Android.Locker.18244

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Locker.1457.origin

Network activity:

Connects to:

UDP(DNS) <Google DNS>
UDP(DNS) 8####.8.4.4:53
TCP(TLS/1.0) rr9---s####.g####.com:443
TCP(TLS/1.0) www.por####.com:443
TCP(TLS/1.0) www.googlet####.com:443
TCP(TLS/1.0) 1####.250.74.131:443
TCP(TLS/1.0) and####.a####.go####.com:443
TCP(TLS/1.0) p####.google####.com:443
TCP(TLS/1.0) cdn1-sm####.ph####.com:443
TCP(TLS/1.0) o####.vk.com:443
TCP(TLS/1.0) gmscomp####.google####.com:443
TCP(TLS/1.0) m####.traffic####.net:443
TCP(TLS/1.0) pix-c####.ph####.com:443
TCP(TLS/1.0) rr6---s####.g####.com:443
TCP(TLS/1.2) 1####.250.74.142:443
TCP(TLS/1.2) gmscomp####.google####.com:443
TCP(TLS/1.2) 1####.250.74.174:443
TCP(TLS/1.2) 1####.250.74.131:443
TCP(TLS/1.2) 1####.250.74.100:443
UDP p####.google####.com:443
UDP gmscomp####.google####.com:443

DNS requests:

and####.a####.go####.com
cdn1-sm####.ph####.com
ei.ph####.com
gmscomp####.google####.com
m####.traffic####.net
o####.vk.com
p####.google####.com
pix####.ph####.com
pix-c####.ph####.com
rr6---s####.g####.com
rr9---s####.g####.com
rt.por####.org
www.googlet####.com
www.por####.com

File system changes:

Creates the following files:

/data/data/####/026cc41a98ad9787_0
/data/data/####/026cc41a98ad9787_0 (deleted)
/data/data/####/06061483ec525e5f_0
/data/data/####/06f59a7401f28ff1_0
/data/data/####/06f59a7401f28ff1_1
/data/data/####/0a2d47eaf48d6da5_0
/data/data/####/0c8fe27e700cd2ad_0
/data/data/####/0d8ca71138d5be8d_0
/data/data/####/0d8ca71138d5be8d_0 (deleted)
/data/data/####/0f37948197f9e97c_0
/data/data/####/11e6d0c100ef6553_0
/data/data/####/11e6d0c100ef6553_1
/data/data/####/128077f5d2f01991_0
/data/data/####/131739d3214ab9c2_0
/data/data/####/152b21487ef8678f_0
/data/data/####/1632ec9554410400_0
/data/data/####/17f38f3a397e1bad_0
/data/data/####/17f38f3a397e1bad_1
/data/data/####/198fe9dff83bb4dc_0
/data/data/####/19af0cd6025d9206_0
/data/data/####/19af0cd6025d9206_1
/data/data/####/1cd65c9f0ffe48f1_0
/data/data/####/1cd65c9f0ffe48f1_1
/data/data/####/1d854d46cd76238e_0
/data/data/####/1d854d46cd76238e_0 (deleted)
/data/data/####/1e04bf984da3a5a7_0
/data/data/####/1e04bf984da3a5a7_1
/data/data/####/1efd72d2483f474b_0
/data/data/####/2034a8cd52651f9b_0
/data/data/####/20728c1216776e6b_0
/data/data/####/207966f7b4e66f28_0
/data/data/####/213d16217f2895f0_0
/data/data/####/22333f27baa7d32d_0
/data/data/####/2521885fd5b4ec02_0
/data/data/####/27dedb60c42a5120_0
/data/data/####/2b316faa79dbc325_0
/data/data/####/2b316faa79dbc325_1
/data/data/####/2b4976a69fef74ee_0
/data/data/####/2b4976a69fef74ee_1
/data/data/####/2e5fe6ff73fdcc42_0
/data/data/####/2f7f0dc75e726f59_0
/data/data/####/300d1f969c14e371_0
/data/data/####/31f0c98e8e6bb8e3_0
/data/data/####/341d73aa49932f88_0
/data/data/####/35ff8fc938daa8a3_0
/data/data/####/36fb524088b238ea_0
/data/data/####/37dd2740c38dba66_0
/data/data/####/3afd49401e953f02_0
/data/data/####/408bbd410626578d_0
/data/data/####/40b0690d5ad286a6_0
/data/data/####/40c4c007e8a8ed20_0
/data/data/####/427cfad67a67817a_0
/data/data/####/43fee2d112f94d4d_0
/data/data/####/44b8e98588280f3f_0
/data/data/####/44b8e98588280f3f_1
/data/data/####/4598e30aa20ed083_0
/data/data/####/462ca514b0b1adba_0
/data/data/####/47eea2b1de31278b_0
/data/data/####/4898df34677c5882_0
/data/data/####/4898df34677c5882_1
/data/data/####/4c9c599f35861415_0
/data/data/####/4c9c599f35861415_0 (deleted)
/data/data/####/4c9fb43bd33d7c8e_0
/data/data/####/4c9fb43bd33d7c8e_1
/data/data/####/4cc4aa280dcb0fa9_0
/data/data/####/4d90b05c88c6fedc_0
/data/data/####/4d90b05c88c6fedc_1
/data/data/####/4fb7049b2750fdcb_0
/data/data/####/52632fd9e66a2aab_0
/data/data/####/532a29c4b2854809_0
/data/data/####/55abe3290ee5eafa_0 (deleted)
/data/data/####/57f5f0e09942dbb7_0
/data/data/####/58b0173904fbc251_0
/data/data/####/5f592b3c688e6335_0 (deleted)
/data/data/####/6233c4d3df1ecbaf_0
/data/data/####/64f6d705763a724d_0
/data/data/####/65972d098c1281ea_0
/data/data/####/675ff24ec208f75d_0
/data/data/####/6822af8bac02d0f2_0 (deleted)
/data/data/####/69a73dc170b40284_0
/data/data/####/69a73dc170b40284_0 (deleted)
/data/data/####/6b45392439358f1f_0
/data/data/####/6cad07bb138853ff_0
/data/data/####/6cad07bb138853ff_1
/data/data/####/6d4236f35a9841ec_0
/data/data/####/7024b3ecf689f83f_0
/data/data/####/7147b7458b1d6ee1_0
/data/data/####/7147b7458b1d6ee1_1
/data/data/####/7360d3473b757564_0
/data/data/####/7360d3473b757564_1
/data/data/####/76ee0f72f1d77aee_0
/data/data/####/76ee0f72f1d77aee_1
/data/data/####/793c2a4ea99c7016_0
/data/data/####/795a6a5464f13746_0
/data/data/####/79db92c7e507e8e9_0
/data/data/####/7b49618d8c420728_0
/data/data/####/7c3c2171d550c90e_0
/data/data/####/7d33ba12995a3e9a_0
/data/data/####/7ed1f8dabb8d144f_0
/data/data/####/7ed1f8dabb8d144f_0 (deleted)
/data/data/####/7f26c3311d04b816_0
/data/data/####/7fa9709d1fb6961e_0
/data/data/####/840f5a8efac1d7af_0
/data/data/####/84857b8fd5946379_0
/data/data/####/8a94efb574e580bf_0
/data/data/####/8c0b69706015c5c8_0
/data/data/####/8ff7a68699e1bcdc_0
/data/data/####/907b8f34675c8ae5_0
/data/data/####/91b85bffbeafc241_0
/data/data/####/9314230c86b90d18_0
/data/data/####/93369d2f30d7debe_0
/data/data/####/93b22ca02bd0c004_0
/data/data/####/93e5506dd2e7d6d0_0
/data/data/####/9402ef73a016ffbb_0
/data/data/####/947b62cbe0721932_0
/data/data/####/9681b12e249aa7be_0
/data/data/####/982ffbd231a88f39_0
/data/data/####/9880de2fa5d94290_0
/data/data/####/99eb7771c507aa96_0
/data/data/####/9ad6105553a22112_0
/data/data/####/9c82c237dcd02bdb_0
/data/data/####/9df77f388ee930ee_0
/data/data/####/9df77f388ee930ee_1
/data/data/####/9dfce6b99abbab87_0
/data/data/####/9ed067bf55e4599e_0
/data/data/####/9f06cb13ed99290c_0
/data/data/####/9f06cb13ed99290c_1
/data/data/####/9f2452fafb0d9c7d_0
/data/data/####/Cookies-journal
/data/data/####/EzcCUDNkJdr.dex
/data/data/####/FbZng.dex
/data/data/####/FbZng.dex.flock (deleted)
/data/data/####/SbiLyi.dex
/data/data/####/SbiLyi.dex.flock (deleted)
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/WoIyjXoP.dex
/data/data/####/WoIyjXoP.dex.flock (deleted)
/data/data/####/a03f1c98b366173a_0
/data/data/####/a1a0eb390b604316_0
/data/data/####/a1a0eb390b604316_1
/data/data/####/a58c89905ceb1f8c_0 (deleted)
/data/data/####/a623d2662ef4278b_0
/data/data/####/a623d2662ef4278b_1
/data/data/####/a660ba45bc30ef84_0
/data/data/####/a9fa183c12f7ef14_0
/data/data/####/aab5bff7def2af0e_0
/data/data/####/aab5bff7def2af0e_0 (deleted)
/data/data/####/aeafe34adc808330_0
/data/data/####/aeafe34adc808330_1
/data/data/####/aefccc605443435c_0
/data/data/####/afdb343e3ef2ae70_0
/data/data/####/afdb343e3ef2ae70_1
/data/data/####/b0ed00a81ef59793_0
/data/data/####/b69ee8557a00240f_0
/data/data/####/b8c6714a7719eceb_0
/data/data/####/be1ff4371cb1f27f_0
/data/data/####/c0d4f71fd819bc6a_0
/data/data/####/c6ab3a74eadda4b9_0
/data/data/####/c6b2cdfdd07fcee3_0
/data/data/####/c6b2cdfdd07fcee3_0 (deleted)
/data/data/####/c76aa57d9c8fa979_0
/data/data/####/c77302175095cc7e_0
/data/data/####/c7cfe76cabc7aff8_0
/data/data/####/cb67cda3324ea821_0
/data/data/####/ccb6ae163afebfc0_0
/data/data/####/cdcba13bf56bd863_0
/data/data/####/cdcba13bf56bd863_1
/data/data/####/ce0c580d063c5ceb_0
/data/data/####/ce3bd9fe2a9152d8_0
/data/data/####/ce3bd9fe2a9152d8_1
/data/data/####/ceeb18b44f7c867c_0
/data/data/####/com.jtkjuvzn_preferences.xml
/data/data/####/d0e25fffddc1dd53_0
/data/data/####/d383da6000bc7eb3_0
/data/data/####/d3f542947fc2d771_0
/data/data/####/d3f542947fc2d771_1
/data/data/####/d5305d0f3d5f23ca_0
/data/data/####/d84691e380bb8882_0
/data/data/####/da0ab0da0b05dca7_0
/data/data/####/db5519447f136ad9_0
/data/data/####/db5519447f136ad9_1
/data/data/####/e17eb2c253c395cb_0
/data/data/####/e2b704898dd3c02b_0
/data/data/####/e2d9494d8d1b09a4_0
/data/data/####/e80c834528adbd07_0
/data/data/####/e86936177fe8f6b2_0
/data/data/####/e88e3ee7212c5c1d_0
/data/data/####/ea543416c59e1df1_0
/data/data/####/eb6323ee8922157c_0
/data/data/####/ecddbe832fc780b0_0
/data/data/####/ed073965a601c397_0
/data/data/####/effd37cf07a9b470_0 (deleted)
/data/data/####/f307293492084132_0
/data/data/####/f4a8209aa2cc56d2_0
/data/data/####/f5e35b583c5ccf9c_0
/data/data/####/f5fa9c6556e1c73b_0
/data/data/####/f5fa9c6556e1c73b_1
/data/data/####/f8c419a137e0e8b6_0
/data/data/####/f958946644b706d5_0
/data/data/####/fb6ea4bed4c2ca1d_0
/data/data/####/fc4c957230e36824_0
/data/data/####/fcbb84bb6ed25e0d_0
/data/data/####/index
/data/data/####/metrics_guid
/data/data/####/the-real-index
/data/misc/####/primary.prof

Miscellaneous:

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Displays its own windows over windows of other apps.

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical information

Curing recommendations

Free trial