Android.Locker.18062

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Locker.18030

Network activity:

Connects to:

UDP(DNS) <Google DNS>
TCP(TLS/1.0) googl####.g.doublec####.net:443
TCP(TLS/1.0) www.googlet####.com:443
TCP(TLS/1.0) lh3.googleu####.com:443
TCP(TLS/1.0) analy####.go####.com:443
TCP(TLS/1.0) skill####.excee####.com:443
TCP(TLS/1.0) gmscomp####.google####.com:443
TCP(TLS/1.0) www.google-####.com:443
TCP(TLS/1.0) ssl.gst####.com:443
TCP(TLS/1.0) f####.gst####.com:443
TCP(TLS/1.0) www.go####.ru:443
TCP(TLS/1.0) ad.doublec####.net:443
TCP(TLS/1.0) www.ru.adverti####.com:443
TCP(TLS/1.0) 64.2####.165.94:443
TCP(TLS/1.0) www.go####.com:443
TCP(TLS/1.0) adser####.go####.com:443
TCP(TLS/1.0) ads.go####.com:443
TCP(TLS/1.0) www.gst####.com:443
TCP(TLS/1.0) s####.g.doublec####.net:443
TCP(TLS/1.0) sto####.google####.com:443
TCP(TLS/1.2) gmscomp####.google####.com:443
TCP(TLS/1.2) 1####.177.14.147:443
TCP(TLS/1.2) 64.2####.165.94:443
UDP rr1---s####.g####.com:443
UDP 1####.194.163.20:443
UDP gmscomp####.google####.com:443
UDP 74.1####.131.138:443

DNS requests:

ad.doublec####.net
ads.go####.com
adser####.go####.com
analy####.go####.com
clie####.go####.com
f####.google####.com
f####.gst####.com
gmscomp####.google####.com
googl####.g.doublec####.net
lh3.googleu####.com
rr1---s####.g####.com
s####.g.doublec####.net
skill####.excee####.com
ssl.gst####.com
sto####.google####.com
sup####.go####.com
www.go####.com
www.go####.ru
www.google-####.com
www.googlet####.com
www.gst####.com
www.ru.adverti####.com

File system changes:

Creates the following files:

/data/data/####/01636d6919b4539f_0
/data/data/####/01636d6919b4539f_1
/data/data/####/03f720aaf2dc80a7_0
/data/data/####/03f720aaf2dc80a7_1
/data/data/####/0438dc8034130bf8_0
/data/data/####/05bda0ba174e5486_0
/data/data/####/0a782883de6f315a_0
/data/data/####/0f41f7a32115de76_0
/data/data/####/10efb2a2ea0ef6b1_0
/data/data/####/10f11689162aadb0_0
/data/data/####/1491926ef83f3e53_0
/data/data/####/1491926ef83f3e53_1
/data/data/####/172929e4f5ece764_0
/data/data/####/172929e4f5ece764_1
/data/data/####/187b687851d606d1_0 (deleted)
/data/data/####/19678fbdbcb1703d_0
/data/data/####/1aedcd8ff06e75ec_0
/data/data/####/1bf0c94226cdee5c_0
/data/data/####/1cc584c07f515bb6_0 (deleted)
/data/data/####/1e63e99843fc27b6_0
/data/data/####/1f2b7c2255075e65_0
/data/data/####/1f6a1eca7dd7afbf_0
/data/data/####/20da6e42038135d1_0
/data/data/####/20da6e42038135d1_1
/data/data/####/251721d7b63a8a47_0
/data/data/####/2940195bd9870d6e_0
/data/data/####/2940195bd9870d6e_1
/data/data/####/29ce6305a18a7cc3_0
/data/data/####/29dfe13408243c4f_0 (deleted)
/data/data/####/2a09095d3285c142_0
/data/data/####/35a5906122b958d7_0
/data/data/####/36d5c5f535839b76_0
/data/data/####/375ba61044129ee0_0 (deleted)
/data/data/####/414dde53e169e2f0_0
/data/data/####/4395dd2c2e62b348_0
/data/data/####/457fe3ddba7c7297_0
/data/data/####/461fe3ed286aa695_0 (deleted)
/data/data/####/4add2bbdec1553bf_0
/data/data/####/4b2e2747fe8c8c90_0
/data/data/####/4bf52e32a8c7fab5_0
/data/data/####/4bf52e32a8c7fab5_1
/data/data/####/526fa33409b2a63c_0
/data/data/####/52f1f1a06c631784_0
/data/data/####/54fd0f200d0e7cc5_0
/data/data/####/54fd0f200d0e7cc5_1
/data/data/####/557a5f31a410240f_0
/data/data/####/57036a89de8a8ccd_0
/data/data/####/57036a89de8a8ccd_1
/data/data/####/5a24873f5fc3a4d7_0 (deleted)
/data/data/####/5a58b4e7cac3348f_0
/data/data/####/5ca50924ce3c5c59_0
/data/data/####/5ca50924ce3c5c59_0 (deleted)
/data/data/####/61c2dc7f7b3a7a4e_0
/data/data/####/641e9fc48de3393e_0
/data/data/####/642b5d0817541d9c_0
/data/data/####/66133b1fbcf4a736_0 (deleted)
/data/data/####/70865daba2f3ced8_0
/data/data/####/73b84185c3ef1a40_0 (deleted)
/data/data/####/743d68c99fa82299_0
/data/data/####/75f93fc675bf5b13_0
/data/data/####/7fd09ab67efe1d9a_0
/data/data/####/80e54dad6ad6e445_0
/data/data/####/810d9b14e493aeb8_0
/data/data/####/837ece5a6f7d72b6_0 (deleted)
/data/data/####/84a253482cfba8d9_0
/data/data/####/874438f87278fbb6_0 (deleted)
/data/data/####/884ef0060103fc2a_0
/data/data/####/89a80e39b6fab4c9_0
/data/data/####/8df432ed3edd1e56_0
/data/data/####/8fd826758d7b4ae7_0
/data/data/####/91e53b97bd36874f_0 (deleted)
/data/data/####/93754b2cd16b0cec_0
/data/data/####/959222823a969e23_0
/data/data/####/9835e8eddd08cb5a_0
/data/data/####/994b5eab4668fdc7_0 (deleted)
/data/data/####/9982c5faafa822f3_0
/data/data/####/9b2ecf42b9ad13c9_0
/data/data/####/9bd3851cd907273c_0
/data/data/####/9e6fa965ffc1723c_0
/data/data/####/Cookies-journal
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/WmHdsEXoO.dex
/data/data/####/WmHdsEXoO.dex.flock (deleted)
/data/data/####/ZKnInZJWakx.dex
/data/data/####/ZKnInZJWakx.dex.flock (deleted)
/data/data/####/a15613031485b429_0
/data/data/####/a8f5de57ffcda9d0_0
/data/data/####/ac952f81ac50ea31_0
/data/data/####/b4ca45df16190d27_0 (deleted)
/data/data/####/b80ae40188ca2af5_0
/data/data/####/b8b990a8139c0687_0
/data/data/####/b8b990a8139c0687_0 (deleted)
/data/data/####/b99016d3d1ae81b0_0
/data/data/####/b99016d3d1ae81b0_1
/data/data/####/bb0b67d7a7a33f9a_0
/data/data/####/boVcp.dex
/data/data/####/boVcp.dex.flock (deleted)
/data/data/####/c218d48bfc5faee6_0 (deleted)
/data/data/####/c291b6fe5e6c5b70_0
/data/data/####/c4f384dcc558d632_0
/data/data/####/cb6bfe10e458291b_0
/data/data/####/cdfbca33a7f406b9_0
/data/data/####/ced5b4648529bff0_0
/data/data/####/com.zzpvq_preferences.xml
/data/data/####/d2346bb100c0fd2b_0 (deleted)
/data/data/####/d4f2ba52196da2e8_0
/data/data/####/d9515c7caee70bc1_0
/data/data/####/daee12a8b6fd6e6f_0
/data/data/####/dd68e26a61bbfe09_0
/data/data/####/dfb04b550f94b669_0
/data/data/####/e3538071db9b31bb_0
/data/data/####/e3538071db9b31bb_1
/data/data/####/e5f9ee0e0fb5db3c_0
/data/data/####/e8bd18ece6a2cb24_0
/data/data/####/ebc7570b70ddc600_0
/data/data/####/ebc7570b70ddc600_1
/data/data/####/ed07c97be5dbb67d_0
/data/data/####/ed07c97be5dbb67d_1
/data/data/####/f1d5e8ffdc27d92e_0 (deleted)
/data/data/####/f68c7de2bee7612b_0
/data/data/####/f75bb25b20d58db7_0
/data/data/####/f8039ce9b1072982_0
/data/data/####/f8039ce9b1072982_1
/data/data/####/f8f221bdbc6f04f7_0
/data/data/####/f946b546aa18f605_0
/data/data/####/fe924559f4037f42_0
/data/data/####/ff731ae15dfbab0a_0
/data/data/####/ffcea02180503e93_0
/data/data/####/ffcea02180503e93_1
/data/data/####/index
/data/data/####/metrics_guid
/data/data/####/the-real-index
/data/data/####/woNMbU.dex
/data/data/####/woNMbU.dex.flock (deleted)
/data/misc/####/primary.prof

Miscellaneous:

Gets information about network.

Displays its own windows over windows of other apps.

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical information

Curing recommendations

Free trial