マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Android.Locker.17284

Added to the Dr.Web virus database: 2023-08-05

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Threat detection based on machine learning.
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) i.cam####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) 1####.250.150.95:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) connect####.gst####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) and####.google####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) ht-####.a####.com:443
  • TCP(TLS/1.2) 1####.250.150.95:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • and####.google####.com
  • cdn1-sm####.ph####.com
  • connect####.gst####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • gmscomp####.google####.com
  • h####.por####.com
  • ht-####.a####.com
  • hw-####.a####.com
  • i.cam####.com
  • i.dy####.com
  • m####.go####.com
  • m####.traffic####.net
  • p####.google####.com
  • pla####.google####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/00da7ed3191ff439_0
  • /data/data/####/015eb7be8367a47b_0
  • /data/data/####/0344440b5a0d39ec_0
  • /data/data/####/04c039d8ea1f7f46_0
  • /data/data/####/065f0cba87f2ba12_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a61312c3ce937bc_0
  • /data/data/####/0a61312c3ce937bc_s
  • /data/data/####/0b062f04a3ceae77_0
  • /data/data/####/0b90a6265ff54b8e_0
  • /data/data/####/0cebe27de571d78f_0
  • /data/data/####/0cfac24e85bd17bb_0
  • /data/data/####/0cfac24e85bd17bb_s
  • /data/data/####/0cfd0a4960091da1_0
  • /data/data/####/0e75b2d412bb60a6_0
  • /data/data/####/0f7434909abeafcf_0
  • /data/data/####/1061adbdc77ce390_0 (deleted)
  • /data/data/####/10659e56364e3023_0
  • /data/data/####/10659e56364e3023_1
  • /data/data/####/10e1b265538ff4ee_0
  • /data/data/####/117725669bfdaa61_0
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/14eb7087c3337ce1_0
  • /data/data/####/185bff48c96979e4_0
  • /data/data/####/18b2224d6116098d_0
  • /data/data/####/18c0b3059e9a2cd3_0
  • /data/data/####/1912fbf758024397_0
  • /data/data/####/19b41c20310f10a7_0
  • /data/data/####/1ae1b07ad20fda35_0
  • /data/data/####/1b6a6df9215c5f72_0
  • /data/data/####/1c7454875650b11f_0
  • /data/data/####/1d0632c49363f54a_0
  • /data/data/####/1eaca52419b2a560_0
  • /data/data/####/1f03c858cd5c189b_0
  • /data/data/####/1f665b6d62064fab_0
  • /data/data/####/1ff48deb6764628a_0
  • /data/data/####/20284fccf2f0cd6e_0
  • /data/data/####/21e38e778c46d8bf_0
  • /data/data/####/22a2163dbf421b7b_0
  • /data/data/####/24212bf1b216ec2f_0
  • /data/data/####/246059505e6293ee_0
  • /data/data/####/252fe19e55445a8d_0
  • /data/data/####/252fe19e55445a8d_1
  • /data/data/####/25596ad6262b9576_0
  • /data/data/####/255c6f2da743cdc0_0
  • /data/data/####/2641108aa7191a1f_0
  • /data/data/####/2641108aa7191a1f_1
  • /data/data/####/273f949923941ebe_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2ad3f1606b0b34b7_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d3caee04918ba4c_0
  • /data/data/####/2da456626ab1afc6_0 (deleted)
  • /data/data/####/2e2ffd4c349d2d8f_0 (deleted)
  • /data/data/####/2e5041ca8ac7bd4a_0
  • /data/data/####/3055001a405e3997_0
  • /data/data/####/30eb8309a12e4ca4_0
  • /data/data/####/31bb9167610f3988_0
  • /data/data/####/32107d13bd3f33f4_0
  • /data/data/####/328fcdfbf0f30ab5_0 (deleted)
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/33c4d0f5b8302271_0
  • /data/data/####/343c65bcd4dddd5b_0
  • /data/data/####/34b09b4571a6edfc_0
  • /data/data/####/3610e95e29d16a1e_0
  • /data/data/####/3639dfcdb38fa620_0
  • /data/data/####/36b20eddfaa60e69_0
  • /data/data/####/3a1d3c862a340ea4_0
  • /data/data/####/3c1d9424cb905ba4_0
  • /data/data/####/3c44cf2ef96bc91a_0 (deleted)
  • /data/data/####/3c5345ae27817b0a_0
  • /data/data/####/3d024371e079e82a_0
  • /data/data/####/3d024371e079e82a_1
  • /data/data/####/3e0e3d3d2ebb0cb6_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/40bb0f0e27d3b283_0
  • /data/data/####/40bb0f0e27d3b283_1
  • /data/data/####/40d82732c02e25ce_0 (deleted)
  • /data/data/####/41b4bf11c33b6fbc_0
  • /data/data/####/4724daffd2928f89_0
  • /data/data/####/472699555a147dbb_0
  • /data/data/####/4729403011ac6c10_0
  • /data/data/####/48186a0dce0a3022_0
  • /data/data/####/483c98240cab9370_0
  • /data/data/####/4877f9184b94bf06_0
  • /data/data/####/48cdca5438bf112b_0
  • /data/data/####/4a357a4ae2ed8d38_0
  • /data/data/####/4c1039a95dc39bdf_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4deaee653be74a56_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/4ee5306597cf4bfc_0
  • /data/data/####/506c25e468df488e_0
  • /data/data/####/51efe9ca7dc521a2_0
  • /data/data/####/51efe9ca7dc521a2_1
  • /data/data/####/548a1bf4af87e60a_0
  • /data/data/####/556b1bae5cf5d796_0
  • /data/data/####/561feeb94d66038b_0
  • /data/data/####/561feeb94d66038b_1
  • /data/data/####/57a8eff2ea18a53b_0
  • /data/data/####/57db4853d20c9ccb_0
  • /data/data/####/5890f57fb93c5f85_0
  • /data/data/####/597c7504dfdf291b_0
  • /data/data/####/5ca07a511bea4ecf_0
  • /data/data/####/5ca939c7deedcb34_0
  • /data/data/####/6007fa171938b538_0
  • /data/data/####/60560c5a4803c975_0
  • /data/data/####/609cd5bff0a7875d_0
  • /data/data/####/62a98379c25970e3_0 (deleted)
  • /data/data/####/62c226458ed71f6d_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/63bf63ebd3a3cf2f_0
  • /data/data/####/63e649c4a844e976_0
  • /data/data/####/63fa55a35e7849d3_0
  • /data/data/####/63fa55a35e7849d3_1
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/64bd479c901d40a0_0
  • /data/data/####/65415f216dad930a_0
  • /data/data/####/6591c2a56ad57344_0
  • /data/data/####/66401b0c20b0e3a0_0
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/675c7e9d757240d9_0
  • /data/data/####/67e64846d048cb49_0
  • /data/data/####/694a3da3cd30c5eb_0
  • /data/data/####/69b38e49ea2f3ee4_0
  • /data/data/####/6a2ba17f2db89c59_0
  • /data/data/####/6a75ce0b2c176985_0
  • /data/data/####/6ea0bc25a9bc6b4a_0
  • /data/data/####/6ea0bc25a9bc6b4a_1
  • /data/data/####/6ec03d6b95fe058e_0
  • /data/data/####/7054b56eb5326142_0
  • /data/data/####/7074063d3d696416_0
  • /data/data/####/710f4cd27a2a3cff_0
  • /data/data/####/7147df6c4bfeee2e_0
  • /data/data/####/71e84b9d141fdfd1_0
  • /data/data/####/7387a061ad84992e_0
  • /data/data/####/756bbdfb06827c04_0
  • /data/data/####/758f67ebb2aafa56_0
  • /data/data/####/767a9aa1bf3949cd_0
  • /data/data/####/7693a67e3f8fd29c_0
  • /data/data/####/76a2f33a4bb04947_0 (deleted)
  • /data/data/####/775095da833d020a_0
  • /data/data/####/7857e1f70dfdf631_0
  • /data/data/####/78d525ded21695ec_0
  • /data/data/####/7b33fdead8767b0b_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7c89ec52222b38ce_0
  • /data/data/####/7efa9e58757091ff_0
  • /data/data/####/7f31355d5709d4d7_0
  • /data/data/####/7f98e3dffa4a8661_0
  • /data/data/####/807b74cdc5019823_0 (deleted)
  • /data/data/####/81297a439c774582_0
  • /data/data/####/816edab88afc770f_0
  • /data/data/####/8270bd3a1e4c095d_0
  • /data/data/####/82ba0398de1589b3_0
  • /data/data/####/8342bc913e09e07a_0
  • /data/data/####/848f584eb2980526_0
  • /data/data/####/855d4806184d2e0a_0
  • /data/data/####/8753fa2389d0efa0_0
  • /data/data/####/875ba76d6305b7ce_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/88a4390a22062bee_0
  • /data/data/####/89d2fb97cd5ac431_0
  • /data/data/####/8ad007ddee142349_0
  • /data/data/####/8c2ae296c491af3f_0
  • /data/data/####/8c2b045b2e446455_0
  • /data/data/####/8d3a54608a3f26c7_0
  • /data/data/####/8db8ef6f042ea924_0
  • /data/data/####/8dbe332c445fd459_0
  • /data/data/####/8e05cf4c7e942b5d_0
  • /data/data/####/8eda8a00953e5525_0
  • /data/data/####/8fcc900296f7d6a3_0
  • /data/data/####/922a1f151f2c1da2_0
  • /data/data/####/92981146dce670c9_0
  • /data/data/####/92d9f47c317f287d_0
  • /data/data/####/92d9f47c317f287d_1
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/961bdbab5be55ede_0
  • /data/data/####/97835199b65475a2_0
  • /data/data/####/980c993391aeba89_0
  • /data/data/####/980c993391aeba89_1
  • /data/data/####/983d931d7a653552_0
  • /data/data/####/988444cfdbf0c3a5_0
  • /data/data/####/99e1d7f70792b254_0
  • /data/data/####/9a29b26e3147f9de_0
  • /data/data/####/9aa5203d094de023_0
  • /data/data/####/9aa94c6f444426b7_0
  • /data/data/####/9ae1ed240112f4c8_0
  • /data/data/####/9ae90431d736d10a_0
  • /data/data/####/9c8c712bf7c34be5_0
  • /data/data/####/9cd6c2615ad7442a_0
  • /data/data/####/9cd6c2615ad7442a_s
  • /data/data/####/9d5c589d9130c365_0
  • /data/data/####/9dbff11187e8108c_0
  • /data/data/####/9e58e6ad38eacbff_0
  • /data/data/####/9f620c1809401fa0_0
  • /data/data/####/9f833cbe470e7a9f_0 (deleted)
  • /data/data/####/9fab8bedbaaa2cda_0
  • /data/data/####/9fc5ee58554e5fdc_0
  • /data/data/####/9fdf1e0151df1190_0 (deleted)
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a050780ad9a0b4e3_0
  • /data/data/####/a0b6580a235fb3d1_0
  • /data/data/####/a136137dcc3a33f7_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a1c50fb91d9cc9f7_0
  • /data/data/####/a1d8e33cbf64f6ba_0
  • /data/data/####/a23b25d3b31c310a_0 (deleted)
  • /data/data/####/a4156aa71168bfae_0
  • /data/data/####/a42b2e18206cade7_0
  • /data/data/####/a44d8c2cee52b607_0
  • /data/data/####/a4a86499d9012f9b_0
  • /data/data/####/a7d28f177d61332d_0
  • /data/data/####/a9064635a74e49e7_0
  • /data/data/####/a9064635a74e49e7_1
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aa3ba6e88bbc09f8_0
  • /data/data/####/aad4be480424f9bb_0
  • /data/data/####/ab0e05760903ae30_0
  • /data/data/####/ac973ee7b6d8febe_0
  • /data/data/####/aca764273de775c3_0
  • /data/data/####/acb3b8e4428ede57_0
  • /data/data/####/acf8542fe8f4c0b0_0
  • /data/data/####/ad0ab0a3846e9ea6_0
  • /data/data/####/ada50a2f6b89a4a7_0
  • /data/data/####/afc5aa4124d5b42f_0
  • /data/data/####/b058aef0879c7e55_0
  • /data/data/####/b058aef0879c7e55_1
  • /data/data/####/b0d91e1a64a3e65e_0
  • /data/data/####/b14808a180c50e2e_0
  • /data/data/####/b269dfb8b1b62cba_0
  • /data/data/####/b30a45b01739bcc0_0
  • /data/data/####/b5196d93b1871c1e_0
  • /data/data/####/b5d571bcf26b1598_0
  • /data/data/####/b620e0222e35840b_0
  • /data/data/####/b7044a9fdd8524ef_0
  • /data/data/####/b7a2794621acf38d_0
  • /data/data/####/b7a7dd547f37d1e5_0
  • /data/data/####/b7a7dd547f37d1e5_s
  • /data/data/####/b80ffb1664d45d3e_0
  • /data/data/####/b978a973d373c6f6_0
  • /data/data/####/ba3145df04d10ced_0
  • /data/data/####/bb119f2997a8e32e_0
  • /data/data/####/bb717713183f6e3d_0
  • /data/data/####/bc1ab1ee2c686f9a_0
  • /data/data/####/bcaad22cd8953116_0
  • /data/data/####/bceec9c7fa9ed778_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bf70cc938786ec6d_0
  • /data/data/####/bff6dcdc72ad5d41_0
  • /data/data/####/c0dd57aa85e05435_0
  • /data/data/####/c1a74fe607cc18b4_0 (deleted)
  • /data/data/####/c430bb7e1f3d21f3_0
  • /data/data/####/c4a27f43ba3860ac_0
  • /data/data/####/c4a5fcb85d71a657_0
  • /data/data/####/c4c837d661dca67d_0
  • /data/data/####/c4c837d661dca67d_s
  • /data/data/####/c54ee5c118c5000b_0
  • /data/data/####/c76a5c1b3cc7aa9c_0
  • /data/data/####/c819cbfc8e4baee7_0
  • /data/data/####/c85e98db9a9bd774_0
  • /data/data/####/c87c03fa2b476e19_0
  • /data/data/####/c8a279397b770648_0
  • /data/data/####/c8a279397b770648_1
  • /data/data/####/c96db79ae8a9a482_0
  • /data/data/####/c97e15e25f96c502_0
  • /data/data/####/ca695d654c7dc016_0
  • /data/data/####/cbdbca0830988ca4_0
  • /data/data/####/cc16b9261e9f021b_0
  • /data/data/####/cc507114381d8738_0
  • /data/data/####/ccd4e659f352f663_0
  • /data/data/####/cf75ccfee9ae306a_0
  • /data/data/####/cf8d2febce4497cd_0
  • /data/data/####/cff16a92e5db6c51_0
  • /data/data/####/com.oqyks_preferences.xml
  • /data/data/####/d11ab2a640112800_0
  • /data/data/####/d33d5fd8de91fa7f_0
  • /data/data/####/d33d5fd8de91fa7f_s
  • /data/data/####/d4cd6e09830b47ee_0
  • /data/data/####/d4ff65941fd192a3_0
  • /data/data/####/d592d9c23859ebbd_0
  • /data/data/####/d59a62f87da343b1_0
  • /data/data/####/d5d654b69620d846_0
  • /data/data/####/d5ee4cb83530a0e5_0
  • /data/data/####/d5fe1a722a6015a7_0 (deleted)
  • /data/data/####/d74ae5176699bf22_0
  • /data/data/####/d77d655ec40a4bfd_0
  • /data/data/####/d79f4b3b175e756d_0 (deleted)
  • /data/data/####/dafcdac2aef95795_0
  • /data/data/####/db49680b955394b5_0
  • /data/data/####/db679dffd997e136_0
  • /data/data/####/dbc2e3b1b2147771_0
  • /data/data/####/dbc5ef5ef750bec9_0
  • /data/data/####/dbc5ef5ef750bec9_1
  • /data/data/####/dcf9723c0a0c1215_0
  • /data/data/####/dd3e5fb6b6aef45b_0
  • /data/data/####/dd4ce5068a200ec5_0
  • /data/data/####/dfca5c66340a07d4_0
  • /data/data/####/e030f0d4e3bcc82b_0
  • /data/data/####/e04d5cfea3e1a3bc_0
  • /data/data/####/e04d5cfea3e1a3bc_1
  • /data/data/####/e04ecf0bca57320a_0
  • /data/data/####/e130c2ec12bdf103_0
  • /data/data/####/e2b416a47c5245b7_0
  • /data/data/####/e30de57075a86aec_0
  • /data/data/####/e494d662e13933f8_0 (deleted)
  • /data/data/####/e5435cda768dcecf_0
  • /data/data/####/e54ba7c750363aed_0 (deleted)
  • /data/data/####/e8eb80236ce3b384_0
  • /data/data/####/e901a8b1d3f4b0bf_0
  • /data/data/####/e99b1f733117f689_0
  • /data/data/####/eb7d9458988d009c_0
  • /data/data/####/ec3008cc1cd1334e_0
  • /data/data/####/ecde05edcd8cd127_0
  • /data/data/####/ed41ea8d0b831ec2_0
  • /data/data/####/ed5d6d9ae06b6206_0
  • /data/data/####/ee4a4b91c8186a83_0
  • /data/data/####/ee63f57965074345_0
  • /data/data/####/ef25f51b4f6646ce_0
  • /data/data/####/ef84b7c19441018c_0
  • /data/data/####/efd308539a596bc6_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f262767d04229399_0
  • /data/data/####/f3b9b8d53d40164f_0 (deleted)
  • /data/data/####/f4a71d5e8f60db3c_0
  • /data/data/####/f677f433f90f8759_0
  • /data/data/####/f8dc574918582933_0
  • /data/data/####/fa2d63a81f0719f7_0
  • /data/data/####/fa2d63a81f0719f7_1
  • /data/data/####/faf95043d1de6e49_0
  • /data/data/####/fcfb1594f6864eda_0
  • /data/data/####/fd0dc7f4fb4b9836_0
  • /data/data/####/fd2ed5dc79a11bd7_0
  • /data/data/####/fddfeb87b3831729_0
  • /data/data/####/fdfa4ada70a64df5_0
  • /data/data/####/fe9b8d738dadb2f0_0
  • /data/data/####/feZGp.dex
  • /data/data/####/feZGp.dex.flock (deleted)
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff5a9e2cbb08395c_0
  • /data/data/####/ffdc22a3c87ea80a_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/nbSfWf.dex
  • /data/data/####/nbSfWf.dex.flock (deleted)
  • /data/data/####/the-real-index
  • /data/data/####/ypqdOGBFX.dex
  • /data/data/####/ypqdOGBFX.dex.flock (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android