Android.Locker.17228

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Locker.14669

Threat detection based on machine learning.

Network activity:

Connects to:

UDP(DNS) 8####.8.4.4:53
TCP(TLS/1.0) i.dy####.com:443
TCP(TLS/1.0) www.por####.com:443
TCP(TLS/1.0) ht-####.a####.com:443
TCP(TLS/1.0) rr9---s####.g####.com:443
TCP(TLS/1.0) di.ph####.com:443
TCP(TLS/1.0) www.go####.ru:443
TCP(TLS/1.0) st####.traffic####.com:443
TCP(TLS/1.0) s####.g.doublec####.net:443
TCP(TLS/1.0) h####.por####.com:443
TCP(TLS/1.0) dy####.com:443
TCP(TLS/1.0) m####.traffic####.net:443
TCP(TLS/1.0) and####.google####.com:443
TCP(TLS/1.0) ads.traffic####.net:443
TCP(TLS/1.0) www.google-####.com:443
TCP(TLS/1.0) www.go####.com:443
TCP(TLS/1.0) hw-####.a####.com:443
TCP(TLS/1.0) www.googlet####.com:443
TCP(TLS/1.0) and####.a####.go####.com:443
TCP(TLS/1.0) i.bimbo####.com:443
TCP(TLS/1.0) pla####.google####.com:443
TCP(TLS/1.0) cdn1-sm####.ph####.com:443
TCP(TLS/1.0) p####.google####.com:443
TCP(TLS/1.2) www.go####.ru:443
TCP(TLS/1.2) and####.google####.com:443

DNS requests:

ads.traffic####.net
and####.a####.go####.com
and####.google####.com
cdn1-sm####.ph####.com
di.ph####.com
dy####.com
ei.ph####.com
h####.por####.com
ht-####.a####.com
hw-####.a####.com
i.bimbo####.com
i.dy####.com
m####.traffic####.net
p####.google####.com
pla####.google####.com
rr9---s####.g####.com
s####.g.doublec####.net
st####.traffic####.com
www.go####.com
www.go####.ru
www.google-####.com
www.googlet####.com
www.por####.com

File system changes:

Creates the following files:

/data/data/####/010208196668a394_0
/data/data/####/02ed9011ac882392_0 (deleted)
/data/data/####/039b100c91954ce0_0
/data/data/####/0507f22726810148_0
/data/data/####/0571d5e466cfd316_0
/data/data/####/05daec374c4ed2be_0
/data/data/####/06422e28bd852532_0
/data/data/####/06dd13bfb114aa01_0
/data/data/####/0a364fb28e1eff70_0
/data/data/####/0a364fb28e1eff70_1
/data/data/####/0dc9c16e60477efc_0
/data/data/####/0f431e95745259ef_0
/data/data/####/0f558078125d00f3_0 (deleted)
/data/data/####/11e6d0c100ef6553_0
/data/data/####/11e6d0c100ef6553_1
/data/data/####/12a6ab2820351259_0
/data/data/####/12f561b2dbf18dc9_0
/data/data/####/13d2472b524bec67_0
/data/data/####/13e77088e80af0e8_0
/data/data/####/13e77088e80af0e8_1
/data/data/####/13f0d49d4cf93154_0
/data/data/####/1625b1931ef5e9cc_0
/data/data/####/1850d21e794b356e_0 (deleted)
/data/data/####/1d66eae5e5b59d45_0
/data/data/####/1de6cf89cab051cd_0
/data/data/####/21c345adc3a6c5f0_0
/data/data/####/24e2bf8f6aeb3d7e_0
/data/data/####/273f949923941ebe_0
/data/data/####/2940195bd9870d6e_0
/data/data/####/2940195bd9870d6e_1
/data/data/####/299b431b85f3db04_0
/data/data/####/2b03160711a1f619_0
/data/data/####/2b03160711a1f619_1
/data/data/####/2f31b58cca14b711_0
/data/data/####/3241a2abdc0d9e44_0
/data/data/####/3322313a90958dfd_0
/data/data/####/33474d826c1f993c_0
/data/data/####/335679bad0c96762_0
/data/data/####/342f98b4056aaa03_0
/data/data/####/345285701b3c74aa_0
/data/data/####/37c4c8df92d952a6_0
/data/data/####/39fcebd5f1d3651d_0
/data/data/####/3a36f6dcb6be1769_0 (deleted)
/data/data/####/3b1e5923773879e8_0
/data/data/####/3d7d3c634506d55d_0
/data/data/####/3dbc46ec43aca1a3_0
/data/data/####/3ea4d78ea985ea67_0
/data/data/####/3ee5ae3071deda02_0
/data/data/####/406507f4d80bf406_0
/data/data/####/410049f08cbad5ad_0
/data/data/####/4239ff8e03f03690_0
/data/data/####/42f6b661ebc929f4_0
/data/data/####/4509a02e5aaab7c4_0
/data/data/####/4546a0bc68254cb5_0
/data/data/####/4627703d7a8f52bf_0
/data/data/####/46e26ca82c451ae5_0 (deleted)
/data/data/####/47f146fa69f7d757_0 (deleted)
/data/data/####/4955c5df5edd6212_0
/data/data/####/49e428bdcbe3750b_0
/data/data/####/49e428bdcbe3750b_1
/data/data/####/4a1d0d8a385cc78a_0
/data/data/####/4a429c7534e5c0d5_0
/data/data/####/4ac31db319f68191_0
/data/data/####/4b482d9f778f0483_0
/data/data/####/4b930145c335b5c7_0
/data/data/####/4be63ac4d3cdd707_0 (deleted)
/data/data/####/4cba0458cb2f2b7e_0
/data/data/####/4ed92342b9895a0f_0
/data/data/####/4ed92342b9895a0f_1
/data/data/####/4faa1329a1f23f8d_0 (deleted)
/data/data/####/5206b445f0eb5222_0
/data/data/####/5505ba76bfec8424_0
/data/data/####/5571a526ba1a4974_0
/data/data/####/557d7dfbeb9f98f8_0
/data/data/####/563ae8fccfa4862e_0
/data/data/####/595f20440e71a4ef_0
/data/data/####/598a4a1ab5ab975f_0
/data/data/####/5bf890d0cdef5c86_0
/data/data/####/5bf890d0cdef5c86_1
/data/data/####/5c565ed73d549088_0
/data/data/####/60e896714cfbcfb7_0 (deleted)
/data/data/####/631d291799d94436_0
/data/data/####/63e649c4a844e976_0
/data/data/####/64508fa1cd46b0ab_0
/data/data/####/64508fa1cd46b0ab_1
/data/data/####/657ff5c00fa7a1db_0
/data/data/####/678c78a2b0a8ef5f_0
/data/data/####/689d4b3a29e02f75_0
/data/data/####/689d55d6f34d512b_0
/data/data/####/6ace4e56fefe15de_0
/data/data/####/6c81c2cf27f431a5_0
/data/data/####/6c81c2cf27f431a5_1
/data/data/####/6d6ae115068b0c8c_0
/data/data/####/6e97b47ec84475e5_0
/data/data/####/6f1d6d73aa4178e3_0
/data/data/####/706a42c09f987b10_0
/data/data/####/711391686efde1fa_0
/data/data/####/72cd4501977cab30_0
/data/data/####/73fd0ac5a79ae55e_0
/data/data/####/74d2e64833f66611_0
/data/data/####/74df6687d05cd653_0
/data/data/####/78594281f6189c0f_0 (deleted)
/data/data/####/795cf6ff53b7385e_0
/data/data/####/7c36fcfeed892bef_0
/data/data/####/7c36fcfeed892bef_1
/data/data/####/7d20f1828d7b1cbe_0
/data/data/####/7e1834b8b5cbd821_0
/data/data/####/7e1834b8b5cbd821_1
/data/data/####/7e8f77968f320ade_0
/data/data/####/8118214c11342d6c_0
/data/data/####/84924f64ffa04a3f_0
/data/data/####/8574595d27a4f051_0
/data/data/####/88535fd7d702998f_0
/data/data/####/8888bac454c36fa6_0
/data/data/####/8888bac454c36fa6_1
/data/data/####/8b7b5f6a61cec2e8_0
/data/data/####/8ce8accf0f1533fe_0
/data/data/####/8fd2f70bbfccfc6a_0
/data/data/####/92c0e885140f6fc1_0
/data/data/####/92c0e885140f6fc1_1
/data/data/####/9402ef73a016ffbb_0
/data/data/####/95e356569b7cffc3_0
/data/data/####/9b45fa7a46b41e3f_0
/data/data/####/9d1167971a8b75a4_0
/data/data/####/9d4c48a5f53e3901_0
/data/data/####/9d4c48a5f53e3901_1
/data/data/####/9e2427972c495d67_0
/data/data/####/9e5e9756916b0bd4_0
/data/data/####/9e6906b8d5eda057_0
/data/data/####/Cookies-journal
/data/data/####/GySAukTAx.dex
/data/data/####/GySAukTAx.dex.flock (deleted)
/data/data/####/VDoXSMvu.dex
/data/data/####/VDoXSMvu.dex.flock (deleted)
/data/data/####/VWHYhwMEE.dex
/data/data/####/VWHYhwMEE.dex.flock (deleted)
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/a1a0eb390b604316_0
/data/data/####/a1a0eb390b604316_1
/data/data/####/a2b023ae7cf91c8f_0
/data/data/####/a3f24a551e255452_0
/data/data/####/a53bfe3bbb89dc78_0 (deleted)
/data/data/####/a9d56e07f351f496_0
/data/data/####/a9f0cfb98317b6c5_0
/data/data/####/aac5519e68ed5c6c_0
/data/data/####/aba2663df997c241_0
/data/data/####/abd7f5c036fb98f1_0 (deleted)
/data/data/####/adeb655733e8ed37_0
/data/data/####/ae3dd6551675d9f5_0
/data/data/####/aeafe34adc808330_0
/data/data/####/aeafe34adc808330_1
/data/data/####/b003b3d4d04019d6_0
/data/data/####/b1c078d30fc26dd0_0
/data/data/####/b2dbd3734ca3634e_0
/data/data/####/b86d5aaa935cbac6_0
/data/data/####/b90f76047353f6c0_0
/data/data/####/b93e57a4807044a7_0 (deleted)
/data/data/####/ba0a191d72ae7a4a_0
/data/data/####/bd24db1b42688dea_0
/data/data/####/bd49ffa69488246a_0
/data/data/####/bf08bb3f0c952a00_0
/data/data/####/bf7db49addbf7318_0 (deleted)
/data/data/####/c02d8cf5dabbf502_0
/data/data/####/c357ec67b8c4f214_0
/data/data/####/c48a5f417450c5e8_0 (deleted)
/data/data/####/c4c95a4a3476bfa9_0
/data/data/####/c5667f8908894281_0
/data/data/####/c643cb7daaa3bbbe_0
/data/data/####/c66bcc049b8910a6_0
/data/data/####/c66bcc049b8910a6_1
/data/data/####/cb43a6bbbf85d1b4_0
/data/data/####/cc40f1ccd60547a4_0
/data/data/####/ccb6ae163afebfc0_0
/data/data/####/ccdc5c52035e7b54_0
/data/data/####/cddc92fe081e9c31_0
/data/data/####/cf8d2febce4497cd_0
/data/data/####/com.jpkrj_preferences.xml
/data/data/####/d0e458a6605f1445_0
/data/data/####/d489e63a0e3b4f8b_0
/data/data/####/d592d9c23859ebbd_0
/data/data/####/db3ef67e41a3fe72_0
/data/data/####/e160927f33dbe8e5_0
/data/data/####/e444e263cf97e259_0
/data/data/####/e448c1888d71a6eb_0 (deleted)
/data/data/####/e6033567eeedb896_0
/data/data/####/e6dea900bbb9756a_0
/data/data/####/e9a0dfe405912f2e_0
/data/data/####/e9fc007e8f7519f6_0 (deleted)
/data/data/####/ea69e58fb9e17352_0
/data/data/####/eae158fb87a14316_0
/data/data/####/edf292f624515dc6_0
/data/data/####/ee67c31b822762c7_0 (deleted)
/data/data/####/efbf88bad6d879ab_0
/data/data/####/effd37cf07a9b470_0 (deleted)
/data/data/####/f10f336ff551280c_0
/data/data/####/f1c1d4022a67f3a6_0 (deleted)
/data/data/####/f5315b9aee5e8c6b_0
/data/data/####/f677f433f90f8759_0
/data/data/####/f6bf079f6a91c39b_0 (deleted)
/data/data/####/f7008c1751266aa4_0
/data/data/####/f7008c1751266aa4_1
/data/data/####/f75bf7203dc2d55e_0
/data/data/####/f7c9f819cbb323b3_0
/data/data/####/f9af2ae61006852d_0
/data/data/####/fa19819468e67010_0
/data/data/####/fad0549774210637_0
/data/data/####/fb8d134cf66567c6_0
/data/data/####/fee6ef73fdd6723e_0
/data/data/####/ff90f42f7f949fc4_0
/data/data/####/index
/data/data/####/metrics_guid
/data/data/####/the-real-index
/data/data/####/vgraeHXbt.dex
/data/data/####/vgraeHXbt.dex.flock (deleted)
/data/misc/####/primary.prof

Miscellaneous:

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Displays its own windows over windows of other apps.

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical information

Curing recommendations

Free trial