Android.Locker.17092

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Locker.14669

Network activity:

Connects to:

UDP(DNS) 8####.8.4.4:53
TCP(TLS/1.0) pla####.google####.com:443
TCP(TLS/1.0) www.googlet####.com:443
TCP(TLS/1.0) and####.google####.com:443
TCP(TLS/1.0) www.por####.com:443
TCP(TLS/1.0) rr9---s####.g####.com:443
TCP(TLS/1.0) h####.por####.com:443
TCP(TLS/1.0) hw-####.a####.com:443
TCP(TLS/1.0) di.ph####.com:443
TCP(TLS/1.0) www.google-####.com:443
TCP(TLS/1.0) st####.traffic####.com:443
TCP(TLS/1.0) cdn1-sm####.ph####.com:443
TCP(TLS/1.0) sto####.google####.com:443
TCP(TLS/1.0) www.go####.ru:443
TCP(TLS/1.0) s####.g.doublec####.net:443
TCP(TLS/1.0) www.go####.com:443
TCP(TLS/1.0) gmscomp####.google####.com:443
TCP(TLS/1.0) ht-####.a####.com:443
TCP(TLS/1.0) c####.traffic####.net:443
TCP(TLS/1.0) 64.2####.165.94:443
TCP(TLS/1.0) ads.traffic####.net:443
TCP(TLS/1.0) and####.a####.go####.com:443
TCP(TLS/1.2) and####.google####.com:443
TCP(TLS/1.2) 64.2####.165.94:443

DNS requests:

ads.traffic####.net
and####.a####.go####.com
and####.google####.com
c####.traffic####.net
cdn1-sm####.ph####.com
di.ph####.com
ei.ph####.com
gmscomp####.google####.com
h####.por####.com
ht-####.a####.com
hw-####.a####.com
m####.traffic####.net
p####.google####.com
pla####.google####.com
rr9---s####.g####.com
s####.g.doublec####.net
st####.traffic####.com
sto####.google####.com
www.go####.com
www.go####.ru
www.google-####.com
www.googlet####.com
www.por####.com

File system changes:

Creates the following files:

/data/data/####/010ecdd7f757cc0a_0
/data/data/####/01a654c1bdc5fff9_0 (deleted)
/data/data/####/05664e76d9bf6327_0
/data/data/####/067d7abb805b3efc_0
/data/data/####/070aa77e5d65e305_0
/data/data/####/070aa77e5d65e305_1
/data/data/####/0833f7406b6eec20_0
/data/data/####/0884d16d57d0c6fd_0 (deleted)
/data/data/####/09d0084e76424ead_0
/data/data/####/0a364fb28e1eff70_0
/data/data/####/0a364fb28e1eff70_1
/data/data/####/0ae9a3f9c5203aa6_0
/data/data/####/0ae9a3f9c5203aa6_1
/data/data/####/0bf0e1635828d3d8_0
/data/data/####/0bf0e1635828d3d8_1
/data/data/####/0c69aa4502de7af0_0
/data/data/####/0ff4131fe7612eca_0
/data/data/####/0ff4131fe7612eca_1
/data/data/####/126756f5a75642b6_0
/data/data/####/12a6ab2820351259_0
/data/data/####/13e77088e80af0e8_0
/data/data/####/13e77088e80af0e8_1
/data/data/####/14d79d7c7fcb8f45_0
/data/data/####/1669e3da9d79df7b_0
/data/data/####/1669e3da9d79df7b_1
/data/data/####/16d186b3a3894127_0
/data/data/####/1967e707b3c04d73_0
/data/data/####/1967e707b3c04d73_1
/data/data/####/19b41c20310f10a7_0
/data/data/####/1b6e9b5d04cfed34_0
/data/data/####/1bcb41b4a923461e_0
/data/data/####/1c1299e5c689e5ee_0 (deleted)
/data/data/####/1e37eb465e0549d7_0
/data/data/####/1e981be410ad3e82_0
/data/data/####/2031327907ac88bf_0
/data/data/####/218770cf9ca4f9ee_0
/data/data/####/218770cf9ca4f9ee_1
/data/data/####/21d85e19c67d5a8e_0
/data/data/####/21d85e19c67d5a8e_1
/data/data/####/266cc7c77443963e_0
/data/data/####/269ff796c00398b0_0
/data/data/####/27c057cf3890b426_0
/data/data/####/27c057cf3890b426_1
/data/data/####/2860dc93b4cfb2a3_0 (deleted)
/data/data/####/2940195bd9870d6e_0
/data/data/####/2940195bd9870d6e_1
/data/data/####/2ab8157d7a1def83_0
/data/data/####/2cc80dabc69f58b6_0
/data/data/####/2ee6b6b9a4f843fb_0
/data/data/####/321ad7f95734c643_0
/data/data/####/33474d826c1f993c_0
/data/data/####/361c256ce6b58de0_0
/data/data/####/3778c3ff3510e7c2_0
/data/data/####/3c96b701ae899182_0
/data/data/####/3c96b701ae899182_1
/data/data/####/3cc0949a5a8fd8b1_0
/data/data/####/3ea4d78ea985ea67_0
/data/data/####/3f621d096d9c64be_0
/data/data/####/3fd1fd564fc410df_0
/data/data/####/40d88253e1f1735d_0
/data/data/####/41bf9ce91dcebcbb_0
/data/data/####/449392ba01b08bd1_0
/data/data/####/449392ba01b08bd1_1
/data/data/####/466c5c49727cc3f0_0 (deleted)
/data/data/####/4a59016d0dcf0ddb_0
/data/data/####/4cb013792b196a35_0
/data/data/####/4cb013792b196a35_1
/data/data/####/4df40d561c0d5eaa_0 (deleted)
/data/data/####/4ed92342b9895a0f_0
/data/data/####/4ed92342b9895a0f_1
/data/data/####/50211c4932d1a498_0
/data/data/####/5066de7e0c94c9d7_0 (deleted)
/data/data/####/5281ca23c5fef453_0 (deleted)
/data/data/####/5308995aae9ad2b4_0
/data/data/####/5471e7a284fc5507_0
/data/data/####/555da28c4c73a5fe_0
/data/data/####/598a4a1ab5ab975f_0
/data/data/####/599b35d13bbaa3c5_0 (deleted)
/data/data/####/59fd252bcfa09174_0
/data/data/####/5a0801f6295d125b_0
/data/data/####/5a0801f6295d125b_1
/data/data/####/5feb0f9211927912_0
/data/data/####/5feb0f9211927912_s
/data/data/####/6055739c46dc0606_0 (deleted)
/data/data/####/60560c5a4803c975_0
/data/data/####/62c7a4b13f61aac3_0
/data/data/####/64508fa1cd46b0ab_0
/data/data/####/64508fa1cd46b0ab_1
/data/data/####/66e7834481663201_0
/data/data/####/66e7834481663201_1
/data/data/####/68ce1e307bf6c7d8_0 (deleted)
/data/data/####/68d7e2986731e026_0
/data/data/####/70581d51d66684be_0 (deleted)
/data/data/####/7127c9c9190204a3_0
/data/data/####/71d99333ec368148_0
/data/data/####/7262016a0d4dbcc4_0
/data/data/####/7312246a81cfd32a_0
/data/data/####/73213844b17a913c_0 (deleted)
/data/data/####/74df6687d05cd653_0
/data/data/####/7578e3005f3e8f14_0
/data/data/####/7578e3005f3e8f14_1
/data/data/####/76877a1c78822101_0
/data/data/####/76cddc0a786c579a_0
/data/data/####/77848f41-f6e7-41ae-9ce6-2eb24ac5c447.dex
/data/data/####/77848f41-f6e7-41ae-9ce6-2eb24ac5c447.dex.flock (deleted)
/data/data/####/78a9b712b29c7854_0 (deleted)
/data/data/####/7bd51ff9561e7667_0
/data/data/####/7dfc13848f60f7c7_0
/data/data/####/7efd8e143965e24a_0
/data/data/####/7f24b0d5be58b560_0
/data/data/####/825bc3c7a1e4fc7d_0
/data/data/####/83a9fded185f75a1_0
/data/data/####/849785b1865d8cb1_0
/data/data/####/867c2b140020ba6b_0
/data/data/####/86d3b46624781641_0
/data/data/####/8888bac454c36fa6_0
/data/data/####/8888bac454c36fa6_1
/data/data/####/8ac9d3a7390a74a6_0
/data/data/####/8b7b060da2a656f3_0
/data/data/####/8bc86a93b8b5df78_0
/data/data/####/8ce11f48c931b399_0
/data/data/####/8fd2f70bbfccfc6a_0
/data/data/####/8ff8b74fc2748c78_0
/data/data/####/90eb6d837373ec61_0
/data/data/####/91b90d73f2432127_0
/data/data/####/92b526f89adc5a02_0
/data/data/####/9402ef73a016ffbb_0
/data/data/####/95cae56d052c205b_0
/data/data/####/97b10677c2e04a23_0
/data/data/####/9985b73fe43df337_0
/data/data/####/9c9bc9ef188b0158_0
/data/data/####/9c9bc9ef188b0158_1
/data/data/####/9d279593b46c2cf5_0
/data/data/####/9f517f2ec82e9638_0
/data/data/####/CURRENT
/data/data/####/Cookies-journal
/data/data/####/Databases.db-journal
/data/data/####/KrMgvvSGv.dex
/data/data/####/KrMgvvSGv.dex.flock (deleted)
/data/data/####/MANIFEST-000001
/data/data/####/QuotaManager-journal
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/ZJRyT.dex
/data/data/####/a16286f21165fcea_0
/data/data/####/a19385f7808f8ab6_0
/data/data/####/a1a0eb390b604316_0
/data/data/####/a1a0eb390b604316_1
/data/data/####/a3942eaf3e979daa_0
/data/data/####/a3f1216233de2a7d_0
/data/data/####/a6970594f22c94d6_0 (deleted)
/data/data/####/a7553bd288b21cd5_0
/data/data/####/a79b0549e403ba20_0
/data/data/####/a8c010a368b210f1_0 (deleted)
/data/data/####/a9648c9aa08b767a_0
/data/data/####/a964c902f1f31db2_0
/data/data/####/a9d56e07f351f496_0
/data/data/####/ad7ad3ff71727a97_0
/data/data/####/afb96035144090b5_0
/data/data/####/b1d30e9999a18703_0
/data/data/####/b1d30e9999a18703_1
/data/data/####/b2575f6ecf380ef9_0
/data/data/####/b32bda7bd06ff1e1_0
/data/data/####/b36fcf8ca8044089_0 (deleted)
/data/data/####/b3d2d620c1440cf8_0
/data/data/####/b4b00f8e3e1321d2_0
/data/data/####/b7044a9fdd8524ef_0
/data/data/####/b9616ccad3e5ea20_0
/data/data/####/be600e85cf558d7e_0
/data/data/####/c3744a9c671198ea_0
/data/data/####/cb7c2ba667649b8d_0
/data/data/####/cc136009b8307ff6_0 (deleted)
/data/data/####/ce06f62cedb24bb8_0
/data/data/####/ce5fae75c8f3c5d9_0
/data/data/####/cee04a2b23fbc712_0
/data/data/####/cff76df29a0a0bdc_0
/data/data/####/com.prjcfemy_preferences.xml
/data/data/####/d25adc0c-9a64-4145-ad3a-c56599a85f58.dex
/data/data/####/d25adc0c-9a64-4145-ad3a-c56599a85f58.dex.flock (deleted)
/data/data/####/d3fb440f7c4dfd5c_0
/data/data/####/d3fb440f7c4dfd5c_1
/data/data/####/d5fbccc6d9459b17_0
/data/data/####/d6cc96371574efdb_0
/data/data/####/d8e4806bc2fa8399_0
/data/data/####/de328aa6cc2d328b_0
/data/data/####/e09d44f20deddb8f_0
/data/data/####/e23a3bb8e8481306_0
/data/data/####/e23a3bb8e8481306_1
/data/data/####/e27cff5c0d918483_0
/data/data/####/e318234e-75e3-4648-96a1-35dd7a2bb6cf.dex
/data/data/####/e318234e-75e3-4648-96a1-35dd7a2bb6cf.dex.flock (deleted)
/data/data/####/e368b6f353f2cbab_0
/data/data/####/e41ed4ced06edc6e_0
/data/data/####/e6033567eeedb896_0
/data/data/####/e6dea900bbb9756a_0
/data/data/####/e754d67f4bd1bd1a_0
/data/data/####/e8eb80236ce3b384_0
/data/data/####/e9e3827be77aee00_0
/data/data/####/eb735cc2be593165_0
/data/data/####/eef18228f9e87095_0
/data/data/####/effd37cf07a9b470_0 (deleted)
/data/data/####/f0fa9937774f6f42_0
/data/data/####/f1dcce492074d3ee_0
/data/data/####/f4c18c6294a07176_0
/data/data/####/f6ad96105449dbca_0
/data/data/####/f94034ebc039a021_0
/data/data/####/f9a9a2ab4cd604ae_0
/data/data/####/f9bc3864acfdbb2a_0
/data/data/####/fee6ef73fdd6723e_0
/data/data/####/fsPLZya.dex
/data/data/####/fsPLZya.dex.flock (deleted)
/data/data/####/index
/data/data/####/metrics_guid
/data/data/####/temp-index
/data/data/####/the-real-index
/data/misc/####/primary.prof

Miscellaneous:

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Displays its own windows over windows of other apps.

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical information

Curing recommendations

Free trial