ユーザー向け情報

閉じる

マイライブラリ
マイライブラリ

+ マイライブラリに追加

検索
検索

電話
テクニカルサポート利用方法

問い合わせ

新規お問い合わせ

電話

03-6550-8770

フォーラム（英語）

お問い合わせ履歴

新規お問い合わせ

電話

03-6550-8770

Profile

JP

RU CN EN ES FR IT JP KZ UZ BY ID
閉じる
サービス
スキャナー
Dr.Web vxCube
トライアル
ウイルスライブラリ
ナレッジベース

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

ニュース

Android.Packed.60674

Added to the Dr.Web virus database: 2026-09-25

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Siggen.Susp.3793
Network activity:
Connects to:
  • UDP(???) pla####.google####.com:443
  • UDP(???) p####.google####.com:443
  • UDP(DNS) <Google DNS>
  • UDP(DNS) 8####.8.4.4:53
  • TCP(GCM) <Google Host>
  • TCP(HTTP/1.1) connect####.gst####.com:80
  • TCP(TLS/1.0) connect####.gst####.com:443
  • TCP(TLS/1.0) p####.google####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) pla####.google####.com:443
  • TCP(TLS/1.2) p####.google####.com:443
DNS requests:
  • connect####.gst####.com
  • devicei####.google####.com
  • i.y####.com
  • m####.go####.com
  • p####.google####.com
  • pla####.google####.com
  • pla####.googleu####.com
  • playsto####.google####.com
  • prod-lt####.google####.com
  • www.go####.com
  • www.google####.com
File system changes:
Creates the following files:
  • /data/data/####/06BOVw5wASjCCMroJT1IkdwNqMNRQw8r.dex
  • /data/data/####/06BOVw5wASjCCMroJT1IkdwNqMNRQw8r.dex.flock (deleted)
  • /data/data/####/0Ho061LXpNY8EKApdOyJU1hHy8XmNJO4.dex
  • /data/data/####/0Ho061LXpNY8EKApdOyJU1hHy8XmNJO4.dex.flock (deleted)
  • /data/data/####/1IVMKje0kVZ2VkY9zvxbXeHl6uKycWIi.dex
  • /data/data/####/1IVMKje0kVZ2VkY9zvxbXeHl6uKycWIi.dex.flock (deleted)
  • /data/data/####/1WkSv9kKvz0ZGixft9zmmYaWoCGntNR9.dex
  • /data/data/####/1WkSv9kKvz0ZGixft9zmmYaWoCGntNR9.dex.flock (deleted)
  • /data/data/####/1bOj4BHYYrO7PVIsbzF6R3Q58nlq6dMC.dex
  • /data/data/####/1bOj4BHYYrO7PVIsbzF6R3Q58nlq6dMC.dex.flock (deleted)
  • /data/data/####/1gBVnBx1zNCGpvOD2E4J3ftxyJL2tdoX.dex
  • /data/data/####/1gBVnBx1zNCGpvOD2E4J3ftxyJL2tdoX.dex.flock (deleted)
  • /data/data/####/2dphkGDARZW9yKBW4VCXEDidsKsa8Nz6.dex
  • /data/data/####/2dphkGDARZW9yKBW4VCXEDidsKsa8Nz6.dex.flock (deleted)
  • /data/data/####/2iEg1XCDuQOqQD5ngsQdxEhGx14WVP1Q.dex
  • /data/data/####/2iEg1XCDuQOqQD5ngsQdxEhGx14WVP1Q.dex.flock (deleted)
  • /data/data/####/33GAeMWGWAJ81XSudynWTq16fyN4kjuY.dex
  • /data/data/####/33GAeMWGWAJ81XSudynWTq16fyN4kjuY.dex.flock (deleted)
  • /data/data/####/3P6cT1Bh1LT2QNVYozAgkhR2TsXotI5W.dex
  • /data/data/####/3P6cT1Bh1LT2QNVYozAgkhR2TsXotI5W.dex.flock (deleted)
  • /data/data/####/46jwHVq3buurNVTPKiJbMBCrCYmYZXTg.dex
  • /data/data/####/4R2xthe3FD3c7GUZKiIfMbywaTJFhGbp.dex
  • /data/data/####/4R2xthe3FD3c7GUZKiIfMbywaTJFhGbp.dex.flock (deleted)
  • /data/data/####/5Jzu7vMbnuBLuVrLRhT7LZmam8v9Ai0o.dex
  • /data/data/####/5Jzu7vMbnuBLuVrLRhT7LZmam8v9Ai0o.dex.flock (deleted)
  • /data/data/####/5i3Yc7yf4Ve1uU72T68zDO70imP3gQmX.dex
  • /data/data/####/69ANEWtuR1kc70pR2yXiAGAzDtN82ahh.dex
  • /data/data/####/6ZnCh8WeOBul9jkfbX1xBNAoruY3N6X9.dex
  • /data/data/####/6ZnCh8WeOBul9jkfbX1xBNAoruY3N6X9.dex.flock (deleted)
  • /data/data/####/6go4t8h13lj1LBRE7uL1nhCEuNFYEQ25.dex
  • /data/data/####/7IqY4qRwlgLFYFL2fwFJah4KMC9DlQwy.dex
  • /data/data/####/7IqY4qRwlgLFYFL2fwFJah4KMC9DlQwy.dex.flock (deleted)
  • /data/data/####/7QLxXv446qeLoR7nClMoO9oeQ0caKHfW.dex
  • /data/data/####/7TDVeOfIghuzWH1djnOYXpn3QI0QGadD.dex
  • /data/data/####/7TDVeOfIghuzWH1djnOYXpn3QI0QGadD.dex.flock (deleted)
  • /data/data/####/7v4XxkAFBklP4waX3Rr7NfuZfTxVk1F6.dex
  • /data/data/####/7v4XxkAFBklP4waX3Rr7NfuZfTxVk1F6.dex.flock (deleted)
  • /data/data/####/7wt9S9Q8SgZC3Z3sxoUrRpnYHyQBzOk1.dex
  • /data/data/####/7wt9S9Q8SgZC3Z3sxoUrRpnYHyQBzOk1.dex.flock (deleted)
  • /data/data/####/99aS1WzTDEtOjnWFItfaWQac9IxXsgDH.dex
  • /data/data/####/99aS1WzTDEtOjnWFItfaWQac9IxXsgDH.dex.flock (deleted)
  • /data/data/####/9T2batSHkIIK1jXZvz7px6lFaLRBOP2a.dex
  • /data/data/####/9T2batSHkIIK1jXZvz7px6lFaLRBOP2a.dex.flock (deleted)
  • /data/data/####/9cnEtxxn4nksHFRymsfes1ZDJak6iRTl.dex
  • /data/data/####/9cnEtxxn4nksHFRymsfes1ZDJak6iRTl.dex.flock (deleted)
  • /data/data/####/AtvipLvMQtHe1TbkxMgRKugMBdtSEKaT.dex
  • /data/data/####/AtvipLvMQtHe1TbkxMgRKugMBdtSEKaT.dex.flock (deleted)
  • /data/data/####/BJjWreThHsLoHO7kwGP52MzhvHRcxa1K.dex
  • /data/data/####/BJjWreThHsLoHO7kwGP52MzhvHRcxa1K.dex.flock (deleted)
  • /data/data/####/BtPjXpfryvjJgskSvozjjrDbXV4P1xW3.dex
  • /data/data/####/BtPjXpfryvjJgskSvozjjrDbXV4P1xW3.dex.flock (deleted)
  • /data/data/####/CcnyHTSXB1LZkwbSDcfN7XkV1WigovkP.dex
  • /data/data/####/CcnyHTSXB1LZkwbSDcfN7XkV1WigovkP.dex.flock (deleted)
  • /data/data/####/DBePkQTbTw0g4rTOh2XNM99CWzIyhPSn.dex
  • /data/data/####/DBePkQTbTw0g4rTOh2XNM99CWzIyhPSn.dex.flock (deleted)
  • /data/data/####/EN0xBlOMgLz4Jg7c3DU6LvoZNbVezymP.dex
  • /data/data/####/EN0xBlOMgLz4Jg7c3DU6LvoZNbVezymP.dex.flock (deleted)
  • /data/data/####/Et2ZiZLxp0fyiW0IbbpNYGaxGgF0Wh3r.dex
  • /data/data/####/Et2ZiZLxp0fyiW0IbbpNYGaxGgF0Wh3r.dex.flock (deleted)
  • /data/data/####/FMD3sLBZ1esk9Rvk8UlKnrfpeBzMQIw5.dex
  • /data/data/####/FMD3sLBZ1esk9Rvk8UlKnrfpeBzMQIw5.dex.flock (deleted)
  • /data/data/####/GqQcrSiM2oiibIBnLgtPdPe1ejv2zkBk.dex
  • /data/data/####/GqQcrSiM2oiibIBnLgtPdPe1ejv2zkBk.dex.flock (deleted)
  • /data/data/####/HjjRXRqPyYrzC1brwLYBP4UH5vsOUmgR.dex
  • /data/data/####/HjjRXRqPyYrzC1brwLYBP4UH5vsOUmgR.dex.flock (deleted)
  • /data/data/####/J3ED6vVKqNa02pcgqB28CPR7GzuM5Yk1.dex
  • /data/data/####/JHCbuRzHhUIxr8pyCqzLQ3bNWBlFYorr.dex
  • /data/data/####/JIehg9mGwv6i2DEkGKYCq5X4S11r3jjT.dex
  • /data/data/####/JvB6sCfIr8iaEDCMy5EvLDtjLOQM33tF.dex
  • /data/data/####/KPFheXjfHG6JjA8ARKBMtM8WchDd1Nnj.dex
  • /data/data/####/KVclYmg1UgH2pVHjUU4e1nxoBz6vAhNX.dex
  • /data/data/####/KVclYmg1UgH2pVHjUU4e1nxoBz6vAhNX.dex.flock (deleted)
  • /data/data/####/Lb3KNlucwaimruIAQupGFjuvBwANHvOp.dex
  • /data/data/####/M2CaBEs5Y17zvHsAeDOvk5kWIgen2HMm.dex
  • /data/data/####/M2CaBEs5Y17zvHsAeDOvk5kWIgen2HMm.dex.flock (deleted)
  • /data/data/####/M4qPsgLkoA9o2vfJMegzlrVkuze3VfVs.dex
  • /data/data/####/M4qPsgLkoA9o2vfJMegzlrVkuze3VfVs.dex.flock (deleted)
  • /data/data/####/MoPYqyOyEnGJ4w5eiJfgI3iEohJMD2Eh.dex
  • /data/data/####/MvHRWVLrfAcrJNQgJWtaHv9uxPmxbALl.dex
  • /data/data/####/N8AlI83ohMJ1PXBXUMqwonomJn1KvuuC.dex
  • /data/data/####/N8AlI83ohMJ1PXBXUMqwonomJn1KvuuC.dex.flock (deleted)
  • /data/data/####/NQGHyCMQR9mAkQ9zUJKq7WzgM0MoMtTQ.dex
  • /data/data/####/OfmwelAsSvXvJR9T7JTFFBgZUpzMQTu9.dex
  • /data/data/####/OfmwelAsSvXvJR9T7JTFFBgZUpzMQTu9.dex.flock (deleted)
  • /data/data/####/OvUQOrC9VJev7U3zqAoQZO29hkffu83y.dex
  • /data/data/####/PCoStKaerW0u5iN7fhF5mFct2j0PkyI8.dex
  • /data/data/####/PCoStKaerW0u5iN7fhF5mFct2j0PkyI8.dex.flock (deleted)
  • /data/data/####/PTynyFVRzjScVWljdx1Yzg994PuRRwOV.dex
  • /data/data/####/QrmEiVQvhWv2V6a4ouognz7i5t0rd0bu.dex
  • /data/data/####/QrmEiVQvhWv2V6a4ouognz7i5t0rd0bu.dex.flock (deleted)
  • /data/data/####/R3nYiDdlvymHCdwZjlkeCVN7pLkiZanw.dex
  • /data/data/####/RBfZkGmyoRkRFJhsc2IRCzmeq2CtUHLX.dex
  • /data/data/####/RBfZkGmyoRkRFJhsc2IRCzmeq2CtUHLX.dex.flock (deleted)
  • /data/data/####/RM7ZdqGXrL0CfLhcsux6EC9UAYjbA22I.dex
  • /data/data/####/RM7ZdqGXrL0CfLhcsux6EC9UAYjbA22I.dex.flock (deleted)
  • /data/data/####/SZiROh2Kkmh5HzXXTzT4f3KrxLedauCt.dex
  • /data/data/####/SZiROh2Kkmh5HzXXTzT4f3KrxLedauCt.dex.flock (deleted)
  • /data/data/####/Ts6h6ldXW2UJE0EQFEGrPDex5DEd0axm.dex
  • /data/data/####/Ts6h6ldXW2UJE0EQFEGrPDex5DEd0axm.dex.flock (deleted)
  • /data/data/####/Tw4fuyhwDzbE5NMaxYdXAPPyoRqn2cUZ.dex
  • /data/data/####/Tw4fuyhwDzbE5NMaxYdXAPPyoRqn2cUZ.dex.flock (deleted)
  • /data/data/####/Ut3gbh1Q1Kim7ElogznKC6tVoixWpawR.dex
  • /data/data/####/Ut3gbh1Q1Kim7ElogznKC6tVoixWpawR.dex.flock (deleted)
  • /data/data/####/V2ivXSw3qbUYJjMYSRAMmfuuswKIMEMp.dex
  • /data/data/####/V2ivXSw3qbUYJjMYSRAMmfuuswKIMEMp.dex.flock (deleted)
  • /data/data/####/VC5N5hQ5O22jl9XTKGY5blKMI98yv7zc.dex
  • /data/data/####/VC5N5hQ5O22jl9XTKGY5blKMI98yv7zc.dex.flock (deleted)
  • /data/data/####/VCc8G9V1EnT36IQO30dE6Zq9meSwLeuF.dex
  • /data/data/####/VCc8G9V1EnT36IQO30dE6Zq9meSwLeuF.dex.flock (deleted)
  • /data/data/####/VdvDdCJt22LpGu47uT7KGv3njFnI1CqX.dex
  • /data/data/####/VdvDdCJt22LpGu47uT7KGv3njFnI1CqX.dex.flock (deleted)
  • /data/data/####/VgR64GasArKNjCf8BIM4EjyYeQbUks8H.dex
  • /data/data/####/VgR64GasArKNjCf8BIM4EjyYeQbUks8H.dex.flock (deleted)
  • /data/data/####/W4sxplO4gAkHtNHm9gkGziV4yDaBUTBj.dex
  • /data/data/####/WIQ2aRFjjXhs0ImZMRvZwOszPqn0JLxU.dex
  • /data/data/####/WIQ2aRFjjXhs0ImZMRvZwOszPqn0JLxU.dex.flock (deleted)
  • /data/data/####/WJo0nvTR7X1742sZDhwIiJSOK0GDqSug.dex
  • /data/data/####/WJo0nvTR7X1742sZDhwIiJSOK0GDqSug.dex.flock (deleted)
  • /data/data/####/WufErqC8aTHGvcsIrb02MYHUK7fHZyR6.dex
  • /data/data/####/WufErqC8aTHGvcsIrb02MYHUK7fHZyR6.dex.flock (deleted)
  • /data/data/####/XDoQAOIEFBBSX6UVACyXZNKi4OCyEFhk.dex
  • /data/data/####/YSXuNQTWqOQtHIBdFfMvsYH8djZyf6wE.dex
  • /data/data/####/YSXuNQTWqOQtHIBdFfMvsYH8djZyf6wE.dex.flock (deleted)
  • /data/data/####/YXEL8uwQKt0Po0OZXis3SSq5Dkv9d1mU.dex
  • /data/data/####/Yg0ZXPbqn8kdtXIZvyO03nP7kFCItjst.dex
  • /data/data/####/Yg0ZXPbqn8kdtXIZvyO03nP7kFCItjst.dex.flock (deleted)
  • /data/data/####/Yy93BMVlDqV6P2XwE7CozuBN9cE5PLGN.dex
  • /data/data/####/Zj1Iwsja5ZrBFrltKbeal6cLBJ7MhrnU.dex
  • /data/data/####/Zj1Iwsja5ZrBFrltKbeal6cLBJ7MhrnU.dex.flock (deleted)
  • /data/data/####/Zj8TCgKN9zEsA9tZkJ28YIiNpk5uiYe2.dex
  • /data/data/####/Zj8TCgKN9zEsA9tZkJ28YIiNpk5uiYe2.dex.flock (deleted)
  • /data/data/####/aghX6UySGiyaZYQe8Ue0hmMwyiLdiLyh.dex
  • /data/data/####/aghX6UySGiyaZYQe8Ue0hmMwyiLdiLyh.dex.flock (deleted)
  • /data/data/####/b5dAU4ViA5IqiOcx0mTyJgOKvlXUGVTL.dex
  • /data/data/####/bx2jah1vGUlhiiasd1Jar7h5b4f9UDU6.dex
  • /data/data/####/bx2jah1vGUlhiiasd1Jar7h5b4f9UDU6.dex.flock (deleted)
  • /data/data/####/bxVSGnBz1BhCi4nIMeaaiz2yRA07wrjV.dex
  • /data/data/####/cQkLr1SxJ6kLy1M7y2Oe7wA3BrXvje5N.dex
  • /data/data/####/cQkLr1SxJ6kLy1M7y2Oe7wA3BrXvje5N.dex.flock (deleted)
  • /data/data/####/coTaourgybORb2JW5vszS6BqCYe7lKxN.dex
  • /data/data/####/coTaourgybORb2JW5vszS6BqCYe7lKxN.dex.flock (deleted)
  • /data/data/####/eeHaHxfvnEO5CcAz9l0U4MEWfeJ9VEpM.dex
  • /data/data/####/eeHaHxfvnEO5CcAz9l0U4MEWfeJ9VEpM.dex.flock (deleted)
  • /data/data/####/fGvscly2W3NuIIDR5Zi57Hd8NMD9ysx4.dex
  • /data/data/####/fk1qEPneCwsvu9IwXIuyuGkikFn0r7NQ.dex
  • /data/data/####/fk1qEPneCwsvu9IwXIuyuGkikFn0r7NQ.dex.flock (deleted)
  • /data/data/####/g0VYg59eRfBg5ENqyAbWOhGWEn8QSuOu.dex
  • /data/data/####/g11FYkfxIeaFA8LhXEDWTC23ejmn12iH.dex
  • /data/data/####/hoX2fZFEPgjujmS5MgSfRz6OfR9LabBP.dex
  • /data/data/####/hoX2fZFEPgjujmS5MgSfRz6OfR9LabBP.dex.flock (deleted)
  • /data/data/####/jNfEoSct9hbpljx6W1sjjvsiF1Kw58W8.dex
  • /data/data/####/jNfEoSct9hbpljx6W1sjjvsiF1Kw58W8.dex.flock (deleted)
  • /data/data/####/kU1hHK5nWhskcUI8GI65fUmYMrH5kvdM.dex
  • /data/data/####/kU1hHK5nWhskcUI8GI65fUmYMrH5kvdM.dex.flock (deleted)
  • /data/data/####/lAjr6wa8SboO1c2YifEi9dDPZKWHL2iK.dex
  • /data/data/####/lAjr6wa8SboO1c2YifEi9dDPZKWHL2iK.dex.flock (deleted)
  • /data/data/####/lnIC2wfXIKAtiwyjeD8Edbg9COjuqDtH.dex
  • /data/data/####/lnIC2wfXIKAtiwyjeD8Edbg9COjuqDtH.dex.flock (deleted)
  • /data/data/####/mEDL1KmvG5L5uojoZA5dbrUFRfglgw3S.dex
  • /data/data/####/mEDL1KmvG5L5uojoZA5dbrUFRfglgw3S.dex.flock (deleted)
  • /data/data/####/macaenGrbH690myRIASe3nJVc1UJjEIp.dex
  • /data/data/####/macaenGrbH690myRIASe3nJVc1UJjEIp.dex.flock (deleted)
  • /data/data/####/mrtXrEiGEnM37FMLtLYvC7Kod2stJ448.dex
  • /data/data/####/mrtXrEiGEnM37FMLtLYvC7Kod2stJ448.dex.flock (deleted)
  • /data/data/####/ngR7ARH6LNcPbXBdMNHwgqFXjsQXaouK.dex
  • /data/data/####/ngR7ARH6LNcPbXBdMNHwgqFXjsQXaouK.dex.flock (deleted)
  • /data/data/####/nucO3yziPtp9SS7MyM6yhBW0NYPNPFaV.dex
  • /data/data/####/nucO3yziPtp9SS7MyM6yhBW0NYPNPFaV.dex.flock (deleted)
  • /data/data/####/o3eJqPtzKaTdgckRtW3IapYJzANaO92r.dex
  • /data/data/####/o3eJqPtzKaTdgckRtW3IapYJzANaO92r.dex.flock (deleted)
  • /data/data/####/o9BheQebyZKYgzMbVfG9mpPTrWvFciqF.dex
  • /data/data/####/o9BheQebyZKYgzMbVfG9mpPTrWvFciqF.dex.flock (deleted)
  • /data/data/####/oR95c280tIGLXpPVBj53jXWOZKiBN0Mz.dex
  • /data/data/####/oR95c280tIGLXpPVBj53jXWOZKiBN0Mz.dex.flock (deleted)
  • /data/data/####/pqxz6XEqKENgoDnQcRvHK6e2xz6FMQ9K.dex
  • /data/data/####/pqxz6XEqKENgoDnQcRvHK6e2xz6FMQ9K.dex.flock (deleted)
  • /data/data/####/puwzik90GVBDC8xsP1gdDBzIp71SlGEs.dex
  • /data/data/####/pxyTEwiujZp4ePDEcZLaX2ULimUQMAFC.dex
  • /data/data/####/rCWBSf84XHFTUFbd8t9LCTFFiiO0mqfQ.dex
  • /data/data/####/rCWBSf84XHFTUFbd8t9LCTFFiiO0mqfQ.dex.flock (deleted)
  • /data/data/####/rOZq7GS7Yez4u3syyF8v4G435BEScuow.dex
  • /data/data/####/rOZq7GS7Yez4u3syyF8v4G435BEScuow.dex.flock (deleted)
  • /data/data/####/rZ2LJHERLjys1C35qZk99GuEniqB50x2.dex
  • /data/data/####/rZ2LJHERLjys1C35qZk99GuEniqB50x2.dex.flock (deleted)
  • /data/data/####/rq4LWqPwDC41zwyjTndJxmSRpNlRtBBM.dex
  • /data/data/####/rq4LWqPwDC41zwyjTndJxmSRpNlRtBBM.dex.flock (deleted)
  • /data/data/####/sVC1o2io6bqBKGaCwHdro9Z3Ie5PbBvR.dex
  • /data/data/####/suQ24P2iuqhYNG0kZIIerbTUCcHjV7K9.dex
  • /data/data/####/suQ24P2iuqhYNG0kZIIerbTUCcHjV7K9.dex.flock (deleted)
  • /data/data/####/svj5iGLjYu12oYfWpBIdu1Yf95OCkDRu.dex
  • /data/data/####/svj5iGLjYu12oYfWpBIdu1Yf95OCkDRu.dex.flock (deleted)
  • /data/data/####/tJgru7momXqI1io9sFicecVWfVKUTLlL.dex
  • /data/data/####/txOGLkBjrT1mtXknasxEg36SWNkCIhKV.dex
  • /data/data/####/txOGLkBjrT1mtXknasxEg36SWNkCIhKV.dex.flock (deleted)
  • /data/data/####/uIh8covKiIdiwMB1jUJOYTYi5lUZCeog.dex
  • /data/data/####/uIh8covKiIdiwMB1jUJOYTYi5lUZCeog.dex.flock (deleted)
  • /data/data/####/uypRvg7czjhdPrxYPpJTRoTu5QAvf7Yi.dex
  • /data/data/####/vJ2Z0AZzS5RzXChfs7ahlmm6ZmZnucfK.dex
  • /data/data/####/vJ2Z0AZzS5RzXChfs7ahlmm6ZmZnucfK.dex.flock (deleted)
  • /data/data/####/vPh0gobNzwUALvvXtwVJaihG0VaNEAa9.dex
  • /data/data/####/vPh0gobNzwUALvvXtwVJaihG0VaNEAa9.dex.flock (deleted)
  • /data/data/####/vilTxC4jtxf0VRIxOrWt41twVI9ZIFTs.dex
  • /data/data/####/vilTxC4jtxf0VRIxOrWt41twVI9ZIFTs.dex.flock (deleted)
  • /data/data/####/wCCWyFZTA95UnfMRD4u1CB3BPlrtAiCz.dex
  • /data/data/####/wCCWyFZTA95UnfMRD4u1CB3BPlrtAiCz.dex.flock (deleted)
  • /data/data/####/wGBsiRNvxLzNHq1oVN4uvHcePv3c5yid.dex
  • /data/data/####/xij8jfcc824jSLZkHGyBzfNaZGnjQ7hM.dex
  • /data/data/####/xij8jfcc824jSLZkHGyBzfNaZGnjQ7hM.dex.flock (deleted)
  • /data/data/####/xtmm2z06GzUgqoydyXq5UEAuU1sHoXxW.dex
  • /data/data/####/xtmm2z06GzUgqoydyXq5UEAuU1sHoXxW.dex.flock (deleted)
  • /data/data/####/yooxlTfmR1e9plI3017OR1TCyyT43EJu.dex
  • /data/data/####/yooxlTfmR1e9plI3017OR1TCyyT43EJu.dex.flock (deleted)
  • /data/data/####/z26QDgiJZ14LV84oSVzgzCJT2xvhNC4m.dex
  • /data/data/####/z26QDgiJZ14LV84oSVzgzCJT2xvhNC4m.dex.flock (deleted)
  • /data/data/####/zESeirJz6CxZKQLRQi6eHRKLhl5dZ8Qn.dex
  • /data/data/####/zESeirJz6CxZKQLRQi6eHRKLhl5dZ8Qn.dex.flock (deleted)
  • /data/data/####/znnA3J4Ii9YR5wcFWXbrlyWJNbrfRUsw.dex
  • /data/data/####/znnA3J4Ii9YR5wcFWXbrlyWJNbrfRUsw.dex.flock (deleted)
  • /data/data/####/zv5u9jRe8XwyE1K3HWnP6jiQffWfPXmB.dex
  • /data/data/####/zv5u9jRe8XwyE1K3HWnP6jiQffWfPXmB.dex.flock (deleted)
  • /data/misc/####/primary.prof
Miscellaneous:
Executes the following shell scripts:
  • logcat
  • logcat -c
  • rm -r/data/user/0/<Package>/app_ded/06BOVw5wASjCCMroJT1IkdwNqMNRQw8r.dex
  • rm -r/data/user/0/<Package>/app_ded/0Ho061LXpNY8EKApdOyJU1hHy8XmNJO4.dex
  • rm -r/data/user/0/<Package>/app_ded/1IVMKje0kVZ2VkY9zvxbXeHl6uKycWIi.dex
  • rm -r/data/user/0/<Package>/app_ded/1WkSv9kKvz0ZGixft9zmmYaWoCGntNR9.dex
  • rm -r/data/user/0/<Package>/app_ded/1bOj4BHYYrO7PVIsbzF6R3Q58nlq6dMC.dex
  • rm -r/data/user/0/<Package>/app_ded/1gBVnBx1zNCGpvOD2E4J3ftxyJL2tdoX.dex
  • rm -r/data/user/0/<Package>/app_ded/2dphkGDARZW9yKBW4VCXEDidsKsa8Nz6.dex
  • rm -r/data/user/0/<Package>/app_ded/2iEg1XCDuQOqQD5ngsQdxEhGx14WVP1Q.dex
  • rm -r/data/user/0/<Package>/app_ded/33GAeMWGWAJ81XSudynWTq16fyN4kjuY.dex
  • rm -r/data/user/0/<Package>/app_ded/3P6cT1Bh1LT2QNVYozAgkhR2TsXotI5W.dex
  • rm -r/data/user/0/<Package>/app_ded/46jwHVq3buurNVTPKiJbMBCrCYmYZXTg.dex
  • rm -r/data/user/0/<Package>/app_ded/4R2xthe3FD3c7GUZKiIfMbywaTJFhGbp.dex
  • rm -r/data/user/0/<Package>/app_ded/5Jzu7vMbnuBLuVrLRhT7LZmam8v9Ai0o.dex
  • rm -r/data/user/0/<Package>/app_ded/5i3Yc7yf4Ve1uU72T68zDO70imP3gQmX.dex
  • rm -r/data/user/0/<Package>/app_ded/69ANEWtuR1kc70pR2yXiAGAzDtN82ahh.dex
  • rm -r/data/user/0/<Package>/app_ded/6ZnCh8WeOBul9jkfbX1xBNAoruY3N6X9.dex
  • rm -r/data/user/0/<Package>/app_ded/6go4t8h13lj1LBRE7uL1nhCEuNFYEQ25.dex
  • rm -r/data/user/0/<Package>/app_ded/7IqY4qRwlgLFYFL2fwFJah4KMC9DlQwy.dex
  • rm -r/data/user/0/<Package>/app_ded/7QLxXv446qeLoR7nClMoO9oeQ0caKHfW.dex
  • rm -r/data/user/0/<Package>/app_ded/7TDVeOfIghuzWH1djnOYXpn3QI0QGadD.dex
  • rm -r/data/user/0/<Package>/app_ded/7v4XxkAFBklP4waX3Rr7NfuZfTxVk1F6.dex
  • rm -r/data/user/0/<Package>/app_ded/7wt9S9Q8SgZC3Z3sxoUrRpnYHyQBzOk1.dex
  • rm -r/data/user/0/<Package>/app_ded/99aS1WzTDEtOjnWFItfaWQac9IxXsgDH.dex
  • rm -r/data/user/0/<Package>/app_ded/9T2batSHkIIK1jXZvz7px6lFaLRBOP2a.dex
  • rm -r/data/user/0/<Package>/app_ded/9cnEtxxn4nksHFRymsfes1ZDJak6iRTl.dex
  • rm -r/data/user/0/<Package>/app_ded/AtvipLvMQtHe1TbkxMgRKugMBdtSEKaT.dex
  • rm -r/data/user/0/<Package>/app_ded/BJjWreThHsLoHO7kwGP52MzhvHRcxa1K.dex
  • rm -r/data/user/0/<Package>/app_ded/BtPjXpfryvjJgskSvozjjrDbXV4P1xW3.dex
  • rm -r/data/user/0/<Package>/app_ded/CcnyHTSXB1LZkwbSDcfN7XkV1WigovkP.dex
  • rm -r/data/user/0/<Package>/app_ded/DBePkQTbTw0g4rTOh2XNM99CWzIyhPSn.dex
  • rm -r/data/user/0/<Package>/app_ded/EN0xBlOMgLz4Jg7c3DU6LvoZNbVezymP.dex
  • rm -r/data/user/0/<Package>/app_ded/Et2ZiZLxp0fyiW0IbbpNYGaxGgF0Wh3r.dex
  • rm -r/data/user/0/<Package>/app_ded/FMD3sLBZ1esk9Rvk8UlKnrfpeBzMQIw5.dex
  • rm -r/data/user/0/<Package>/app_ded/GqQcrSiM2oiibIBnLgtPdPe1ejv2zkBk.dex
  • rm -r/data/user/0/<Package>/app_ded/HjjRXRqPyYrzC1brwLYBP4UH5vsOUmgR.dex
  • rm -r/data/user/0/<Package>/app_ded/J3ED6vVKqNa02pcgqB28CPR7GzuM5Yk1.dex
  • rm -r/data/user/0/<Package>/app_ded/JHCbuRzHhUIxr8pyCqzLQ3bNWBlFYorr.dex
  • rm -r/data/user/0/<Package>/app_ded/JIehg9mGwv6i2DEkGKYCq5X4S11r3jjT.dex
  • rm -r/data/user/0/<Package>/app_ded/JvB6sCfIr8iaEDCMy5EvLDtjLOQM33tF.dex
  • rm -r/data/user/0/<Package>/app_ded/KPFheXjfHG6JjA8ARKBMtM8WchDd1Nnj.dex
  • rm -r/data/user/0/<Package>/app_ded/KVclYmg1UgH2pVHjUU4e1nxoBz6vAhNX.dex
  • rm -r/data/user/0/<Package>/app_ded/Lb3KNlucwaimruIAQupGFjuvBwANHvOp.dex
  • rm -r/data/user/0/<Package>/app_ded/M2CaBEs5Y17zvHsAeDOvk5kWIgen2HMm.dex
  • rm -r/data/user/0/<Package>/app_ded/M4qPsgLkoA9o2vfJMegzlrVkuze3VfVs.dex
  • rm -r/data/user/0/<Package>/app_ded/MoPYqyOyEnGJ4w5eiJfgI3iEohJMD2Eh.dex
  • rm -r/data/user/0/<Package>/app_ded/MvHRWVLrfAcrJNQgJWtaHv9uxPmxbALl.dex
  • rm -r/data/user/0/<Package>/app_ded/N8AlI83ohMJ1PXBXUMqwonomJn1KvuuC.dex
  • rm -r/data/user/0/<Package>/app_ded/NQGHyCMQR9mAkQ9zUJKq7WzgM0MoMtTQ.dex
  • rm -r/data/user/0/<Package>/app_ded/OfmwelAsSvXvJR9T7JTFFBgZUpzMQTu9.dex
  • rm -r/data/user/0/<Package>/app_ded/OvUQOrC9VJev7U3zqAoQZO29hkffu83y.dex
  • rm -r/data/user/0/<Package>/app_ded/PCoStKaerW0u5iN7fhF5mFct2j0PkyI8.dex
  • rm -r/data/user/0/<Package>/app_ded/PTynyFVRzjScVWljdx1Yzg994PuRRwOV.dex
  • rm -r/data/user/0/<Package>/app_ded/QrmEiVQvhWv2V6a4ouognz7i5t0rd0bu.dex
  • rm -r/data/user/0/<Package>/app_ded/R3nYiDdlvymHCdwZjlkeCVN7pLkiZanw.dex
  • rm -r/data/user/0/<Package>/app_ded/RBfZkGmyoRkRFJhsc2IRCzmeq2CtUHLX.dex
  • rm -r/data/user/0/<Package>/app_ded/RM7ZdqGXrL0CfLhcsux6EC9UAYjbA22I.dex
  • rm -r/data/user/0/<Package>/app_ded/SZiROh2Kkmh5HzXXTzT4f3KrxLedauCt.dex
  • rm -r/data/user/0/<Package>/app_ded/Ts6h6ldXW2UJE0EQFEGrPDex5DEd0axm.dex
  • rm -r/data/user/0/<Package>/app_ded/Tw4fuyhwDzbE5NMaxYdXAPPyoRqn2cUZ.dex
  • rm -r/data/user/0/<Package>/app_ded/Ut3gbh1Q1Kim7ElogznKC6tVoixWpawR.dex
  • rm -r/data/user/0/<Package>/app_ded/V2ivXSw3qbUYJjMYSRAMmfuuswKIMEMp.dex
  • rm -r/data/user/0/<Package>/app_ded/VC5N5hQ5O22jl9XTKGY5blKMI98yv7zc.dex
  • rm -r/data/user/0/<Package>/app_ded/VCc8G9V1EnT36IQO30dE6Zq9meSwLeuF.dex
  • rm -r/data/user/0/<Package>/app_ded/VdvDdCJt22LpGu47uT7KGv3njFnI1CqX.dex
  • rm -r/data/user/0/<Package>/app_ded/VgR64GasArKNjCf8BIM4EjyYeQbUks8H.dex
  • rm -r/data/user/0/<Package>/app_ded/W4sxplO4gAkHtNHm9gkGziV4yDaBUTBj.dex
  • rm -r/data/user/0/<Package>/app_ded/WIQ2aRFjjXhs0ImZMRvZwOszPqn0JLxU.dex
  • rm -r/data/user/0/<Package>/app_ded/WJo0nvTR7X1742sZDhwIiJSOK0GDqSug.dex
  • rm -r/data/user/0/<Package>/app_ded/WufErqC8aTHGvcsIrb02MYHUK7fHZyR6.dex
  • rm -r/data/user/0/<Package>/app_ded/XDoQAOIEFBBSX6UVACyXZNKi4OCyEFhk.dex
  • rm -r/data/user/0/<Package>/app_ded/YSXuNQTWqOQtHIBdFfMvsYH8djZyf6wE.dex
  • rm -r/data/user/0/<Package>/app_ded/YXEL8uwQKt0Po0OZXis3SSq5Dkv9d1mU.dex
  • rm -r/data/user/0/<Package>/app_ded/Yg0ZXPbqn8kdtXIZvyO03nP7kFCItjst.dex
  • rm -r/data/user/0/<Package>/app_ded/Yy93BMVlDqV6P2XwE7CozuBN9cE5PLGN.dex
  • rm -r/data/user/0/<Package>/app_ded/Zj1Iwsja5ZrBFrltKbeal6cLBJ7MhrnU.dex
  • rm -r/data/user/0/<Package>/app_ded/Zj8TCgKN9zEsA9tZkJ28YIiNpk5uiYe2.dex
  • rm -r/data/user/0/<Package>/app_ded/aghX6UySGiyaZYQe8Ue0hmMwyiLdiLyh.dex
  • rm -r/data/user/0/<Package>/app_ded/b5dAU4ViA5IqiOcx0mTyJgOKvlXUGVTL.dex
  • rm -r/data/user/0/<Package>/app_ded/bx2jah1vGUlhiiasd1Jar7h5b4f9UDU6.dex
  • rm -r/data/user/0/<Package>/app_ded/bxVSGnBz1BhCi4nIMeaaiz2yRA07wrjV.dex
  • rm -r/data/user/0/<Package>/app_ded/cQkLr1SxJ6kLy1M7y2Oe7wA3BrXvje5N.dex
  • rm -r/data/user/0/<Package>/app_ded/coTaourgybORb2JW5vszS6BqCYe7lKxN.dex
  • rm -r/data/user/0/<Package>/app_ded/eeHaHxfvnEO5CcAz9l0U4MEWfeJ9VEpM.dex
  • rm -r/data/user/0/<Package>/app_ded/fGvscly2W3NuIIDR5Zi57Hd8NMD9ysx4.dex
  • rm -r/data/user/0/<Package>/app_ded/fk1qEPneCwsvu9IwXIuyuGkikFn0r7NQ.dex
  • rm -r/data/user/0/<Package>/app_ded/g0VYg59eRfBg5ENqyAbWOhGWEn8QSuOu.dex
  • rm -r/data/user/0/<Package>/app_ded/g11FYkfxIeaFA8LhXEDWTC23ejmn12iH.dex
  • rm -r/data/user/0/<Package>/app_ded/hoX2fZFEPgjujmS5MgSfRz6OfR9LabBP.dex
  • rm -r/data/user/0/<Package>/app_ded/jNfEoSct9hbpljx6W1sjjvsiF1Kw58W8.dex
  • rm -r/data/user/0/<Package>/app_ded/kU1hHK5nWhskcUI8GI65fUmYMrH5kvdM.dex
  • rm -r/data/user/0/<Package>/app_ded/lAjr6wa8SboO1c2YifEi9dDPZKWHL2iK.dex
  • rm -r/data/user/0/<Package>/app_ded/lnIC2wfXIKAtiwyjeD8Edbg9COjuqDtH.dex
  • rm -r/data/user/0/<Package>/app_ded/mEDL1KmvG5L5uojoZA5dbrUFRfglgw3S.dex
  • rm -r/data/user/0/<Package>/app_ded/macaenGrbH690myRIASe3nJVc1UJjEIp.dex
  • rm -r/data/user/0/<Package>/app_ded/mrtXrEiGEnM37FMLtLYvC7Kod2stJ448.dex
  • rm -r/data/user/0/<Package>/app_ded/ngR7ARH6LNcPbXBdMNHwgqFXjsQXaouK.dex
  • rm -r/data/user/0/<Package>/app_ded/nucO3yziPtp9SS7MyM6yhBW0NYPNPFaV.dex
  • rm -r/data/user/0/<Package>/app_ded/o3eJqPtzKaTdgckRtW3IapYJzANaO92r.dex
  • rm -r/data/user/0/<Package>/app_ded/o9BheQebyZKYgzMbVfG9mpPTrWvFciqF.dex
  • rm -r/data/user/0/<Package>/app_ded/oR95c280tIGLXpPVBj53jXWOZKiBN0Mz.dex
  • rm -r/data/user/0/<Package>/app_ded/pqxz6XEqKENgoDnQcRvHK6e2xz6FMQ9K.dex
  • rm -r/data/user/0/<Package>/app_ded/puwzik90GVBDC8xsP1gdDBzIp71SlGEs.dex
  • rm -r/data/user/0/<Package>/app_ded/pxyTEwiujZp4ePDEcZLaX2ULimUQMAFC.dex
  • rm -r/data/user/0/<Package>/app_ded/rCWBSf84XHFTUFbd8t9LCTFFiiO0mqfQ.dex
  • rm -r/data/user/0/<Package>/app_ded/rOZq7GS7Yez4u3syyF8v4G435BEScuow.dex
  • rm -r/data/user/0/<Package>/app_ded/rZ2LJHERLjys1C35qZk99GuEniqB50x2.dex
  • rm -r/data/user/0/<Package>/app_ded/rq4LWqPwDC41zwyjTndJxmSRpNlRtBBM.dex
  • rm -r/data/user/0/<Package>/app_ded/sVC1o2io6bqBKGaCwHdro9Z3Ie5PbBvR.dex
  • rm -r/data/user/0/<Package>/app_ded/suQ24P2iuqhYNG0kZIIerbTUCcHjV7K9.dex
  • rm -r/data/user/0/<Package>/app_ded/svj5iGLjYu12oYfWpBIdu1Yf95OCkDRu.dex
  • rm -r/data/user/0/<Package>/app_ded/tJgru7momXqI1io9sFicecVWfVKUTLlL.dex
  • rm -r/data/user/0/<Package>/app_ded/txOGLkBjrT1mtXknasxEg36SWNkCIhKV.dex
  • rm -r/data/user/0/<Package>/app_ded/uIh8covKiIdiwMB1jUJOYTYi5lUZCeog.dex
  • rm -r/data/user/0/<Package>/app_ded/uypRvg7czjhdPrxYPpJTRoTu5QAvf7Yi.dex
  • rm -r/data/user/0/<Package>/app_ded/vJ2Z0AZzS5RzXChfs7ahlmm6ZmZnucfK.dex
  • rm -r/data/user/0/<Package>/app_ded/vPh0gobNzwUALvvXtwVJaihG0VaNEAa9.dex
  • rm -r/data/user/0/<Package>/app_ded/vilTxC4jtxf0VRIxOrWt41twVI9ZIFTs.dex
  • rm -r/data/user/0/<Package>/app_ded/wCCWyFZTA95UnfMRD4u1CB3BPlrtAiCz.dex
  • rm -r/data/user/0/<Package>/app_ded/wGBsiRNvxLzNHq1oVN4uvHcePv3c5yid.dex
  • rm -r/data/user/0/<Package>/app_ded/xij8jfcc824jSLZkHGyBzfNaZGnjQ7hM.dex
  • rm -r/data/user/0/<Package>/app_ded/xtmm2z06GzUgqoydyXq5UEAuU1sHoXxW.dex
  • rm -r/data/user/0/<Package>/app_ded/yooxlTfmR1e9plI3017OR1TCyyT43EJu.dex
  • rm -r/data/user/0/<Package>/app_ded/z26QDgiJZ14LV84oSVzgzCJT2xvhNC4m.dex
  • rm -r/data/user/0/<Package>/app_ded/zESeirJz6CxZKQLRQi6eHRKLhl5dZ8Qn.dex
  • rm -r/data/user/0/<Package>/app_ded/znnA3J4Ii9YR5wcFWXbrlyWJNbrfRUsw.dex
  • rm -r/data/user/0/<Package>/app_ded/zv5u9jRe8XwyE1K3HWnP6jiQffWfPXmB.dex
Uses the following algorithms to decrypt data:
  • AES
  • AES-ECB-PKCS5Padding
Uses special library to hide executable bytecode.
Displays its own windows over windows of other apps.
Appears corrupted in a way typical for malicious files.
Uses a packer.

Curing recommendations

Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android

Free trial

14 days

Download now
Get it on Google Play