ユーザー向け情報

マイライブラリ
マイライブラリ

マイライブラリに追加

検索
検索

電話
テクニカルサポート利用方法

問い合わせ

新規お問い合わせ

電話（英語）

+7 (495) 789-45-86

フォーラム（英語）

お問い合わせ履歴

新規お問い合わせ

電話（英語）

+7 (495) 789-45-86

Profile

JP

RU CN DE EN ES FR IT JP KZ UZ PL BY
サービス
スキャナー
Dr.Web vxCube
トライアル
ウイルスライブラリ
ナレッジベース

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

ニュース

Android.BankBot.TgToxic.49

Added to the Dr.Web virus database: 2023-11-09

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.BankBot.TgToxic.1
Network activity:
Connects to:
  • UDP(DNS) <Google DNS>
  • TCP(HTTP/1.1) 1####.251.1.94:80
  • TCP(TLS/1.0) 1####.251.1.94:443
  • TCP(TLS/1.0) www.google####.com:443
  • TCP(TLS/1.0) digital####.google####.com:443
  • TCP(TLS/1.0) 74.1####.131.113:443
  • TCP(TLS/1.0) f####.gst####.com:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) rr18---####.g####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) rr2---s####.g####.com:443
  • TCP(TLS/1.2) p####.google####.com:443
  • TCP(TLS/1.2) www.google####.com:443
  • TCP(TLS/1.2) 1####.251.1.94:443
  • TCP(TLS/1.2) 64.2####.165.102:443
  • TCP(TLS/1.2) 74.1####.131.113:443
  • TCP(TLS/1.2) 1####.251.1.99:443
  • UDP p####.google####.com:443
  • UDP www.gst####.com:443
DNS requests:
  • and####.cli####.go####.com
  • and####.google####.com
  • digital####.google####.com
  • f####.gst####.com
  • m####.go####.com
  • md####.google####.com
  • p####.google####.com
  • pla####.googleu####.com
  • rr18---####.g####.com
  • rr2---s####.g####.com
  • rr9---s####.g####.com
  • sqs.ap-nort####.amazo####.com
  • www.go####.com
  • www.google####.com
  • www.gst####.com
File system changes:
Creates the following files:
  • /data/data/####/.com_ftzhyw_routkwbl.meta
  • /data/data/####/150035
  • /data/data/####/19
  • /data/data/####/1E85T2QT2EWD0KPW9F37VNS44WSN63YO.dex
  • /data/data/####/1SUJNW3L3OL9G4A1FJWCGA31SNEC2NQC.dex
  • /data/data/####/1SUJNW3L3OL9G4A1FJWCGA31SNEC2NQC.dex.flock (deleted)
  • /data/data/####/2023-11-09AM103234.rt
  • /data/data/####/2023-11-09AM103234.str
  • /data/data/####/2023-11-09AM103242.so.rt
  • /data/data/####/2023-11-09AM103253.so.rt
  • /data/data/####/2023-11-09AM103302.so.rt
  • /data/data/####/2023-11-09AM103311.so.rt
  • /data/data/####/2023-11-09AM103320.so.rt
  • /data/data/####/2023-11-09AM103335.so.rt
  • /data/data/####/2023-11-09AM103344.so.rt
  • /data/data/####/20254QLY2G0NR8IAJ141QLH9YXAO3H7.dex (deleted)
  • /data/data/####/20254QLY2G0NR8IAJ141QLH9YXAO3H7.dex.flock (deleted)
  • /data/data/####/20254QLY2G0NR8IAJ141QLH9YXAO3H7.zip
  • /data/data/####/250035
  • /data/data/####/29
  • /data/data/####/2WMP4ATYES0VRCEA350TU5P5MLYSRLN.dex (deleted)
  • /data/data/####/2WMP4ATYES0VRCEA350TU5P5MLYSRLN.dex.flock (deleted)
  • /data/data/####/2WMP4ATYES0VRCEA350TU5P5MLYSRLN.zip
  • /data/data/####/3T7M5BQJJ5T4W9JJ0ELQVIUINENX8UK.dex (deleted)
  • /data/data/####/3T7M5BQJJ5T4W9JJ0ELQVIUINENX8UK.dex.flock (deleted)
  • /data/data/####/3T7M5BQJJ5T4W9JJ0ELQVIUINENX8UK.zip
  • /data/data/####/4GW14EJXRZTWMEE8ZCOAU7DDO3U5V3AB.dex
  • /data/data/####/4GW14EJXRZTWMEE8ZCOAU7DDO3U5V3AB.dex.flock (deleted)
  • /data/data/####/5VX0QLX0D3AZRQZKSVIDZBR9XMC9SB7B.dex
  • /data/data/####/5VX0QLX0D3AZRQZKSVIDZBR9XMC9SB7B.dex.flock (deleted)
  • /data/data/####/5ZLCVPCTPB7MYBTX2WZC5GOO1KLVYCQ.dex (deleted)
  • /data/data/####/5ZLCVPCTPB7MYBTX2WZC5GOO1KLVYCQ.dex.flock (deleted)
  • /data/data/####/5ZLCVPCTPB7MYBTX2WZC5GOO1KLVYCQ.zip
  • /data/data/####/6SJI5GOX9KJW27S1K2QO2ULCAE4V7IFR.dex
  • /data/data/####/6SJI5GOX9KJW27S1K2QO2ULCAE4V7IFR.dex.flock (deleted)
  • /data/data/####/7YA1Q2GTGDEP5Z24RIKB0E64DVYQ3I3C.dex
  • /data/data/####/7YA1Q2GTGDEP5Z24RIKB0E64DVYQ3I3C.dex.flock (deleted)
  • /data/data/####/9BP0MPLGD32J7U3S4N61FBRD1YOT4RZR.dex
  • /data/data/####/9BP0MPLGD32J7U3S4N61FBRD1YOT4RZR.dex.flock (deleted)
  • /data/data/####/9S0RCOAZYNOVBXCY9G2L2OSA7T04XO56.dex
  • /data/data/####/AKUHREAD6GR84F4H1SZUSO0A6VPE90C0.dex
  • /data/data/####/AKUHREAD6GR84F4H1SZUSO0A6VPE90C0.dex.flock (deleted)
  • /data/data/####/B8C8IQRMW3DNDZNDT82G713P018S05G.dex (deleted)
  • /data/data/####/B8C8IQRMW3DNDZNDT82G713P018S05G.dex.flock (deleted)
  • /data/data/####/B8C8IQRMW3DNDZNDT82G713P018S05G.zip
  • /data/data/####/B9V6SVR6BT45D4HAUDOJ91D3V4MNU9T5.dex
  • /data/data/####/CB9Y2ZAOEFG03BTGA2JFND28B6TZDU57.dex
  • /data/data/####/CB9Y2ZAOEFG03BTGA2JFND28B6TZDU57.dex.flock (deleted)
  • /data/data/####/CRLYYVQC2RK0ZF14IARRNP2CRITBXQHF.dex
  • /data/data/####/CRLYYVQC2RK0ZF14IARRNP2CRITBXQHF.dex.flock (deleted)
  • /data/data/####/CV1AQNUWMV80RB9CMQNJBTQ8VY539EXB.dex
  • /data/data/####/EK21NIIT6GJ8KJ85TKNISO0EAR1YLGKG.dex
  • /data/data/####/EK21NIIT6GJ8KJ85TKNISO0EAR1YLGKG.dex.flock (deleted)
  • /data/data/####/FPGJ6PXIM585B4HAHRBDVJ697NP4G7C4.dex
  • /data/data/####/FPGJ6PXIM585B4HAHRBDVJ697NP4G7C4.dex.flock (deleted)
  • /data/data/####/FT7YC7NQZTSXH4TEQPWRL1PRVO2JQPX9.dex
  • /data/data/####/FT7YC7NQZTSXH4TEQPWRL1PRVO2JQPX9.dex.flock (deleted)
  • /data/data/####/GA8ZYWNOSMMDPAOW1N6NK7VJ8F0U131.dex (deleted)
  • /data/data/####/GA8ZYWNOSMMDPAOW1N6NK7VJ8F0U131.dex.flock (deleted)
  • /data/data/####/GA8ZYWNOSMMDPAOW1N6NK7VJ8F0U131.zip
  • /data/data/####/GDFCW5XSLHZ4RNK7SY2QMQVFVZVU5ML7.dex
  • /data/data/####/GDFCW5XSLHZ4RNK7SY2QMQVFVZVU5ML7.dex.flock (deleted)
  • /data/data/####/GE8FYCZOGA659Q8W1JAFGNN3KRWQDF1.dex (deleted)
  • /data/data/####/GE8FYCZOGA659Q8W1JAFGNN3KRWQDF1.dex.flock (deleted)
  • /data/data/####/GE8FYCZOGA659Q8W1JAFGNN3KRWQDF1.zip
  • /data/data/####/GISNTO4JK6LEQTM7JAL02E24KDZSBYEU.dex
  • /data/data/####/GLRCCTD4TXFW7BKZO22IAQRVBBRMPQDN.dex
  • /data/data/####/GLRCCTD4TXFW7BKZO22IAQRVBBRMPQDN.dex.flock (deleted)
  • /data/data/####/IECPkgStoreInfo
  • /data/data/####/IR52IRRI3R9AXLAHAGK040H1PXH8JS71.dex
  • /data/data/####/IR52IRRI3R9AXLAHAGK040H1PXH8JS71.dex.flock (deleted)
  • /data/data/####/IZXIIF7AR7P2TPU9Q04SS0D1L9DGJWZX.dex
  • /data/data/####/JC6ZRSWVWO6FYYFUBD1LPDAIE2A1CT4Y.dex
  • /data/data/####/JC6ZRSWVWO6FYYFUBD1LPDAIE2A1CT4Y.dex.flock (deleted)
  • /data/data/####/JYWD1Q13LERRUYO7DDY6U81BYX8QOL8E.dex
  • /data/data/####/JYWD1Q13LERRUYO7DDY6U81BYX8QOL8E.dex.flock (deleted)
  • /data/data/####/KX55FJGRTSEWM08EAHV5SUWET69TXEL.dex (deleted)
  • /data/data/####/KX55FJGRTSEWM08EAHV5SUWET69TXEL.dex.flock (deleted)
  • /data/data/####/KX55FJGRTSEWM08EAHV5SUWET69TXEL.zip
  • /data/data/####/LO6J3SJ9R059C8YPNB4OG235OZE8M32K.dex
  • /data/data/####/LO6J3SJ9R059C8YPNB4OG235OZE8M32K.dex.flock (deleted)
  • /data/data/####/LP1Y938AKW2LJJZXWHXJ7K2Q9KVQ0CN4.dex
  • /data/data/####/LP1Y938AKW2LJJZXWHXJ7K2Q9KVQ0CN4.dex.flock (deleted)
  • /data/data/####/LYK9XQU96I0TO85WX7JNJ30OS40N6BEC.dex
  • /data/data/####/LYK9XQU96I0TO85WX7JNJ30OS40N6BEC.dex.flock (deleted)
  • /data/data/####/MJJBLX21ZYSE4IISCZ9R2SQK7CNR3WR.dex (deleted)
  • /data/data/####/MJJBLX21ZYSE4IISCZ9R2SQK7CNR3WR.dex.flock (deleted)
  • /data/data/####/MJJBLX21ZYSE4IISCZ9R2SQK7CNR3WR.zip
  • /data/data/####/NNR4ZPU0YM47PTDZMRV11UOG36TKQUXI.dex
  • /data/data/####/QCA1GYPYIWSFFO2M3DG1QHX5I5IGBTZ.zip
  • /data/data/####/QLDO1DV4F01S8YHJQHJYB1H7SUPPQTEJ.dex
  • /data/data/####/QLDO1DV4F01S8YHJQHJYB1H7SUPPQTEJ.dex.flock (deleted)
  • /data/data/####/RPFI1JAJZLLW0P3VKAXQBEAERMVPG6W.dex (deleted)
  • /data/data/####/RPFI1JAJZLLW0P3VKAXQBEAERMVPG6W.dex.flock (deleted)
  • /data/data/####/RPFI1JAJZLLW0P3VKAXQBEAERMVPG6W.zip
  • /data/data/####/RTFIHZMJN95OK57VKMLY7U2IJY75S2W.dex (deleted)
  • /data/data/####/RTFIHZMJN95OK57VKMLY7U2IJY75S2W.dex.flock (deleted)
  • /data/data/####/RTFIHZMJN95OK57VKMLY7U2IJY75S2W.zip
  • /data/data/####/S203HKG3K6DUAPIJ7IXSME20G1N8ZIMY.dex
  • /data/data/####/S203HKG3K6DUAPIJ7IXSME20G1N8ZIMY.dex.flock (deleted)
  • /data/data/####/TB987XGT5RZE2RD92SBC5C4KLS9N68I.dex (deleted)
  • /data/data/####/TB987XGT5RZE2RD92SBC5C4KLS9N68I.dex.flock (deleted)
  • /data/data/####/TB987XGT5RZE2RD92SBC5C4KLS9N68I.zip
  • /data/data/####/TJ9O7TKTH3JIM3H920JCXSO89GHZUW2.dex (deleted)
  • /data/data/####/TJ9O7TKTH3JIM3H920JCXSO89GHZUW2.dex.flock (deleted)
  • /data/data/####/TJ9O7TKTH3JIM3H920JCXSO89GHZUW2.zip
  • /data/data/####/U5R4O5CQG9AI91FACSHL9FOE5WZLBW35.dex
  • /data/data/####/U5R4O5CQG9AI91FACSHL9FOE5WZLBW35.dex.flock (deleted)
  • /data/data/####/UXNSS94U0H6IT9VQG4T5LN06XSN5ZOZH.dex
  • /data/data/####/UXNSS94U0H6IT9VQG4T5LN06XSN5ZOZH.dex.flock (deleted)
  • /data/data/####/V4EJFW43CKINYYFQ7511HDAQ2EUTO9K6.dex
  • /data/data/####/XF6X47FSWJUN9UNS7T5F95KFX5JMI9IY.dex
  • /data/data/####/XV1SML1013QBBUFCKFYTBB311IK9K73B.dex
  • /data/data/####/XY4P1IY9AAST4C5KP33BZ3GCWCGNIFMG.dex
  • /data/data/####/XY4P1IY9AAST4C5KP33BZ3GCWCGNIFMG.dex.flock (deleted)
  • /data/data/####/ZDV2KNVQBT4L1W9Y6TSNT1DVNGIJ6X9T.dex
  • /data/data/####/ZDV2KNVQBT4L1W9Y6TSNT1DVNGIJ6X9T.dex.flock (deleted)
  • /data/data/####/ZKIZ7GCNK4M7UMFMRHLDDD6IAY6TCXWE.dex
  • /data/data/####/ZKIZ7GCNK4M7UMFMRHLDDD6IAY6TCXWE.dex.flock (deleted)
  • /data/data/####/c90291e49a8ca82a3892ebfa338c7271ts99nb.zsjb
  • /data/data/####/c90291e49a8ca82a3892ebfa338c7271ts99nb.zsjb (deleted)
  • /data/data/####/com.android.launcher3.prefs.xml
  • /data/data/####/empty_classes.dex
  • /data/data/####/empty_classes.zip
  • /data/data/####/proc_auxv
  • /data/data/####/sealeh.bdc
  • /data/data/####/spUtils.xml
  • /data/data/####/working
Miscellaneous:
Executes the following shell scripts:
  • cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/20254QLY2G0NR8IAJ141QLH9YXAO3H7.zip
  • cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/5ZLCVPCTPB7MYBTX2WZC5GOO1KLVYCQ.zip
  • cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/B8C8IQRMW3DNDZNDT82G713P018S05G.zip
  • cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/GA8ZYWNOSMMDPAOW1N6NK7VJ8F0U131.zip
  • cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/GE8FYCZOGA659Q8W1JAFGNN3KRWQDF1.zip
  • cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/KX55FJGRTSEWM08EAHV5SUWET69TXEL.zip
  • cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/RPFI1JAJZLLW0P3VKAXQBEAERMVPG6W.zip
  • cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/RTFIHZMJN95OK57VKMLY7U2IJY75S2W.zip
  • cp /data/user/0/<Package>/app_payload_lib/empty_classes.zip /data/user/0/<Package>/app_payload_lib/<Package>_empty_classes/TJ9O7TKTH3JIM3H920JCXSO89GHZUW2.zip
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/1E85T2QT2EWD0KPW9F37VNS44WSN63YO.dex --oat-file=/data/user/0/<Package>/cache/<Package>/1E85T2QT2EWD0KPW9F37VNS44WSN63YO.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/1SUJNW3L3OL9G4A1FJWCGA31SNEC2NQC.dex --oat-file=/data/user/0/<Package>/cache/<Package>/1SUJNW3L3OL9G4A1FJWCGA31SNEC2NQC.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/4GW14EJXRZTWMEE8ZCOAU7DDO3U5V3AB.dex --oat-file=/data/user/0/<Package>/cache/<Package>/4GW14EJXRZTWMEE8ZCOAU7DDO3U5V3AB.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/5VX0QLX0D3AZRQZKSVIDZBR9XMC9SB7B.dex --oat-file=/data/user/0/<Package>/cache/<Package>/5VX0QLX0D3AZRQZKSVIDZBR9XMC9SB7B.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/6SJI5GOX9KJW27S1K2QO2ULCAE4V7IFR.dex --oat-file=/data/user/0/<Package>/cache/<Package>/6SJI5GOX9KJW27S1K2QO2ULCAE4V7IFR.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/7YA1Q2GTGDEP5Z24RIKB0E64DVYQ3I3C.dex --oat-file=/data/user/0/<Package>/cache/<Package>/7YA1Q2GTGDEP5Z24RIKB0E64DVYQ3I3C.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/9BP0MPLGD32J7U3S4N61FBRD1YOT4RZR.dex --oat-file=/data/user/0/<Package>/cache/<Package>/9BP0MPLGD32J7U3S4N61FBRD1YOT4RZR.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/9S0RCOAZYNOVBXCY9G2L2OSA7T04XO56.dex --oat-file=/data/user/0/<Package>/cache/<Package>/9S0RCOAZYNOVBXCY9G2L2OSA7T04XO56.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/AKUHREAD6GR84F4H1SZUSO0A6VPE90C0.dex --oat-file=/data/user/0/<Package>/cache/<Package>/AKUHREAD6GR84F4H1SZUSO0A6VPE90C0.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/B9V6SVR6BT45D4HAUDOJ91D3V4MNU9T5.dex --oat-file=/data/user/0/<Package>/cache/<Package>/B9V6SVR6BT45D4HAUDOJ91D3V4MNU9T5.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/CB9Y2ZAOEFG03BTGA2JFND28B6TZDU57.dex --oat-file=/data/user/0/<Package>/cache/<Package>/CB9Y2ZAOEFG03BTGA2JFND28B6TZDU57.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/CRLYYVQC2RK0ZF14IARRNP2CRITBXQHF.dex --oat-file=/data/user/0/<Package>/cache/<Package>/CRLYYVQC2RK0ZF14IARRNP2CRITBXQHF.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/CV1AQNUWMV80RB9CMQNJBTQ8VY539EXB.dex --oat-file=/data/user/0/<Package>/cache/<Package>/CV1AQNUWMV80RB9CMQNJBTQ8VY539EXB.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/EK21NIIT6GJ8KJ85TKNISO0EAR1YLGKG.dex --oat-file=/data/user/0/<Package>/cache/<Package>/EK21NIIT6GJ8KJ85TKNISO0EAR1YLGKG.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/FPGJ6PXIM585B4HAHRBDVJ697NP4G7C4.dex --oat-file=/data/user/0/<Package>/cache/<Package>/FPGJ6PXIM585B4HAHRBDVJ697NP4G7C4.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/FT7YC7NQZTSXH4TEQPWRL1PRVO2JQPX9.dex --oat-file=/data/user/0/<Package>/cache/<Package>/FT7YC7NQZTSXH4TEQPWRL1PRVO2JQPX9.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/GDFCW5XSLHZ4RNK7SY2QMQVFVZVU5ML7.dex --oat-file=/data/user/0/<Package>/cache/<Package>/GDFCW5XSLHZ4RNK7SY2QMQVFVZVU5ML7.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/GISNTO4JK6LEQTM7JAL02E24KDZSBYEU.dex --oat-file=/data/user/0/<Package>/cache/<Package>/GISNTO4JK6LEQTM7JAL02E24KDZSBYEU.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/GLRCCTD4TXFW7BKZO22IAQRVBBRMPQDN.dex --oat-file=/data/user/0/<Package>/cache/<Package>/GLRCCTD4TXFW7BKZO22IAQRVBBRMPQDN.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/IR52IRRI3R9AXLAHAGK040H1PXH8JS71.dex --oat-file=/data/user/0/<Package>/cache/<Package>/IR52IRRI3R9AXLAHAGK040H1PXH8JS71.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/IZXIIF7AR7P2TPU9Q04SS0D1L9DGJWZX.dex --oat-file=/data/user/0/<Package>/cache/<Package>/IZXIIF7AR7P2TPU9Q04SS0D1L9DGJWZX.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/JC6ZRSWVWO6FYYFUBD1LPDAIE2A1CT4Y.dex --oat-file=/data/user/0/<Package>/cache/<Package>/JC6ZRSWVWO6FYYFUBD1LPDAIE2A1CT4Y.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/JYWD1Q13LERRUYO7DDY6U81BYX8QOL8E.dex --oat-file=/data/user/0/<Package>/cache/<Package>/JYWD1Q13LERRUYO7DDY6U81BYX8QOL8E.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/LO6J3SJ9R059C8YPNB4OG235OZE8M32K.dex --oat-file=/data/user/0/<Package>/cache/<Package>/LO6J3SJ9R059C8YPNB4OG235OZE8M32K.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/LP1Y938AKW2LJJZXWHXJ7K2Q9KVQ0CN4.dex --oat-file=/data/user/0/<Package>/cache/<Package>/LP1Y938AKW2LJJZXWHXJ7K2Q9KVQ0CN4.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/LYK9XQU96I0TO85WX7JNJ30OS40N6BEC.dex --oat-file=/data/user/0/<Package>/cache/<Package>/LYK9XQU96I0TO85WX7JNJ30OS40N6BEC.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/NNR4ZPU0YM47PTDZMRV11UOG36TKQUXI.dex --oat-file=/data/user/0/<Package>/cache/<Package>/NNR4ZPU0YM47PTDZMRV11UOG36TKQUXI.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/QLDO1DV4F01S8YHJQHJYB1H7SUPPQTEJ.dex --oat-file=/data/user/0/<Package>/cache/<Package>/QLDO1DV4F01S8YHJQHJYB1H7SUPPQTEJ.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/S203HKG3K6DUAPIJ7IXSME20G1N8ZIMY.dex --oat-file=/data/user/0/<Package>/cache/<Package>/S203HKG3K6DUAPIJ7IXSME20G1N8ZIMY.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/U5R4O5CQG9AI91FACSHL9FOE5WZLBW35.dex --oat-file=/data/user/0/<Package>/cache/<Package>/U5R4O5CQG9AI91FACSHL9FOE5WZLBW35.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/UXNSS94U0H6IT9VQG4T5LN06XSN5ZOZH.dex --oat-file=/data/user/0/<Package>/cache/<Package>/UXNSS94U0H6IT9VQG4T5LN06XSN5ZOZH.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/V4EJFW43CKINYYFQ7511HDAQ2EUTO9K6.dex --oat-file=/data/user/0/<Package>/cache/<Package>/V4EJFW43CKINYYFQ7511HDAQ2EUTO9K6.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/XF6X47FSWJUN9UNS7T5F95KFX5JMI9IY.dex --oat-file=/data/user/0/<Package>/cache/<Package>/XF6X47FSWJUN9UNS7T5F95KFX5JMI9IY.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/XV1SML1013QBBUFCKFYTBB311IK9K73B.dex --oat-file=/data/user/0/<Package>/cache/<Package>/XV1SML1013QBBUFCKFYTBB311IK9K73B.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/XY4P1IY9AAST4C5KP33BZ3GCWCGNIFMG.dex --oat-file=/data/user/0/<Package>/cache/<Package>/XY4P1IY9AAST4C5KP33BZ3GCWCGNIFMG.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/ZDV2KNVQBT4L1W9Y6TSNT1DVNGIJ6X9T.dex --oat-file=/data/user/0/<Package>/cache/<Package>/ZDV2KNVQBT4L1W9Y6TSNT1DVNGIJ6X9T.dex --compiler-filter=verify-none --instruction-set=x86
  • dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/ZKIZ7GCNK4M7UMFMRHLDDD6IAY6TCXWE.dex --oat-file=/data/user/0/<Package>/cache/<Package>/ZKIZ7GCNK4M7UMFMRHLDDD6IAY6TCXWE.dex --compiler-filter=verify-none --instruction-set=x86
  • getprop ro.dalvik.vm.isa.arm
  • getprop ro.dalvik.vm.isa.arm64
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/1E85T2QT2EWD0KPW9F37VNS44WSN63YO.dex --oat-file=/data/user/0/<Package>/cache/<Package>/1E85T2QT2EWD0KPW9F37VNS44WSN63YO.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/1SUJNW3L3OL9G4A1FJWCGA31SNEC2NQC.dex --oat-file=/data/user/0/<Package>/cache/<Package>/1SUJNW3L3OL9G4A1FJWCGA31SNEC2NQC.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/4GW14EJXRZTWMEE8ZCOAU7DDO3U5V3AB.dex --oat-file=/data/user/0/<Package>/cache/<Package>/4GW14EJXRZTWMEE8ZCOAU7DDO3U5V3AB.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/5VX0QLX0D3AZRQZKSVIDZBR9XMC9SB7B.dex --oat-file=/data/user/0/<Package>/cache/<Package>/5VX0QLX0D3AZRQZKSVIDZBR9XMC9SB7B.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/6SJI5GOX9KJW27S1K2QO2ULCAE4V7IFR.dex --oat-file=/data/user/0/<Package>/cache/<Package>/6SJI5GOX9KJW27S1K2QO2ULCAE4V7IFR.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/7YA1Q2GTGDEP5Z24RIKB0E64DVYQ3I3C.dex --oat-file=/data/user/0/<Package>/cache/<Package>/7YA1Q2GTGDEP5Z24RIKB0E64DVYQ3I3C.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/9BP0MPLGD32J7U3S4N61FBRD1YOT4RZR.dex --oat-file=/data/user/0/<Package>/cache/<Package>/9BP0MPLGD32J7U3S4N61FBRD1YOT4RZR.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/9S0RCOAZYNOVBXCY9G2L2OSA7T04XO56.dex --oat-file=/data/user/0/<Package>/cache/<Package>/9S0RCOAZYNOVBXCY9G2L2OSA7T04XO56.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/AKUHREAD6GR84F4H1SZUSO0A6VPE90C0.dex --oat-file=/data/user/0/<Package>/cache/<Package>/AKUHREAD6GR84F4H1SZUSO0A6VPE90C0.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/B9V6SVR6BT45D4HAUDOJ91D3V4MNU9T5.dex --oat-file=/data/user/0/<Package>/cache/<Package>/B9V6SVR6BT45D4HAUDOJ91D3V4MNU9T5.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/CB9Y2ZAOEFG03BTGA2JFND28B6TZDU57.dex --oat-file=/data/user/0/<Package>/cache/<Package>/CB9Y2ZAOEFG03BTGA2JFND28B6TZDU57.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/CRLYYVQC2RK0ZF14IARRNP2CRITBXQHF.dex --oat-file=/data/user/0/<Package>/cache/<Package>/CRLYYVQC2RK0ZF14IARRNP2CRITBXQHF.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/CV1AQNUWMV80RB9CMQNJBTQ8VY539EXB.dex --oat-file=/data/user/0/<Package>/cache/<Package>/CV1AQNUWMV80RB9CMQNJBTQ8VY539EXB.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/EK21NIIT6GJ8KJ85TKNISO0EAR1YLGKG.dex --oat-file=/data/user/0/<Package>/cache/<Package>/EK21NIIT6GJ8KJ85TKNISO0EAR1YLGKG.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/FPGJ6PXIM585B4HAHRBDVJ697NP4G7C4.dex --oat-file=/data/user/0/<Package>/cache/<Package>/FPGJ6PXIM585B4HAHRBDVJ697NP4G7C4.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/FT7YC7NQZTSXH4TEQPWRL1PRVO2JQPX9.dex --oat-file=/data/user/0/<Package>/cache/<Package>/FT7YC7NQZTSXH4TEQPWRL1PRVO2JQPX9.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/GDFCW5XSLHZ4RNK7SY2QMQVFVZVU5ML7.dex --oat-file=/data/user/0/<Package>/cache/<Package>/GDFCW5XSLHZ4RNK7SY2QMQVFVZVU5ML7.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/GISNTO4JK6LEQTM7JAL02E24KDZSBYEU.dex --oat-file=/data/user/0/<Package>/cache/<Package>/GISNTO4JK6LEQTM7JAL02E24KDZSBYEU.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/GLRCCTD4TXFW7BKZO22IAQRVBBRMPQDN.dex --oat-file=/data/user/0/<Package>/cache/<Package>/GLRCCTD4TXFW7BKZO22IAQRVBBRMPQDN.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/IR52IRRI3R9AXLAHAGK040H1PXH8JS71.dex --oat-file=/data/user/0/<Package>/cache/<Package>/IR52IRRI3R9AXLAHAGK040H1PXH8JS71.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/IZXIIF7AR7P2TPU9Q04SS0D1L9DGJWZX.dex --oat-file=/data/user/0/<Package>/cache/<Package>/IZXIIF7AR7P2TPU9Q04SS0D1L9DGJWZX.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/JC6ZRSWVWO6FYYFUBD1LPDAIE2A1CT4Y.dex --oat-file=/data/user/0/<Package>/cache/<Package>/JC6ZRSWVWO6FYYFUBD1LPDAIE2A1CT4Y.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/JYWD1Q13LERRUYO7DDY6U81BYX8QOL8E.dex --oat-file=/data/user/0/<Package>/cache/<Package>/JYWD1Q13LERRUYO7DDY6U81BYX8QOL8E.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/LO6J3SJ9R059C8YPNB4OG235OZE8M32K.dex --oat-file=/data/user/0/<Package>/cache/<Package>/LO6J3SJ9R059C8YPNB4OG235OZE8M32K.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/LP1Y938AKW2LJJZXWHXJ7K2Q9KVQ0CN4.dex --oat-file=/data/user/0/<Package>/cache/<Package>/LP1Y938AKW2LJJZXWHXJ7K2Q9KVQ0CN4.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/LYK9XQU96I0TO85WX7JNJ30OS40N6BEC.dex --oat-file=/data/user/0/<Package>/cache/<Package>/LYK9XQU96I0TO85WX7JNJ30OS40N6BEC.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/NNR4ZPU0YM47PTDZMRV11UOG36TKQUXI.dex --oat-file=/data/user/0/<Package>/cache/<Package>/NNR4ZPU0YM47PTDZMRV11UOG36TKQUXI.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/QLDO1DV4F01S8YHJQHJYB1H7SUPPQTEJ.dex --oat-file=/data/user/0/<Package>/cache/<Package>/QLDO1DV4F01S8YHJQHJYB1H7SUPPQTEJ.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/S203HKG3K6DUAPIJ7IXSME20G1N8ZIMY.dex --oat-file=/data/user/0/<Package>/cache/<Package>/S203HKG3K6DUAPIJ7IXSME20G1N8ZIMY.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/U5R4O5CQG9AI91FACSHL9FOE5WZLBW35.dex --oat-file=/data/user/0/<Package>/cache/<Package>/U5R4O5CQG9AI91FACSHL9FOE5WZLBW35.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/UXNSS94U0H6IT9VQG4T5LN06XSN5ZOZH.dex --oat-file=/data/user/0/<Package>/cache/<Package>/UXNSS94U0H6IT9VQG4T5LN06XSN5ZOZH.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/V4EJFW43CKINYYFQ7511HDAQ2EUTO9K6.dex --oat-file=/data/user/0/<Package>/cache/<Package>/V4EJFW43CKINYYFQ7511HDAQ2EUTO9K6.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/XF6X47FSWJUN9UNS7T5F95KFX5JMI9IY.dex --oat-file=/data/user/0/<Package>/cache/<Package>/XF6X47FSWJUN9UNS7T5F95KFX5JMI9IY.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/XV1SML1013QBBUFCKFYTBB311IK9K73B.dex --oat-file=/data/user/0/<Package>/cache/<Package>/XV1SML1013QBBUFCKFYTBB311IK9K73B.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/XY4P1IY9AAST4C5KP33BZ3GCWCGNIFMG.dex --oat-file=/data/user/0/<Package>/cache/<Package>/XY4P1IY9AAST4C5KP33BZ3GCWCGNIFMG.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/ZDV2KNVQBT4L1W9Y6TSNT1DVNGIJ6X9T.dex --oat-file=/data/user/0/<Package>/cache/<Package>/ZDV2KNVQBT4L1W9Y6TSNT1DVNGIJ6X9T.dex --compiler-filter=verify-none --instruction-set=x86
  • sh -c dex2oat --dex-file=/data/user/0/<Package>/app_payload_lib/<Package>/ZKIZ7GCNK4M7UMFMRHLDDD6IAY6TCXWE.dex --oat-file=/data/user/0/<Package>/cache/<Package>/ZKIZ7GCNK4M7UMFMRHLDDD6IAY6TCXWE.dex --compiler-filter=verify-none --instruction-set=x86
Loads the following dynamic libraries:
  • libcovault-appsec
Uses special library to hide executable bytecode.
Gets information about network.
Gets information about installed apps.
Intercepts notifications.
Requests the system alert window permission.

Curing recommendations

Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android

Free trial

14 days

Download now
Get it on Google Play