マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Android.Locker.18084

Added to the Dr.Web virus database: 2024-06-11

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.1457.origin
Network activity:
Connects to:
  • UDP(DNS) <Google DNS>
  • TCP(TLS/1.0) bea####.g####.com:443
  • TCP(TLS/1.0) analy####.go####.com:443
  • TCP(TLS/1.0) ss.ph####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) p####.io:443
  • TCP(TLS/1.0) rr5---s####.g####.com:443
  • TCP(TLS/1.0) et####.com:443
  • TCP(TLS/1.0) o####.vk.com:443
  • TCP(TLS/1.0) i####.vk.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) gmscomp####.google####.com:443
  • TCP(TLS/1.2) gmscomp####.google####.com:443
  • TCP(TLS/1.2) bea####.g####.com:443
  • TCP(TLS/1.2) 1####.177.14.104:443
  • UDP rr5---s####.g####.com:443
  • UDP rr2---s####.g####.com:443
  • UDP 2####.85.233.139:443
  • UDP gmscomp####.google####.com:443
  • UDP bea####.g####.com:443
DNS requests:
  • analy####.go####.com
  • bea####.g####.com
  • cdn1-sm####.ph####.com
  • cdn1d-s####.ph####.com
  • ei.ph####.com
  • et####.com
  • gmscomp####.google####.com
  • i####.vk.com
  • m####.traffic####.net
  • o####.vk.com
  • p####.io
  • rr2---s####.g####.com
  • rr5---s####.g####.com
  • s####.g.doublec####.net
  • ss.ph####.com
  • st####.vk.com
  • sto####.google####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/01c2bfef214b05d6_0
  • /data/data/####/026ae1c72c73ccbe_0
  • /data/data/####/06abbd9636c2a818_0
  • /data/data/####/06abbd9636c2a818_1
  • /data/data/####/07487728143176b3_0
  • /data/data/####/07c16fafa1c245c0_0
  • /data/data/####/07c16fafa1c245c0_1
  • /data/data/####/0a9c2ea563a2d0f2_0
  • /data/data/####/0c94b0590e707c7e_0
  • /data/data/####/0d30b006959fef4d_0
  • /data/data/####/0d9963e691eb8714_0
  • /data/data/####/0d9963e691eb8714_1
  • /data/data/####/0e6cec66fe5833ef_0
  • /data/data/####/0e6f1005a4d6e6a8_0
  • /data/data/####/0eb645c9599a484c_0
  • /data/data/####/0f7b7b63f996b029_0
  • /data/data/####/0fcb93b8188f82db_0
  • /data/data/####/10a77581fe4c30a2_0
  • /data/data/####/11d75f4536d7ed49_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/13420cb9c3bf17b6_0
  • /data/data/####/13c313614e5202ea_0
  • /data/data/####/13d5de0659f5104f_0
  • /data/data/####/13d5de0659f5104f_1
  • /data/data/####/15cc7de45a7da8d3_0
  • /data/data/####/15e7818b0552927d_0
  • /data/data/####/15f8932287d876e2_0
  • /data/data/####/17b08cd0992b748f_0
  • /data/data/####/1bee8cf9453b8912_0
  • /data/data/####/1c5d6a62a81b0393_0
  • /data/data/####/1d5a2500328bada4_0
  • /data/data/####/1d989309094224dc_0
  • /data/data/####/1db22a55b0ec0f1d_0
  • /data/data/####/1dd4b50c98bcfec9_0
  • /data/data/####/1e02eaabb1f5d756_0
  • /data/data/####/1f2f255743a16fd5_0
  • /data/data/####/1f6bcfc26cd459f2_0
  • /data/data/####/203db064fb09955a_0
  • /data/data/####/23c7615d80e0a8d6_0
  • /data/data/####/26d777a0567d5e49_0
  • /data/data/####/26e95310bbe6d261_0
  • /data/data/####/28706fe825641aa3_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2aa40f21e067b5a3_0
  • /data/data/####/2b10eab46a458a5c_0 (deleted)
  • /data/data/####/2b21ea920b19e92a_0
  • /data/data/####/2b701990b3914896_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2d21dfb691e41279_0
  • /data/data/####/2d376b43def5a8cd_0 (deleted)
  • /data/data/####/2d516a86ea7d38bd_0
  • /data/data/####/2e50df9629cb9c4e_0
  • /data/data/####/2f22e6614fbdf91c_0
  • /data/data/####/2fc06c91053754df_0
  • /data/data/####/2fc6ed4416692f9c_0
  • /data/data/####/31c130f26a00a260_0
  • /data/data/####/31c130f26a00a260_0 (deleted)
  • /data/data/####/31d235cea7375c5c_0
  • /data/data/####/31d235cea7375c5c_1
  • /data/data/####/325c44e0bb951823_0
  • /data/data/####/3304b540750370ae_0
  • /data/data/####/330fa720aeccfe98_0
  • /data/data/####/3320f46c9b47429f_0
  • /data/data/####/3320f46c9b47429f_1
  • /data/data/####/333ed7e0f02f8092_0
  • /data/data/####/3534cab2b2341a9b_0
  • /data/data/####/3627b642a9ac0ec1_0
  • /data/data/####/379b5921d0c79b7d_0
  • /data/data/####/3898777466153a20_0
  • /data/data/####/38d7517636b6a7dc_0
  • /data/data/####/39df11bc8a4f3344_0
  • /data/data/####/3b5622e59d2ae805_0
  • /data/data/####/3c106dbeefa758e3_0
  • /data/data/####/3c58f46347e8b90e_0
  • /data/data/####/3db13b8b173e5e8f_0
  • /data/data/####/3de67d8afb724f51_0
  • /data/data/####/3df731ae85315197_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/40d2e6d90f0408eb_0
  • /data/data/####/4194091a06a2ee24_0
  • /data/data/####/41a532c31a9ba60e_0
  • /data/data/####/42fc944eba61798c_0
  • /data/data/####/43a68336f7217679_0
  • /data/data/####/43a68336f7217679_1
  • /data/data/####/43d1a489072d0953_0
  • /data/data/####/44d85d0866435c35_0
  • /data/data/####/456e8433ddb8a678_0
  • /data/data/####/456e8433ddb8a678_0 (deleted)
  • /data/data/####/48247f30e67d9bdb_0
  • /data/data/####/485fa3c63bf4d629_0
  • /data/data/####/4ac0501466506069_0
  • /data/data/####/4b730b23187c302b_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4e8aa1fee7207ed1_0
  • /data/data/####/4f085929aa8e3e2a_0 (deleted)
  • /data/data/####/4f749a97d7e80a17_0
  • /data/data/####/4f75cf9f03eeb08c_0
  • /data/data/####/4fa6f1d32a465b7b_0
  • /data/data/####/5107d8b8b3e1fd3c_0
  • /data/data/####/51a34c7b93093209_0
  • /data/data/####/53471e362d660d90_0
  • /data/data/####/535537c69be9a4b4_0
  • /data/data/####/5439ce9d03ef74c7_0
  • /data/data/####/550da2c8a1df01e8_0
  • /data/data/####/5715c1f766d0d610_0
  • /data/data/####/574003b5a1677d09_0
  • /data/data/####/57976c3360a46301_0
  • /data/data/####/580266740d15ec5e_0
  • /data/data/####/589ad8466c4dd246_0
  • /data/data/####/593cc977ef30e979_0
  • /data/data/####/599dec54ffa6e38a_0
  • /data/data/####/5acb9cc44d01fb49_0
  • /data/data/####/5d3f1d49983ab1fa_0
  • /data/data/####/5e17def04afa261a_0
  • /data/data/####/5e17def04afa261a_1
  • /data/data/####/5fa444a443ae11e5_0
  • /data/data/####/5fa444a443ae11e5_1
  • /data/data/####/600be4fc342b861f_0
  • /data/data/####/606fb2010d40d5cc_0
  • /data/data/####/61a537e0025801b5_0
  • /data/data/####/62b8f3cf60991068_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/634590dc1ba4135f_0
  • /data/data/####/6465e766e46eb478_0
  • /data/data/####/664d0e5413ea1886_0
  • /data/data/####/66f501880d166e60_0
  • /data/data/####/691b3c278abeae8c_0
  • /data/data/####/6deb0532c9179444_0
  • /data/data/####/6f0eb2729d91cbcd_0
  • /data/data/####/6ff4e748c86a50ae_0
  • /data/data/####/7135d9a50e6d6dda_0
  • /data/data/####/7135d9a50e6d6dda_1
  • /data/data/####/73ac90f6a5d87e62_0
  • /data/data/####/73ac90f6a5d87e62_1
  • /data/data/####/7434768c8c561c44_0
  • /data/data/####/74ce3fe72866c1d1_0
  • /data/data/####/74ce3fe72866c1d1_0 (deleted)
  • /data/data/####/74e8f0c6d4de348f_0
  • /data/data/####/75b11c68f55a9aa7_0
  • /data/data/####/763afe24878218b7_0
  • /data/data/####/77def319ac7529dd_0
  • /data/data/####/78057bbd288ab59d_0 (deleted)
  • /data/data/####/781d62aa5ad370aa_0
  • /data/data/####/782371faaa74b34c_0
  • /data/data/####/7a979a0343c705e6_0
  • /data/data/####/7b3b372ac8c2a4ac_0
  • /data/data/####/7b59f42553d01fec_0
  • /data/data/####/7d78aaaad3e9b250_0
  • /data/data/####/7dc740a332b955be_0
  • /data/data/####/7ead62db7d6ee2c6_0
  • /data/data/####/7f73831d2f0f60e6_0
  • /data/data/####/7f73831d2f0f60e6_1
  • /data/data/####/7fb421a59453ca0a_0
  • /data/data/####/81bba4bc7928b506_0
  • /data/data/####/81fbac1bb3a58349_0 (deleted)
  • /data/data/####/831a622c64f90aaf_0
  • /data/data/####/83b80c1eb4d790fb_0
  • /data/data/####/83f5c5251b137584_0
  • /data/data/####/8507f62d79457e80_0
  • /data/data/####/8507f62d79457e80_1
  • /data/data/####/8650a77649aff8c5_0
  • /data/data/####/887733e1cc31b2ce_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/8888bac454c36fa6_1 (deleted)
  • /data/data/####/88a3e3d856914bf4_0
  • /data/data/####/8a82b042223ec517_0
  • /data/data/####/8a82b042223ec517_1
  • /data/data/####/8c1101ab32dc0284_0
  • /data/data/####/8c651cd0ee804d8e_0
  • /data/data/####/8d0e51da4eb64636_0
  • /data/data/####/8dba9e20c249f91a_0
  • /data/data/####/8e4276c0489ae0b0_0
  • /data/data/####/8e54955c1f44700c_0
  • /data/data/####/8e88842e5d6526bc_0
  • /data/data/####/8f3099398b51af1c_0
  • /data/data/####/8f7ac8060dc1bd8a_0
  • /data/data/####/8f7ac8060dc1bd8a_1
  • /data/data/####/9031da2d62ff3f88_0
  • /data/data/####/9031da2d62ff3f88_1
  • /data/data/####/91b729dac167dd33_0
  • /data/data/####/92a22d9164fba013_0 (deleted)
  • /data/data/####/92e2854edfcddad1_0
  • /data/data/####/930e4dc52d5110b4_0
  • /data/data/####/93fdd398bfc6b345_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/944de0cb51f916cc_0
  • /data/data/####/94e9ecb4de28a404_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/96daa6bd73735b34_0
  • /data/data/####/971c00549a8bac4b_0
  • /data/data/####/97b1661d1c306ffe_0
  • /data/data/####/99194fd27c8c8e6d_0
  • /data/data/####/998f2315b3d88e16_0
  • /data/data/####/9abb6317d7dfad3b_0
  • /data/data/####/9b96fefa493d6daf_0
  • /data/data/####/9c2b3b68e01b1487_0
  • /data/data/####/9d1ec37326149cf6_0
  • /data/data/####/9d1ec37326149cf6_0 (deleted)
  • /data/data/####/9fa3f64d70328352_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/EDCvwZf.dex
  • /data/data/####/EDCvwZf.dex.flock (deleted)
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/ZxhsOjfYnfIL.dex
  • /data/data/####/ZxhsOjfYnfIL.dex.flock (deleted)
  • /data/data/####/a0b1e68e9141f9c1_0
  • /data/data/####/a0b1e68e9141f9c1_1
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a4d2035528d8d0e1_0
  • /data/data/####/a533c9d5b0b7359c_0
  • /data/data/####/a56bacd24829e906_0
  • /data/data/####/a6fd8b8869374d05_0
  • /data/data/####/a8dc992d13ba3aa1_0 (deleted)
  • /data/data/####/a91ea55e6b112d80_0
  • /data/data/####/a9333a3d018a5a3f_0
  • /data/data/####/aa4317c624c7db66_0
  • /data/data/####/acee6beae8ddc5ec_0
  • /data/data/####/ad42246f4336a1b9_0
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/af062ef2b664a754_0
  • /data/data/####/afcf19fe47b4d7d8_0
  • /data/data/####/b053e2d9d7e03510_0
  • /data/data/####/b0b2918aaca831d6_0
  • /data/data/####/b24284585708f1ad_0
  • /data/data/####/b26bfc0e612587a1_0
  • /data/data/####/b27be4395c266731_0
  • /data/data/####/b2ab6441975c056b_0
  • /data/data/####/b34d907ab2d0b11c_0
  • /data/data/####/b3847c23060b79af_0
  • /data/data/####/b4acf66e2bf7b063_0
  • /data/data/####/b5f19e3266ed8c8e_0
  • /data/data/####/b60a4b27341138f7_0
  • /data/data/####/b61c9e2c442ee3be_0
  • /data/data/####/b6e82b51f7948376_0
  • /data/data/####/b90a5e706d1d6908_0
  • /data/data/####/b9239c2c6e6e86f7_0
  • /data/data/####/bb370989aa329764_0
  • /data/data/####/bc30e4a3235ec1af_0
  • /data/data/####/bdea7b64c018f647_0
  • /data/data/####/bdea7b64c018f647_0 (deleted)
  • /data/data/####/be59b7e0fd1d16b9_0
  • /data/data/####/be59b7e0fd1d16b9_1
  • /data/data/####/be97427b03d8575a_0
  • /data/data/####/bed569d8d8b6530f_0
  • /data/data/####/bedd6220d4604ad3_0
  • /data/data/####/bf05658b469a8e67_0
  • /data/data/####/c1b897990f26b4d9_0
  • /data/data/####/c39390113998af79_0
  • /data/data/####/c42147a867b0e811_0
  • /data/data/####/c5399c9a756be08f_0
  • /data/data/####/c79160691950c17c_0
  • /data/data/####/c87a64b0bec2ea5a_0
  • /data/data/####/c8f2c24b1f8d510a_0
  • /data/data/####/c94a125f09a25254_0
  • /data/data/####/ca11b28079f90465_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/cd52b4d2ccc3c411_0
  • /data/data/####/cd53aa5d46ae84ea_0
  • /data/data/####/cdc7c3b7597c3dc1_0
  • /data/data/####/ce3d40bcd6731e4e_0
  • /data/data/####/cf109948b879f58d_0
  • /data/data/####/cf821474474f8aa5_0
  • /data/data/####/com.rxpda_preferences.xml
  • /data/data/####/d0fe5803c7254b41_0
  • /data/data/####/d140df486799a11d_0
  • /data/data/####/d2151a1c4c84945c_0
  • /data/data/####/d2151a1c4c84945c_1
  • /data/data/####/d47e2d143045a1df_0
  • /data/data/####/d4dd4bf3e1229ed3_0
  • /data/data/####/d53bc31495a4fd4a_0
  • /data/data/####/d5a9323d4b88c6e3_0
  • /data/data/####/d5a9323d4b88c6e3_1
  • /data/data/####/d60cd8b6038ee291_0
  • /data/data/####/d63e18b33385b73d_0
  • /data/data/####/d6be705e357843dd_0
  • /data/data/####/d8fdee741af4d750_0
  • /data/data/####/d905018727a08aa6_0
  • /data/data/####/dab0879acb14c3b7_0
  • /data/data/####/dcc3e79caed3453e_0
  • /data/data/####/dfb6413e977f9eed_0
  • /data/data/####/e04ecf0bca57320a_0
  • /data/data/####/e0670f18b22c33df_0
  • /data/data/####/e113208a9b809edd_0
  • /data/data/####/e2cacc03ef35f944_0
  • /data/data/####/e5297786b0ba1e5a_0
  • /data/data/####/e5693e147c8c4ab6_0
  • /data/data/####/e56d9ca6bdf8da09_0
  • /data/data/####/e5d846d4d9ddf8d1_0
  • /data/data/####/e742e223f64784a4_0
  • /data/data/####/e80d089596ae78f6_0
  • /data/data/####/e935108280580264_0
  • /data/data/####/e935108280580264_1
  • /data/data/####/e9a930d3a919a1c6_0
  • /data/data/####/e9a930d3a919a1c6_0 (deleted)
  • /data/data/####/e9d3ce9dc769909c_0 (deleted)
  • /data/data/####/eb47d9342b14b1fb_0
  • /data/data/####/eb80e92132873a1a_0
  • /data/data/####/ed5ba7dc7105815d_0
  • /data/data/####/ee0acdc357c6f453_0
  • /data/data/####/ef935dd2329b1c87_0
  • /data/data/####/ef935dd2329b1c87_1
  • /data/data/####/ef989651e6e13944_0
  • /data/data/####/efe6b009c3178b35_0
  • /data/data/####/effd37cf07a9b470_0
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f252c3fe34a26434_0
  • /data/data/####/f37271db0202fe4b_0
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/f66190232104951a_0
  • /data/data/####/f66190232104951a_1
  • /data/data/####/f6d471c8edef4776_0
  • /data/data/####/f734b8265241f287_0
  • /data/data/####/f734b8265241f287_1
  • /data/data/####/f7631c394f644b99_0
  • /data/data/####/f78df06b403f2767_0
  • /data/data/####/f7b3b81bd38e9259_0
  • /data/data/####/f8dadd7f2a58e67f_0
  • /data/data/####/f8dadd7f2a58e67f_1
  • /data/data/####/f8e21c4622e7e13e_0
  • /data/data/####/f8e21c4622e7e13e_1
  • /data/data/####/fb0eaa0971cbcf17_0
  • /data/data/####/fb672b7bc8b7b029_0
  • /data/data/####/fbb68d970420fe9b_0
  • /data/data/####/fc12c4fc2696a284_0
  • /data/data/####/fc384925d2a3514c_0
  • /data/data/####/fc4f1d9974d01c4d_0
  • /data/data/####/fe6ffe2e1d568a30_0
  • /data/data/####/fe6ffe2e1d568a30_1
  • /data/data/####/fe9872a0ad9270da_0
  • /data/data/####/index
  • /data/data/####/jxxUf.dex
  • /data/data/####/jxxUf.dex.flock (deleted)
  • /data/data/####/metrics_guid
  • /data/data/####/temp-index
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android