マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話

03-6550-8770

Profile

Android.Locker.17898

Added to the Dr.Web virus database: 2024-02-27

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.1474.origin
Network activity:
Connects to:
  • UDP(DNS) <Google DNS>
  • TCP(HTTP/1.1) 1####.177.14.94:80
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.0) rr2---s####.g####.com:443
  • TCP(TLS/1.0) v####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) rr18---####.g####.com:443
  • TCP(TLS/1.0) st####.vk.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) ei.ph####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) a####.vk.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) u####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) sun####.use####.com:443
  • TCP(TLS/1.0) l####.vk.com:443
  • TCP(TLS/1.0) www.moz####.org:443
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) analy####.go####.com:443
  • TCP(TLS/1.0) 2####.85.233.105:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.2) p####.google####.com:443
  • TCP(TLS/1.2) 1####.177.14.94:443
  • TCP(TLS/1.2) 2####.85.233.105:443
  • UDP p####.google####.com:443
DNS requests:
  • a####.vk.com
  • a####.vk.com
  • analy####.go####.com
  • and####.a####.go####.com
  • and####.google####.com
  • cdn1-sm####.ph####.com
  • ei.ph####.com
  • h####.por####.com
  • i####.vk.com
  • l####.vk.com
  • m####.go####.com
  • m####.traffic####.net
  • o####.vk.com
  • p####.google####.com
  • pla####.google####.com
  • rr18---####.g####.com
  • rr2---s####.g####.com
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.vk.com
  • st####.vk.com
  • sto####.google####.com
  • sun####.use####.com
  • sun####.use####.com
  • sun####.use####.com
  • u####.com
  • v####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.moz####.org
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/00369b2372c3b0ab_0
  • /data/data/####/00b8f7dd06b5077f_0
  • /data/data/####/0120613e7e1b9e9e_0
  • /data/data/####/0381e936a2ac8f76_0
  • /data/data/####/03b7ee915ae187c2_0
  • /data/data/####/03b7ee915ae187c2_1
  • /data/data/####/05440000e52aa662_0
  • /data/data/####/061badfbd3b5688c_0
  • /data/data/####/069a5c625065e11e_0
  • /data/data/####/08bad464fac8ba84_0
  • /data/data/####/091770d4d798b659_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0b2bc8b0bff4046b_0
  • /data/data/####/10685c165a06c800_0
  • /data/data/####/11d75f4536d7ed49_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/1427f394c4faa321_0
  • /data/data/####/14737f7936738885_0
  • /data/data/####/14737f7936738885_1
  • /data/data/####/1575267bfede8df6_0
  • /data/data/####/16617c68ec9d81d1_0
  • /data/data/####/18163e1fea61a0bc_0 (deleted)
  • /data/data/####/190befb1981f8e0d_0
  • /data/data/####/1916ce230d9ae4c4_0
  • /data/data/####/19d46eab8df0160a_0
  • /data/data/####/1ad27118d8de3c05_0
  • /data/data/####/1c92ea2c403963f4_0
  • /data/data/####/1e564f9115c6fc3a_0
  • /data/data/####/1fda99d0c2eaf8cb_0
  • /data/data/####/1fda99d0c2eaf8cb_1
  • /data/data/####/1ff7540fbe13e6d5_0
  • /data/data/####/21c7f7fc7e631516_0
  • /data/data/####/21ce195dccfd36ec_0
  • /data/data/####/2325d324e5394243_0
  • /data/data/####/24f715c4160e833c_0
  • /data/data/####/25553bdabf0c6377_0
  • /data/data/####/25a65c60fdd6f9cd_0
  • /data/data/####/262747655af4e1a2_0
  • /data/data/####/27395953b2d9a75b_0
  • /data/data/####/28b03359107e5449_0
  • /data/data/####/29089785c93e7f29_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2a0c3fcedeae85bc_0
  • /data/data/####/2a6ca247fa9f12c4_0
  • /data/data/####/2b0035da5184a815_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d96046052518110_0
  • /data/data/####/2df8d0d97066ac17_0
  • /data/data/####/2e1db4164ee011b1_0
  • /data/data/####/3237573c19e48ca6_0
  • /data/data/####/32984d53fb3ee147_0
  • /data/data/####/32f52bf0cf16aa82_0
  • /data/data/####/32f52bf0cf16aa82_1
  • /data/data/####/35ac961ce5f0b4ad_0
  • /data/data/####/35bf96d01f06d2ea_0
  • /data/data/####/364a73326704d328_0
  • /data/data/####/3925ecd083066232_0
  • /data/data/####/395c8c1989687fba_0
  • /data/data/####/395c8c1989687fba_1
  • /data/data/####/39bc83969d9b21f3_0
  • /data/data/####/39ce8432e8aaef0a_0
  • /data/data/####/3b1be2d497c0f0ca_0
  • /data/data/####/3c758612d4bb6869_0
  • /data/data/####/3e0246bb96309f4d_0 (deleted)
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3ec369bd04e204b1_0
  • /data/data/####/426cb0532a69c401_0
  • /data/data/####/437af97f4abb0d93_0
  • /data/data/####/461b605a9f07e4d2_0
  • /data/data/####/470625dc55e7c35c_0
  • /data/data/####/470625dc55e7c35c_1
  • /data/data/####/484cbfc2acf20a56_0
  • /data/data/####/493761c101e046ad_0
  • /data/data/####/49823fd20ede006f_0
  • /data/data/####/4a00165ecf08dd7b_0
  • /data/data/####/4aeef1ee327c720a_0
  • /data/data/####/4bff818002da8b8e_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4cd63208fe1bec69_0
  • /data/data/####/4e6c9c5de2b05a16_0
  • /data/data/####/4e6c9c5de2b05a16_1
  • /data/data/####/4ed0070704a56e97_0
  • /data/data/####/50716d656825c42f_0
  • /data/data/####/50716d656825c42f_1
  • /data/data/####/50e603298986a2d7_0
  • /data/data/####/50eeaf1dce64976f_0
  • /data/data/####/510f71cd9c7779da_0
  • /data/data/####/51aab144fd4c72aa_0
  • /data/data/####/52a258660ba501e8_0
  • /data/data/####/5353442916569a3d_0
  • /data/data/####/54f26f48eab0d5fc_0
  • /data/data/####/55ec52b39e8a95cc_0
  • /data/data/####/565370670c2d6584_0
  • /data/data/####/57c3ac5ac21c6bde_0 (deleted)
  • /data/data/####/58370b34293acd35_0
  • /data/data/####/587a904fcab15ca4_0
  • /data/data/####/596302fe15a7a536_0
  • /data/data/####/59e790cd6bdfa3fa_0
  • /data/data/####/5a32e8d220b9d271_0
  • /data/data/####/5a362d9b0a420c23_0
  • /data/data/####/5abfffd6a1bde54c_0
  • /data/data/####/5b86313417ca7d85_0
  • /data/data/####/5ea993c08481f90f_0
  • /data/data/####/5fd7b2682d32925b_0
  • /data/data/####/60a339ef7a67b3f8_0
  • /data/data/####/61b3daf73b6785a4_0
  • /data/data/####/61cce02189a16835_0
  • /data/data/####/61fca1f03778be6f_0 (deleted)
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/62f41d8a03f269ec_0
  • /data/data/####/65ff086d32d6e49e_0
  • /data/data/####/66d50e248d0d1655_0
  • /data/data/####/66f53875ef135f74_0
  • /data/data/####/6805047cae7a24e9_0
  • /data/data/####/68fd11a65b74b9ae_0
  • /data/data/####/6953cd2c2747dc1b_0
  • /data/data/####/6b419e241eb6bc22_0
  • /data/data/####/6c6f27013d90159e_0
  • /data/data/####/6caa664d1007738d_0
  • /data/data/####/6caa664d1007738d_1
  • /data/data/####/6d2b1920660b91a3_0
  • /data/data/####/6e0e23e53f833ebd_0
  • /data/data/####/6e0e23e53f833ebd_1
  • /data/data/####/6e105ff04046ef03_0
  • /data/data/####/6f08ad13925063fd_0
  • /data/data/####/6fd6807fb165ae3e_0
  • /data/data/####/70fc6d057ae6906b_0
  • /data/data/####/723087d2448516ba_0
  • /data/data/####/76647192323304fb_0
  • /data/data/####/77374361d39c1314_0
  • /data/data/####/779c781cb2f15909_0
  • /data/data/####/77e134f23821b8c2_0
  • /data/data/####/787ab38f55ac8254_0
  • /data/data/####/78c221dccd0d7724_0
  • /data/data/####/7a96cacd2c727f25_0 (deleted)
  • /data/data/####/7b1e9a9c9af67558_0
  • /data/data/####/7d3b42c87e450644_0 (deleted)
  • /data/data/####/7e48091a74668621_0
  • /data/data/####/8266a9b8d6ab6740_0
  • /data/data/####/83675832e3275c21_0
  • /data/data/####/84220ea7ea3e7c22_0
  • /data/data/####/84220ea7ea3e7c22_1
  • /data/data/####/85b72377ed52fcd0_0
  • /data/data/####/8650098de520e6e2_0
  • /data/data/####/8650098de520e6e2_1
  • /data/data/####/86fc20ad43216557_0
  • /data/data/####/8748a0a1730238e2_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/891fd20f14d58a4f_0
  • /data/data/####/891fd20f14d58a4f_1
  • /data/data/####/8db8dc210c0ff1f5_0
  • /data/data/####/8decd361b512a5d4_0
  • /data/data/####/8e1c501fb1f59544_0
  • /data/data/####/8e31c504ed8de3ee_0
  • /data/data/####/9185ce3efc9e60c7_0
  • /data/data/####/9185ce3efc9e60c7_1
  • /data/data/####/9333ff9157770714_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/94351465850cfa45_0
  • /data/data/####/95730d6ea21cb07a_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/973aba2de687111d_0
  • /data/data/####/97426091275c0932_0
  • /data/data/####/97baf7eb440521df_0
  • /data/data/####/98e9d0392e977a49_0
  • /data/data/####/98e9d0392e977a49_1
  • /data/data/####/991a0dbe7bbb6eaf_0
  • /data/data/####/992a44c9b39a3167_0
  • /data/data/####/99c3af887efffff3_0
  • /data/data/####/99c3af887efffff3_1
  • /data/data/####/9acdbc24d8aef725_0
  • /data/data/####/9ca6b3e8794411bb_0 (deleted)
  • /data/data/####/9d2bd6bcc63cb4c6_0
  • /data/data/####/9d2bd6bcc63cb4c6_1
  • /data/data/####/9d81be1b187197df_0
  • /data/data/####/9dbf72428897c6ae_0
  • /data/data/####/9e4172f0304cd865_0
  • /data/data/####/9f671080ecea2027_0 (deleted)
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/LlrzL.dex
  • /data/data/####/LlrzL.dex.flock (deleted)
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/TYsOZVt.dex
  • /data/data/####/TYsOZVt.dex.flock (deleted)
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a0e9fe2d54452a8b_0
  • /data/data/####/a0e9fe2d54452a8b_1
  • /data/data/####/a16ffdbc7d03d945_0
  • /data/data/####/a193c4fb02f99235_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a218df48313a8e86_0
  • /data/data/####/a261fcecba5d2bb0_0
  • /data/data/####/a29edc4312d19735_0
  • /data/data/####/a39e89947649e80a_0
  • /data/data/####/a407375092d88fa0_0
  • /data/data/####/a42056baa0656812_0
  • /data/data/####/a4bf408dc0c9b1da_0
  • /data/data/####/a50a58c05518ff09_0
  • /data/data/####/a97da596e5214df1_0
  • /data/data/####/a985a62634a7ca4d_0
  • /data/data/####/abb8f191b3f0a28f_0
  • /data/data/####/abbcc4b881611e8a_0
  • /data/data/####/abbcc4b881611e8a_1
  • /data/data/####/ae15be0c0612b675_0
  • /data/data/####/ae15be0c0612b675_1
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/af2bb85b46e8274b_0
  • /data/data/####/afacc5a1f8b44a4d_0
  • /data/data/####/b1131bf47a91839b_0
  • /data/data/####/b1c7f1b88813249e_0
  • /data/data/####/b411acd3c3a002b5_0
  • /data/data/####/b4b9d41aabc22b7f_0
  • /data/data/####/b4e027af00b129d7_0
  • /data/data/####/b5e0177f9859b25a_0
  • /data/data/####/b69d68cd657c0dbf_0
  • /data/data/####/b6bd42b000f0c269_0
  • /data/data/####/b753e09f65078598_0
  • /data/data/####/b75b20330d43a2c4_0
  • /data/data/####/b75b20330d43a2c4_1
  • /data/data/####/b7b12de429e59bd2_0
  • /data/data/####/b96bc89439b7a208_0
  • /data/data/####/b96bc89439b7a208_1
  • /data/data/####/b97521682eb94942_0
  • /data/data/####/bd46d2905ffc2693_0
  • /data/data/####/be97427b03d8575a_0
  • /data/data/####/c0e33870be91027a_0
  • /data/data/####/c0ff0da31d0bd76b_0
  • /data/data/####/c1910939851e90e5_0
  • /data/data/####/c1e1e904fa99215d_0
  • /data/data/####/c3e3920d23c036cd_0
  • /data/data/####/c40ae9022a563e90_0
  • /data/data/####/c44cab55ddc2e030_0
  • /data/data/####/c57b6524763fe785_0
  • /data/data/####/c79c9239d679db06_0
  • /data/data/####/c79c9239d679db06_1
  • /data/data/####/c8887371991d4786_0
  • /data/data/####/c8887371991d4786_1
  • /data/data/####/cabdc788a3f7bd0e_0
  • /data/data/####/cbe2e83e19827d3a_0
  • /data/data/####/cbe2e83e19827d3a_1
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/ccfc4f0c599a0cbb_0
  • /data/data/####/ccfc4f0c599a0cbb_1
  • /data/data/####/cdf8481fa6f29188_0
  • /data/data/####/com.gyzcnjxl_preferences.xml
  • /data/data/####/d085f3c57d1ed7bc_0
  • /data/data/####/d20e7f14f25b7f12_0
  • /data/data/####/d34edf1a26f80612_0
  • /data/data/####/d51d7ddead35300b_0
  • /data/data/####/d621b7ea66da5154_0 (deleted)
  • /data/data/####/d7673a05a71dc314_0
  • /data/data/####/d88815942cd67deb_0
  • /data/data/####/d9a79b867afccd74_0
  • /data/data/####/dc7b71b8d85535fe_0
  • /data/data/####/dd6e3b71eba3122a_0
  • /data/data/####/e04ecf0bca57320a_0
  • /data/data/####/e13e12e5bc96df03_0
  • /data/data/####/e372bcc226f82f98_0
  • /data/data/####/e387224f727e1f99_0
  • /data/data/####/e46b66839dd42587_0
  • /data/data/####/e5c64e3ecb2a2d37_0
  • /data/data/####/e806216886e62626_0
  • /data/data/####/e950ef3fbdbd52e0_0
  • /data/data/####/e9c70adfe74fc017_0
  • /data/data/####/e9ca2d40da193432_0
  • /data/data/####/e9ca2d40da193432_1
  • /data/data/####/ea69cb9789404a65_0
  • /data/data/####/ebaffa99109cd941_0
  • /data/data/####/ebaffa99109cd941_1
  • /data/data/####/ed4299ffc327bbb8_0
  • /data/data/####/eda5e5515682fd6f_0
  • /data/data/####/eec01e95e8fc1bf9_0
  • /data/data/####/efaa84a349184ced_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f02069e5d4e57980_0
  • /data/data/####/f0ae46162720beba_0
  • /data/data/####/f1a0696347a2a23c_0
  • /data/data/####/f1a85c4e08d84037_0
  • /data/data/####/f1a85c4e08d84037_1
  • /data/data/####/f3de2c2ecb8b05e5_0
  • /data/data/####/f3de2c2ecb8b05e5_1
  • /data/data/####/f4054210640aa99f_0
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/fa856ed3b2748e20_0
  • /data/data/####/fa9f60c3b377f902_0
  • /data/data/####/fa9f60c3b377f902_1
  • /data/data/####/fbac7087b39ac0ba_0
  • /data/data/####/fc4c0b65fd166434_0
  • /data/data/####/fcd446484566d099_0
  • /data/data/####/fd26c2a8b4be1aab_0
  • /data/data/####/fd6f88466b3ac2f0_0
  • /data/data/####/fe37d48f44eaecea_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff14810e38bf4ce6_0
  • /data/data/####/ff38297fc4ec9e9b_0
  • /data/data/####/ffde0d1431324547_0
  • /data/data/####/index
  • /data/data/####/jTDNXLDn.dex
  • /data/data/####/jTDNXLDn.dex.flock (deleted)
  • /data/data/####/metrics_guid
  • /data/data/####/the-real-index
  • /data/data/####/zMayPZMbFAdbHP.dex
  • /data/data/####/zMayPZMbFAdbHP.dex.flock (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android