Android.Locker.18055

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Locker.18030

Network activity:

Connects to:

UDP(DNS) 8####.8.4.4:53
UDP(DNS) <Google DNS>
TCP(TLS/1.0) f####.gst####.com:443
TCP(TLS/1.0) clie####.go####.com:443
TCP(TLS/1.0) p####.go####.com:443
TCP(TLS/1.0) 74.1####.131.94:443
TCP(TLS/1.0) p####.l.go####.com:443
TCP(TLS/1.0) www.google-####.com:443
TCP(TLS/1.0) gmscomp####.google####.com:443
TCP(TLS/1.0) www.go####.com:443
TCP(TLS/1.0) poli####.go####.com:443
TCP(TLS/1.0) www.googlet####.com:443
TCP(TLS/1.0) www.gst####.com:443
TCP(TLS/1.0) ssl.gst####.com:443
TCP(TLS/1.0) bea####.g####.com:443
TCP(TLS/1.2) 74.1####.131.94:443
TCP(TLS/1.2) gmscomp####.google####.com:443
TCP(TLS/1.2) 1####.177.14.104:443
UDP 1####.194.163.20:443
UDP 1####.250.150.102:443
UDP bea####.g####.com:443

DNS requests:

a####.go####.com
bea####.g####.com
clie####.go####.com
f####.gst####.com
gmscomp####.google####.com
p####.go####.com
poli####.go####.com
ssl.gst####.com
www.go####.com
www.google####.com
www.google-####.com
www.googlet####.com
www.gst####.com

File system changes:

Creates the following files:

/data/data/####/022e6dc111a09219_0
/data/data/####/02bd4343164e3790_0
/data/data/####/0438dc8034130bf8_0
/data/data/####/06230862a1973b8b_0
/data/data/####/0843c530198b089d_0 (deleted)
/data/data/####/0a442bcd88a8cbe2_0
/data/data/####/0a442bcd88a8cbe2_1
/data/data/####/0a51f9128f44eb21_0
/data/data/####/0cb255b0776af324_0
/data/data/####/1551f6ce48ddf59d_0
/data/data/####/15d76702721ef35f_0
/data/data/####/199040f7b05077e2_0
/data/data/####/19e95170a69459fc_0
/data/data/####/1aac33fd5e7456ea_0
/data/data/####/21758ee95b6e05ee_0
/data/data/####/2450400b01c84bbf_0 (deleted)
/data/data/####/251721d7b63a8a47_0
/data/data/####/25fb00d8b024508f_0
/data/data/####/278efebd2884a2ab_0
/data/data/####/284ad33c252a8912_0
/data/data/####/3eecc2c93713a2f0_0 (deleted)
/data/data/####/3f342656f3ecb04a_0 (deleted)
/data/data/####/3f4f2e3b8274261a_0
/data/data/####/416384fc7643b43e_0
/data/data/####/4656a7cd51f3fd38_0
/data/data/####/46a81d88e422db8f_0
/data/data/####/4de8569182e5f3e2_0 (deleted)
/data/data/####/554a100a4e479990_0
/data/data/####/554a100a4e479990_1
/data/data/####/554cabd5fc81e87e_0 (deleted)
/data/data/####/5560585cbaac49a1_0 (deleted)
/data/data/####/569dd8eac15df6ae_0
/data/data/####/5c0750770ec46056_0
/data/data/####/5ca50924ce3c5c59_0
/data/data/####/5ca50924ce3c5c59_0 (deleted)
/data/data/####/611d977572068313_0 (deleted)
/data/data/####/6c6246a16377b243_0
/data/data/####/6dc9a67115a2c034_0 (deleted)
/data/data/####/7c1c4fedd4544759_0
/data/data/####/7c1c4fedd4544759_1
/data/data/####/7e87e9da7c1e97ee_0
/data/data/####/7e87e9da7c1e97ee_1
/data/data/####/89d001276eda302a_0
/data/data/####/8b15706185e91d42_0 (deleted)
/data/data/####/8d6f9ceb2fd3e8f6_0
/data/data/####/8fe77473a5fd226d_0
/data/data/####/8fe77473a5fd226d_0 (deleted)
/data/data/####/8fe77473a5fd226d_1
/data/data/####/9352598e9c905689_0
/data/data/####/9352598e9c905689_1
/data/data/####/93754b2cd16b0cec_0
/data/data/####/978ae22210bf62c8_0
/data/data/####/99f6e6c7fa0274fd_0
/data/data/####/9d9b3839d534816d_0
/data/data/####/BRbQKortREdadE.dex
/data/data/####/BRbQKortREdadE.dex.flock (deleted)
/data/data/####/Cookies-journal
/data/data/####/FEfPw.dex
/data/data/####/FEfPw.dex.flock (deleted)
/data/data/####/KPlVNC.dex
/data/data/####/KPlVNC.dex.flock (deleted)
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/a4685011084915b5_0
/data/data/####/a76a8c2d1f62e2e6_0
/data/data/####/a860e8610df27291_0
/data/data/####/a9e62789089ad359_0
/data/data/####/aa0ff4f81e643730_0
/data/data/####/ac952f81ac50ea31_0
/data/data/####/ae175682a44f9987_0
/data/data/####/ae175682a44f9987_1
/data/data/####/b4a9ba0489903ae3_0
/data/data/####/b7f9426d1c7a8903_0 (deleted)
/data/data/####/c0ab3fe3c70525d1_0
/data/data/####/c0b4d93251d06538_0
/data/data/####/c0b4d93251d06538_1
/data/data/####/com.osbsovplt_preferences.xml
/data/data/####/d3b3f7b55fb5c0b6_0 (deleted)
/data/data/####/da343c7409b23e85_0 (deleted)
/data/data/####/dfb04b550f94b669_0
/data/data/####/e4c9beddf49c90f0_0
/data/data/####/e4c9beddf49c90f0_1
/data/data/####/e6a3c78b50808f04_0
/data/data/####/e8b0b8b77fb45ea1_0
/data/data/####/eddadac7c0dc2b6c_0
/data/data/####/ef4583423486b9e4_0
/data/data/####/f03627828e960b6a_0 (deleted)
/data/data/####/f5ed83c782025131_0
/data/data/####/f5ed83c782025131_1
/data/data/####/index
/data/data/####/metrics_guid
/data/data/####/rmMGkvze.dex
/data/data/####/rmMGkvze.dex.flock (deleted)
/data/data/####/the-real-index
/data/misc/####/primary.prof

Miscellaneous:

Gets information about network.

Displays its own windows over windows of other apps.

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical information

Curing recommendations

Free trial