Android.Locker.18046

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Locker.18030

Network activity:

Connects to:

UDP(DNS) <Google DNS>
TCP(TLS/1.0) sup####.go####.com:443
TCP(TLS/1.0) bea####.g####.com:443
TCP(TLS/1.0) 74.1####.131.94:443
TCP(TLS/1.0) lh3.googleu####.com:443
TCP(TLS/1.0) ssl.gst####.com:443
TCP(TLS/1.0) clie####.go####.com:443
TCP(TLS/1.0) gmscomp####.google####.com:443
TCP(TLS/1.0) www.google-####.com:443
TCP(TLS/1.0) p####.go####.com:443
TCP(TLS/1.0) www.gst####.com:443
TCP(TLS/1.0) acco####.go####.com:443
TCP(TLS/1.0) f####.gst####.com:443
TCP(TLS/1.0) www.googlet####.com:443
TCP(TLS/1.0) www.go####.com:443
TCP(TLS/1.0) p####.l.go####.com:443
TCP(TLS/1.2) 74.1####.131.94:443
TCP(TLS/1.2) gmscomp####.google####.com:443
TCP(TLS/1.2) 1####.177.14.147:443
UDP gmscomp####.google####.com:443
UDP rr2---s####.g####.com:443
UDP bea####.g####.com:443
UDP 1####.250.150.100:443

DNS requests:

a####.go####.com
acco####.go####.com
acco####.you####.com
bea####.g####.com
clie####.go####.com
f####.google####.com
f####.gst####.com
gmscomp####.google####.com
lh3.googleu####.com
p####.go####.com
p####.google####.com
rr2---s####.g####.com
ssl.gst####.com
sup####.go####.com
www.go####.com
www.google-####.com
www.googlet####.com
www.gst####.com

File system changes:

Creates the following files:

/data/data/####/0438dc8034130bf8_0
/data/data/####/0981e0d5e0ed59a6_0
/data/data/####/0981e0d5e0ed59a6_1
/data/data/####/0a5f3c01ee9748aa_0
/data/data/####/0a5f3c01ee9748aa_1
/data/data/####/15b1134ef197974d_0
/data/data/####/15b1134ef197974d_1
/data/data/####/1c0a675ef6e37c01_0
/data/data/####/1cf6ed6b02488268_0
/data/data/####/1e21853eee2f4d67_0
/data/data/####/1e21853eee2f4d67_1
/data/data/####/205305cafef2c5a4_0
/data/data/####/205305cafef2c5a4_1
/data/data/####/20c30e8721d55a78_0 (deleted)
/data/data/####/21c5865f73594172_0
/data/data/####/251721d7b63a8a47_0
/data/data/####/2940195bd9870d6e_0
/data/data/####/2940195bd9870d6e_1
/data/data/####/2b6a487cde4faa3e_0 (deleted)
/data/data/####/328fb38edac8770b_0
/data/data/####/34bb11d7163aeccd_0
/data/data/####/35816331d5320857_0
/data/data/####/3c1e3171623c129e_0
/data/data/####/3c1e3171623c129e_1
/data/data/####/3f4f2e3b8274261a_0
/data/data/####/4448463ed1b8fc0d_0
/data/data/####/49030b2a9b352c8c_0
/data/data/####/4ab2e2d4b6692064_0 (deleted)
/data/data/####/4d8740d0c2e529f7_0
/data/data/####/4f57a1fd8543a7b7_0
/data/data/####/4f73355a2a3d9aec_0 (deleted)
/data/data/####/518dc95c76ee976c_0
/data/data/####/56f62d7b3f365427_0 (deleted)
/data/data/####/5a0f634dde518028_0
/data/data/####/5b9e9a2acabbabb4_0
/data/data/####/5b9e9a2acabbabb4_1
/data/data/####/5ca50924ce3c5c59_0
/data/data/####/5ca50924ce3c5c59_0 (deleted)
/data/data/####/656d9aadcebc2540_0 (deleted)
/data/data/####/657cc2ed216c01cb_0
/data/data/####/670272cb97568b99_0
/data/data/####/693ac2ccc5e145f2_0
/data/data/####/6bd9dec512b748fa_0
/data/data/####/6deaddf9d87e5d15_0 (deleted)
/data/data/####/6e23fc3ed49b2da6_0
/data/data/####/742c5a1222e2178d_0
/data/data/####/742c5a1222e2178d_1
/data/data/####/7ee4fbe4f0b943b5_0
/data/data/####/7f641d0c9992e569_0
/data/data/####/7f641d0c9992e569_1
/data/data/####/855b0d240189692c_0
/data/data/####/855b0d240189692c_1
/data/data/####/86091827e06e4a7e_0 (deleted)
/data/data/####/8729c649f296d5fe_0
/data/data/####/89d001276eda302a_0
/data/data/####/8f19ee5b9a988ec1_0
/data/data/####/8f19ee5b9a988ec1_1
/data/data/####/8f230b2672bd3972_0
/data/data/####/92843c5162b5e017_0 (deleted)
/data/data/####/93754b2cd16b0cec_0
/data/data/####/93dbf0f5df3ca22b_0 (deleted)
/data/data/####/9789f10566335034_0
/data/data/####/97f2f8e7bb074ab9_0
/data/data/####/999d05f61041ef2b_0
/data/data/####/999d05f61041ef2b_1
/data/data/####/9b2ac8caef7bcf62_0 (deleted)
/data/data/####/Cookies-journal
/data/data/####/HOyfLzMMh.dex
/data/data/####/HOyfLzMMh.dex.flock (deleted)
/data/data/####/QizvEXJiiteZb.dex
/data/data/####/QizvEXJiiteZb.dex.flock (deleted)
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/a8171ce2f143f853_0
/data/data/####/a8171ce2f143f853_1
/data/data/####/a9eefe0f678e7231_0
/data/data/####/aa74225e9c31802e_0
/data/data/####/aa9c119eb6ba902f_0
/data/data/####/ac952f81ac50ea31_0
/data/data/####/b07f29799c693400_0 (deleted)
/data/data/####/b40e211a8a7c14bb_0
/data/data/####/b40e211a8a7c14bb_1
/data/data/####/b645812c59c26982_0
/data/data/####/b645812c59c26982_1
/data/data/####/b748a43399040329_0
/data/data/####/ba1c33eef54dda0b_0
/data/data/####/c0b4d93251d06538_0
/data/data/####/c6a7dab71a38df61_0 (deleted)
/data/data/####/ca03f35b20f50d35_0
/data/data/####/com.scdtp_preferences.xml
/data/data/####/d214f8d300329c91_0
/data/data/####/d4da87c98d403eb3_0
/data/data/####/dd97558d84001923_0
/data/data/####/ddfe99c6d3191912_0 (deleted)
/data/data/####/dfb04b550f94b669_0
/data/data/####/e0afda9e69c6df1b_0 (deleted)
/data/data/####/e3acfe733b3abbd7_0
/data/data/####/e3de1c6c8ebf0c40_0
/data/data/####/e4be4dfd921799c0_0
/data/data/####/e7e8829499da333f_0
/data/data/####/e80f7044d4f41c80_0
/data/data/####/e81bc20cbf76effe_0
/data/data/####/edca8e2828235fff_0
/data/data/####/edca8e2828235fff_1
/data/data/####/eddadac7c0dc2b6c_0
/data/data/####/ef93196f425093b1_0
/data/data/####/ef93196f425093b1_1
/data/data/####/f11c35c5ceb8d6f7_0 (deleted)
/data/data/####/f1a1a4212ae5618d_0
/data/data/####/f554859bc5ce3d24_0
/data/data/####/f554859bc5ce3d24_1
/data/data/####/f68c7de2bee7612b_0
/data/data/####/f75bb25b20d58db7_0
/data/data/####/f7db3146e7dacf22_0 (deleted)
/data/data/####/ff58e76abd2b734c_0 (deleted)
/data/data/####/fsNdwYAbO.dex
/data/data/####/fsNdwYAbO.dex.flock (deleted)
/data/data/####/index
/data/data/####/metrics_guid
/data/data/####/the-real-index
/data/data/####/xLgpGZdRklY.dex
/data/data/####/xLgpGZdRklY.dex.flock (deleted)
/data/misc/####/primary.prof

Miscellaneous:

Accesses camera interface.

Gets information about network.

Displays its own windows over windows of other apps.

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical information

Curing recommendations

Free trial