Android.SpyMax.2274

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.SpyMax.78.origin

Network activity:

Connects to:

UDP(???) anys####.net:443
UDP(DNS) <Google DNS>
TCP(HTTP/1.1) 1####.47.249.195:80
TCP(HTTP/1.1) 1####.204.2.26:80
TCP(TLS/1.0) anys####.net:443
TCP(TLS/1.0) up####.google####.com:443
TCP(TLS/1.0) cdn.tailwin####.com:443
TCP(TLS/1.0) f####.google####.com:443
TCP(TLS/1.0) f####.gst####.com:443
TCP(TLS/1.0) ed####.me.g####.com:443

DNS requests:

anys####.net
cdn.tailwin####.com
ed####.me.g####.com
f####.google####.com
f####.gst####.com
up####.google####.com

HTTP HEAD requests:

1####.204.2.26/yaarsa/private/yarsap_80541.php
1####.47.249.195/yaarsa/private/yarsap_80541.php

File system changes:

Creates the following files:

/app_webview/BrowserMetrics/BrowserMetrics-6AB383A0-CEB.pma (deleted)
/app_webview/Default/####/000003.log
/app_webview/Default/####/LOCK
/app_webview/Default/####/LOG
/app_webview/Default/####/MANIFEST-000001
/app_webview/Default/Cookies
/app_webview/Default/Web Data
/app_webview/Default/Web Data-journal
/app_webview/webview_data.lock
/cache/WebView/####/03fa228df43d6ca5_0
/cache/WebView/####/135e34f8f06b649c_0
/cache/WebView/####/23dff2625ff55887_0
/cache/WebView/####/29cd0631459b3c64_0
/cache/WebView/####/2a953f83c3f07d71_0
/cache/WebView/####/35add5dd9f9fbe5b_0
/cache/WebView/####/52dcac056cad28f2_0
/cache/WebView/####/63d00f88b93e0558_0
/cache/WebView/####/674776624d4dfcab_0
/cache/WebView/####/8e9d0fdbdf83e656_0
/cache/WebView/####/a2d1b51ab19866ef_0
/cache/WebView/####/abcbc7f7b56ed742_0
/cache/WebView/####/ad350786429a3a0a_0
/cache/WebView/####/b0425e4a86348298_0
/cache/WebView/####/bd57e78eae7bb163_0
/cache/WebView/####/bdb55a0d9cea7f2d_0
/cache/WebView/####/c16669dbcfd0b1fc_0
/cache/WebView/####/cdd5e351dc4f456e_0
/cache/WebView/####/ce2a6ae25161ce1f_0
/cache/WebView/####/e7f2bcf7260d93a2_0
/data/data/####/.org.chromium.Chromium.NXpcVF
/data/data/####/.org.chromium.Chromium.OK6ukz (deleted)
/data/data/####/.org.chromium.Chromium.WHPWOa
/data/data/####/000001.dbtmp
/data/data/####/2026-09-23.bin
/data/data/####/2421d2d492596edc_0
/data/data/####/2ce39de33d39203f_0
/data/data/####/66cbe959a08e612d_0
/data/data/####/6d591d77ea4f7436_0
/data/data/####/6fd44c013689086e_0
/data/data/####/7ca7764357b8a7c8_0
/data/data/####/846d90615a7cfe4f_0
/data/data/####/8e53fbe14c40cef4_0
/data/data/####/9b44fa15d037af12_0
/data/data/####/Anonymous-DexFile@3182067426.vdex
/data/data/####/BrowserMetrics-spare.pma.tmp
/data/data/####/CURRENT
/data/data/####/Cookies-journal
/data/data/####/MANIFEST-000001
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/a29c5303af52cc74_0
/data/data/####/androidx.work.workdb-journal
/data/data/####/androidx.work.workdb-wal
/data/data/####/androidx.work.workdb.lck
/data/data/####/b76025fd0e0e2d37_0
/data/data/####/cd957a5569b95715_0
/data/data/####/cfg.xml
/data/data/####/d03f13acdf42fd34_0
/data/data/####/e0b5045417f8134b_0
/data/data/####/font_unique_name_table.pb
/data/data/####/iekvtv.u97nf.bid.o9.xml
/data/data/####/index
/data/data/####/my_skipes.xml
/data/data/####/p22.jar
/data/data/####/profileInstalled
/data/data/####/profileinstaller_profileWrittenFor_lastUpdateTime.dat
/data/data/####/settings.dat
/data/data/####/temp-index
/data/data/####/the-real-index
/data/data/####/todelete_2421d2d492596edc_0_1 (deleted)
/data/data/####/todelete_58a70f7691334c0e_0_1 (deleted)
/data/data/####/todelete_6d591d77ea4f7436_0_1 (deleted)
/data/data/####/todelete_7805c0f5e57bcf96_0_1 (deleted)
/data/data/####/todelete_7ca7764357b8a7c8_0_1 (deleted)
/data/data/####/todelete_846d90615a7cfe4f_0_1 (deleted)
/data/data/####/todelete_877377baeab20f00_0_1 (deleted)
/data/data/####/todelete_9b44fa15d037af12_0_1 (deleted)
/data/data/####/todelete_b76025fd0e0e2d37_0_1 (deleted)
/data/data/####/todelete_bfe4cee7a056fa7b_0_1 (deleted)
/data/data/####/todelete_cd957a5569b95715_0_1 (deleted)
/data/data/####/variations_seed_new
/data/data/####/variations_stamp
/data/misc/####/primary.prof
/no_backup/androidx.work.workdb
/no_backup/androidx.work.workdb-shm
/no_backup/androidx.work.workdb-wal

Miscellaneous:

Gets information about installed apps.

Displays its own windows over windows of other apps.

Contains hidden alternative main activities.

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical information

Curing recommendations

Free trial