マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Android.Locker.17466

Added to the Dr.Web virus database: 2023-10-04

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.1449.origin
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • UDP(DNS) <Google DNS>
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) 1####.194.220.95:443
  • TCP(TLS/1.0) ei.ph####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) m####.traffic####.net:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) st####.ho####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) 64.2####.164.94:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) md####.google####.com:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) rr2---s####.g####.com:443
  • TCP(TLS/1.2) 1####.251.1.100:443
  • TCP(TLS/1.2) 1####.194.220.95:443
  • TCP(TLS/1.2) md####.google####.com:443
  • TCP(TLS/1.2) www.google-####.com:443
  • TCP(TLS/1.2) 64.2####.164.94:443
  • UDP 1####.194.220.95:443
  • UDP www.gst####.com:443
  • UDP md####.google####.com:443
  • UDP rr18---####.g####.com:443
DNS requests:
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • ei.ph####.com
  • h####.por####.com
  • m####.go####.com
  • m####.traffic####.net
  • md####.google####.com
  • p####.google####.com
  • rr18---####.g####.com
  • rr2---s####.g####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.ho####.com
  • sto####.google####.com
  • www.google-####.com
  • www.googlet####.com
  • www.gst####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/004f24abf598a945_0
  • /data/data/####/0069585344fae760_0
  • /data/data/####/00f4cdcd4ecc5ee1_0
  • /data/data/####/04622812d60a9027_0
  • /data/data/####/047a6446b45045e8_0
  • /data/data/####/05e6fbc11d17c9da_0
  • /data/data/####/0700b955951cea30_0
  • /data/data/####/07ab8684b9ad4c07_0
  • /data/data/####/07d3808952f3e862_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0a3b1ed2fd8e80ec_0
  • /data/data/####/0b81124a0cce4321_0
  • /data/data/####/0d78db2a35f98e82_0
  • /data/data/####/0ded8875e223a49d_0
  • /data/data/####/0f28e4288b16daed_0
  • /data/data/####/0f38e79e300bfac2_0
  • /data/data/####/113a2f977814eb1b_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/123f5b64a5b067c6_0
  • /data/data/####/12b7abc8c288635d_0
  • /data/data/####/12fb9b08ec3652ad_0
  • /data/data/####/1450766b6562f246_0
  • /data/data/####/16dc68f7c72bdc0c_0
  • /data/data/####/1881ee8fcf7b9bb8_0
  • /data/data/####/18c86c2533419063_0
  • /data/data/####/197d9f141e5a85e6_0
  • /data/data/####/1b6768a404728f9d_0
  • /data/data/####/1b6768a404728f9d_1
  • /data/data/####/1c1bbf6f796987d8_0
  • /data/data/####/1cccc6f90be11206_0
  • /data/data/####/1cccc6f90be11206_1
  • /data/data/####/218a4a8b03a0dbba_0
  • /data/data/####/218f6a730aab902b_0
  • /data/data/####/21b0b4c2ad9fb2e0_0
  • /data/data/####/23e14d0e761281bd_0
  • /data/data/####/23e14d0e761281bd_1
  • /data/data/####/255501185abdc604_0
  • /data/data/####/255501185abdc604_1
  • /data/data/####/25edbcdeee5352d2_0
  • /data/data/####/25f787aa9f8c7e3d_0
  • /data/data/####/2686e31a8057ec57_0
  • /data/data/####/2779d5cd08ca25e5_0
  • /data/data/####/28e270645be2e548_0
  • /data/data/####/28e270645be2e548_1
  • /data/data/####/29127ac60ee05ac5_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2add9e984fa6cff2_0
  • /data/data/####/2add9e984fa6cff2_1
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d4b80d624911731_0
  • /data/data/####/2d4b80d624911731_1
  • /data/data/####/2d52bfb20a68a2e5_0
  • /data/data/####/2e2ecd831d29268a_0
  • /data/data/####/2ede7614e7e57b14_0
  • /data/data/####/30daf7c3034bb91d_0
  • /data/data/####/30f737cb462e7aa2_0
  • /data/data/####/30f737cb462e7aa2_1
  • /data/data/####/31851b5c80e89be4_0
  • /data/data/####/3196e4d2e0cbffa1_0
  • /data/data/####/31faf1b9cec52aea_0
  • /data/data/####/33111003f6d581a0_0
  • /data/data/####/33474d826c1f993c_0
  • /data/data/####/34a0c1237b9993c5_0
  • /data/data/####/353f2bfc4c2a9f0f_0
  • /data/data/####/3866311a184990da_0
  • /data/data/####/38e642fb25046641_0
  • /data/data/####/3a3113dd0d7641c1_0
  • /data/data/####/3a593604c5a8fe16_0
  • /data/data/####/3a7427cb0464d2bb_0
  • /data/data/####/3ab5d3e5700b2577_0
  • /data/data/####/3b323d6d4cd4b1c0_0
  • /data/data/####/3c0fb49dee21316a_0
  • /data/data/####/3c618831935d52fe_0
  • /data/data/####/3c7dd0ee6e131004_0
  • /data/data/####/3c82fb6c02c70730_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/40984e98f0f225af_0
  • /data/data/####/4277f765e21ba231_0
  • /data/data/####/4277f765e21ba231_1
  • /data/data/####/44184c25746e0e6b_0
  • /data/data/####/452df3884268e3e7_0
  • /data/data/####/452df3884268e3e7_1
  • /data/data/####/4724daffd2928f89_0
  • /data/data/####/47463cbdef1f1a40_0
  • /data/data/####/479575a52ef621b1_0
  • /data/data/####/479575a52ef621b1_1
  • /data/data/####/4944ba58bf752fd1_0
  • /data/data/####/494e433818962fce_0
  • /data/data/####/495a18ec6a641510_0
  • /data/data/####/4a719e1fb4df00ed_0
  • /data/data/####/4bd6615c074d67ac_0
  • /data/data/####/4c7df1a848f1fa87_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4d177b5f22685326_0
  • /data/data/####/4d1a139ff8112ee9_0
  • /data/data/####/4e7629e6e3c1dbee_0
  • /data/data/####/4ed92342b9895a0f_0
  • /data/data/####/4ed92342b9895a0f_1
  • /data/data/####/50232e206ca0ee84_0
  • /data/data/####/50c6d10cae49b0ba_0
  • /data/data/####/50e32ea6a3c1427f_0
  • /data/data/####/50e32ea6a3c1427f_1
  • /data/data/####/5193bd2854062125_0
  • /data/data/####/5362bafb8114a0db_0
  • /data/data/####/537e28cedd5330df_0
  • /data/data/####/537e28cedd5330df_1
  • /data/data/####/5578c38e90f190de_0
  • /data/data/####/5578c38e90f190de_1
  • /data/data/####/561fd7e65eb2c30a_0
  • /data/data/####/5723d04fde955404_0
  • /data/data/####/57c228d56121c5a9_0
  • /data/data/####/58e34f8bd61b6abd_0
  • /data/data/####/59d8de7d78220fcc_0
  • /data/data/####/5b44d931b96ad9bf_0
  • /data/data/####/5bbc7b468ef80c01_0
  • /data/data/####/5bbc7b468ef80c01_1
  • /data/data/####/5bd4ef32ef4fbeb6_0
  • /data/data/####/5d014c73c9d058af_0
  • /data/data/####/5e8467484805c558_0
  • /data/data/####/5e8467484805c558_1
  • /data/data/####/5ef9367aa75683f3_0
  • /data/data/####/5f55a6cefee1cf57_0
  • /data/data/####/60560c5a4803c975_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/630b7d95762eafcd_0
  • /data/data/####/64508fa1cd46b0ab_0
  • /data/data/####/64508fa1cd46b0ab_1
  • /data/data/####/651b9cd952bf765f_0
  • /data/data/####/667c9127f2c942cf_0
  • /data/data/####/66834cb5260d078c_0
  • /data/data/####/66834cb5260d078c_1
  • /data/data/####/66e7834481663201_0
  • /data/data/####/66e7834481663201_1
  • /data/data/####/671ce8fb6cecf26e_0
  • /data/data/####/6b289d0f7f5bbc41_0
  • /data/data/####/6bb74f1832138e64_0
  • /data/data/####/6c72157610e38b7a_0
  • /data/data/####/6dbdafc01307d3e3_0
  • /data/data/####/708c59b6478af2d1_0
  • /data/data/####/7174cb30a8513e5c_0
  • /data/data/####/73e5b1644ad3baa2_0
  • /data/data/####/747ff97a8f02ba6e_0
  • /data/data/####/758f888016d428ad_0
  • /data/data/####/7597b0e899607226_0
  • /data/data/####/76fcde62f46a2d07_0
  • /data/data/####/772eba7fdd3571f3_0
  • /data/data/####/773f6afbc36d768b_0
  • /data/data/####/77b13fd1897a0b8f_0
  • /data/data/####/77b13fd1897a0b8f_1
  • /data/data/####/79b7436624043168_0
  • /data/data/####/79be02732277a257_0
  • /data/data/####/7be03c4e1f97fd35_0
  • /data/data/####/7c64bbd679502382_0
  • /data/data/####/7c913b7416fb6938_0
  • /data/data/####/804fe2736b032a2b_0
  • /data/data/####/82babd4a2cc09c49_0
  • /data/data/####/82c6608da9384ed9_0
  • /data/data/####/840b374afa0529e2_0
  • /data/data/####/840b374afa0529e2_1
  • /data/data/####/847922c732c55ea1_0
  • /data/data/####/847922c732c55ea1_1
  • /data/data/####/85bea7bfe0289e9b_0
  • /data/data/####/86c5a0c1ee3c31bb_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/88f0f238928012af_0
  • /data/data/####/8947561cf7b8ec6e_0
  • /data/data/####/898afc9a4a40ee70_0
  • /data/data/####/89f1830e17148263_0
  • /data/data/####/89f1830e17148263_1
  • /data/data/####/8b46bfd96000118d_0
  • /data/data/####/8bd87e01033f0e13_0
  • /data/data/####/8e9fd53ff90a705a_0
  • /data/data/####/8fd52e432fc74539_0
  • /data/data/####/92047e59ec70e9d0_0
  • /data/data/####/92116e5007cdbc02_0
  • /data/data/####/923a9bfa42335070_0
  • /data/data/####/9292987159863f53_0
  • /data/data/####/9354787d977bdc6f_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/94797e4fae8ecd97_0
  • /data/data/####/94e4bf752fd4aa8a_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/979ce47385dccbb0_0
  • /data/data/####/979ce47385dccbb0_1
  • /data/data/####/97a8765b50a99964_0
  • /data/data/####/98abd4ec69769837_0
  • /data/data/####/99066ee325d54372_0
  • /data/data/####/9e74a7bfcebf2881_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/OlxBjJtTW.dex
  • /data/data/####/OlxBjJtTW.dex.flock (deleted)
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a18c8b56fbf633a3_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a21d104cd5cfc0d0_0
  • /data/data/####/a21d104cd5cfc0d0_1
  • /data/data/####/a2926f04bdbe7777_0
  • /data/data/####/a2926f04bdbe7777_1
  • /data/data/####/a3a4c16141d299f9_0
  • /data/data/####/a41d2ad2b34ab4b5_0
  • /data/data/####/a41d2ad2b34ab4b5_1
  • /data/data/####/a698296c36d5f0f9_0
  • /data/data/####/a76333147b9ed37f_0
  • /data/data/####/a902513049dee8de_0
  • /data/data/####/aa5b4921ddeeb653_0
  • /data/data/####/aaf003b3402b5294_0
  • /data/data/####/ab05d4aba873eec1_0
  • /data/data/####/ab86272edadbd4b9_0
  • /data/data/####/ab94ae48de5e2c2e_0
  • /data/data/####/abc9a4fb3573f182_0
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/af421d79e70a0317_0
  • /data/data/####/af421d79e70a0317_1
  • /data/data/####/afa10696a2894a23_0
  • /data/data/####/b0ab10a1e5c17ceb_0
  • /data/data/####/b12394977ecf1240_0
  • /data/data/####/b14f6028ffeab3ef_0
  • /data/data/####/b2575f6ecf380ef9_0
  • /data/data/####/b2a93cab26887d5c_0
  • /data/data/####/b40f021e2755f650_0
  • /data/data/####/b410f8b141a597d2_0
  • /data/data/####/b50ef3bcd751cb85_0
  • /data/data/####/b78c511193591175_0
  • /data/data/####/b83751e54fd28560_0
  • /data/data/####/bVlbJYz.dex
  • /data/data/####/bVlbJYz.dex.flock (deleted)
  • /data/data/####/baff42958be8527a_0
  • /data/data/####/bc714714239cedf6_0
  • /data/data/####/bc760de2d5b86c1d_0
  • /data/data/####/bc79cee12518706a_0
  • /data/data/####/bcb953b5b0878bcb_0
  • /data/data/####/bcd82e5f22c91075_0
  • /data/data/####/bdbd44ad9565e171_0
  • /data/data/####/bec5eafc9af51afe_0
  • /data/data/####/bf28d700f14c9da7_0
  • /data/data/####/bf9e2600028f7fe4_0
  • /data/data/####/c0c5252a57877af1_0
  • /data/data/####/c122cb77132718a3_0
  • /data/data/####/c3c6d7a61781d567_0
  • /data/data/####/c567685c2653a5b2_0
  • /data/data/####/c5b7e46790a09f66_0
  • /data/data/####/c6babc5302fe693d_0
  • /data/data/####/c8d3e3898ac3de36_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/cccd5136efb223d3_0
  • /data/data/####/cd8ae4e5c71011c1_0
  • /data/data/####/cd8ae4e5c71011c1_1
  • /data/data/####/cffbed0540c95038_0
  • /data/data/####/com.bllldwms_preferences.xml
  • /data/data/####/d2c4879202824e00_0
  • /data/data/####/d2d129d3eec38875_0
  • /data/data/####/d45d6a45f6f73b77_0
  • /data/data/####/d4c874eadc173f1e_0
  • /data/data/####/d6b44cfd509836d4_0
  • /data/data/####/d8db01e6e5264e3d_0
  • /data/data/####/d8e12ee8e92557b1_0
  • /data/data/####/d9257fa8bdb69f3b_0
  • /data/data/####/d97e5d00f22485f1_0
  • /data/data/####/dbbd40acc7c480a3_0
  • /data/data/####/dbbd40acc7c480a3_1
  • /data/data/####/dc92c828f2f87eec_0
  • /data/data/####/de6f83016e5571b4_0
  • /data/data/####/deb91a577dbeedc8_0
  • /data/data/####/deb91a577dbeedc8_1
  • /data/data/####/e02fdba802957375_0
  • /data/data/####/e04ecf0bca57320a_0
  • /data/data/####/e054f5e4a864a2a8_0
  • /data/data/####/e072f590c80a5826_0
  • /data/data/####/e14ff22239811344_0
  • /data/data/####/e196d234025eda8b_0
  • /data/data/####/e1b93e9524e99813_0
  • /data/data/####/e35508e9feb0d955_0
  • /data/data/####/e3bbb282bc9e8b93_0
  • /data/data/####/e52b1262e8df5dc3_0
  • /data/data/####/e53e033cdef1fac5_0
  • /data/data/####/e7a0afd8729ad452_0
  • /data/data/####/e7ab57b7ca8761ca_0
  • /data/data/####/e7fa089913da5157_0
  • /data/data/####/e7fa089913da5157_1
  • /data/data/####/e88be03fd6d8b191_0
  • /data/data/####/e8eb80236ce3b384_0
  • /data/data/####/e94d4f3d1f4bc50e_0
  • /data/data/####/ea39659e1a80bdab_0
  • /data/data/####/eaba9a77cff6076c_0
  • /data/data/####/ebe044f394499cef_0
  • /data/data/####/ed0a9c5361ea2051_0
  • /data/data/####/ef25b863345313e0_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f0bc5baa0562972a_0
  • /data/data/####/f0bc5baa0562972a_1
  • /data/data/####/f0fa9937774f6f42_0
  • /data/data/####/f1e9574a433489b3_0
  • /data/data/####/f509d8aae19da40c_0
  • /data/data/####/f55c5f7bef882730_0
  • /data/data/####/f58800856f958990_0
  • /data/data/####/f58800856f958990_1
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/f852b7f35d55a718_0
  • /data/data/####/f921eb7a8535cffa_0
  • /data/data/####/fb438c921312d985_0
  • /data/data/####/fca2344c6517ca08_0
  • /data/data/####/fd2b67a872fc2c76_0
  • /data/data/####/fd693327b2f7bec1_0
  • /data/data/####/fdd80e132323bd09_0
  • /data/data/####/fe36bfeb647655a9_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/the-real-index
  • /data/data/####/xEZefz.dex
  • /data/data/####/xEZefz.dex.flock (deleted)
  • /data/data/####/xqzotWNc.dex
  • /data/data/####/xqzotWNc.dex.flock (deleted)
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android