194862fd901_0
  • /data/data/####/afd17057e2a81a1f_0
  • /data/data/####/b2613ac2d17a5696_0
  • /data/data/####/b360b01c57123745_0
  • /data/data/####/b5196d93b1871c1e_0
  • /data/data/####/b77987de141e7183_0
  • /data/data/####/b7c917ca4466dca1_0 (deleted)
  • /data/data/####/b7df4e16066a6be6_0
  • /data/data/####/ba62682cff0b2448_0
  • /data/data/####/ba80fdec7d3db430_0
  • /data/data/####/ba9369e8a270e3d5_0
  • /data/data/####/bb8b3e44bb9347d0_0
  • /data/data/####/bbaded2f30b7f404_0
  • /data/data/####/bc73f8734c001a33_0
  • /data/data/####/bc83348e583e322e_0
  • /data/data/####/bd0738b399625366_0
  • /data/data/####/bd2214eba145b0d7_0
  • /data/data/####/bd24db1b42688dea_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bec5eafc9af51afe_0
  • /data/data/####/bf882280db4bae07_0
  • /data/data/####/c00c39458d85fcd8_0
  • /data/data/####/c01af936e1fae9d4_0
  • /data/data/####/c01cc638d24e08b0_0
  • /data/data/####/c0e53557c27b9780_0
  • /data/data/####/c13d76841b77e3b2_0
  • /data/data/####/c191fd39d6a5effb_0
  • /data/data/####/c191fd39d6a5effb_1
  • /data/data/####/c1977debc162cff5_0
  • /data/data/####/c1dd2e925b676ac3_0
  • /data/data/####/c1ef159d2ccf2a40_0
  • /data/data/####/c24d29a5b49ab5c8_0
  • /data/data/####/c2b0498212b44c0b_0
  • /data/data/####/c4c837d661dca67d_0
  • /data/data/####/c4c837d661dca67d_s
  • /data/data/####/c5b7e46790a09f66_0
  • /data/data/####/c6e8d28279463274_0
  • /data/data/####/c794fc9feb724c90_0
  • /data/data/####/c7e6ceeebce0cc09_0
  • /data/data/####/c85d5dd699487874_0
  • /data/data/####/c8859c44733483a5_0
  • /data/data/####/c9578c9f589a25f9_0
  • /data/data/####/cac58587e43b5fe8_0
  • /data/data/####/cc6769834fc91ea8_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/ccbc07e027ce7f87_0
  • /data/data/####/ccd4e659f352f663_0
  • /data/data/####/cce188880e8bc030_0
  • /data/data/####/cce188880e8bc030_s
  • /data/data/####/cce86d36c5629cfc_0
  • /data/data/####/cfc182382710ae70_0
  • /data/data/####/cff92c661aa46add_0
  • /data/data/####/com.ioaxws_preferences.xml
  • /data/data/####/d007c91eb5773792_0
  • /data/data/####/d1047b26ba618cf4_0
  • /data/data/####/d17a55b56e238e34_0
  • /data/data/####/d34e950b1510071c_0
  • /data/data/####/d3c4963b13250374_0
  • /data/data/####/d3c4963b13250374_s
  • /data/data/####/d433ec4601068c8a_0
  • /data/data/####/d520afc2d5030b6e_0
  • /data/data/####/d5b6fef1a86395a4_0
  • /data/data/####/d6c691d4d20ab1db_0
  • /data/data/####/d77d655ec40a4bfd_0
  • /data/data/####/d88a8a055ebffed4_0
  • /data/data/####/d995f684be467f1d_0
  • /data/data/####/d9da6edcf2ec636a_0
  • /data/data/####/dafc9efbea611a30_0
  • /data/data/####/db33400c78ed1102_0
  • /data/data/####/dbd5bd69af5a5324_0
  • /data/data/####/dbd83d54df11c343_0
  • /data/data/####/dc783c388437b781_0
  • /data/data/####/dc7bf8a31cfa1987_0 (deleted)
  • /data/data/####/de6859cbfd5dd723_0
  • /data/data/####/e02fb251f66f5aad_0
  • /data/data/####/e04ecf0bca57320a_0
  • /data/data/####/e2bcf7249571f00d_0 (deleted)
  • /data/data/####/e2cafef6d1bc717e_0
  • /data/data/####/e4dd46dacb65ba7c_0
  • /data/data/####/e714c69ef25f042c_0
  • /data/data/####/e75dc8afbd8e3da8_0
  • /data/data/####/e901a8b1d3f4b0bf_0
  • /data/data/####/e9dd3dbe27688641_0
  • /data/data/####/eEprMuqn.dex
  • /data/data/####/eEprMuqn.dex.flock (deleted)
  • /data/data/####/eb66840007331a07_0
  • /data/data/####/edf292f624515dc6_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f06cfb0e92f2148f_0
  • /data/data/####/f109e1a0d3df16fd_0
  • /data/data/####/f20f383709205048_0
  • /data/data/####/f2bd4f343e188b96_0
  • /data/data/####/f3dc1cc380ef58a3_0
  • /data/data/####/f4a71d5e8f60db3c_0
  • /data/data/####/f508d6449c414d07_0
  • /data/data/####/f5bc03c36be99635_0
  • /data/data/####/f5ca92345e4f80e1_0
  • /data/data/####/f85ad66ad18be8f2_0
  • /data/data/####/fb9e3266baf90843_0
  • /data/data/####/fd8f827c47abeb99_0
  • /data/data/####/fdaf0e2c15891743_0
  • /data/data/####/fddfeb87b3831729_0
  • /data/data/####/fe8a329ba6a028dc_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ffcbff16af48e2d4_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/swSdIsAW.dex
  • /data/data/####/swSdIsAW.dex.flock (deleted)
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android