Android.Locker.18157

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Locker.1457.origin

Network activity:

Connects to:

UDP(DNS) <Google DNS>
TCP(TLS/1.0) sto####.google####.com:443
TCP(TLS/1.0) sc####.ho####.com:443
TCP(TLS/1.0) www.googlet####.com:443
TCP(TLS/1.0) gmscomp####.google####.com:443
TCP(TLS/1.0) rr6---s####.g####.com:443
TCP(TLS/1.0) ei.ph####.com:443
TCP(TLS/1.0) el.ph####.com:443
TCP(TLS/1.0) st####.ho####.com:443
TCP(TLS/1.0) p####.google####.com:443
TCP(TLS/1.0) cdn1-sm####.ph####.com:443
TCP(TLS/1.0) 2####.58.211.3:443
TCP(TLS/1.0) i####.vk.com:443
TCP(TLS/1.0) rr9---s####.g####.com:443
TCP(TLS/1.0) www.por####.com:443
TCP(TLS/1.0) st####.vk.com:443
TCP(TLS/1.0) and####.a####.go####.com:443
TCP(TLS/1.0) 2####.58.207.238:443
TCP(TLS/1.2) gmscomp####.google####.com:443
TCP(TLS/1.2) 2####.58.211.3:443
TCP(TLS/1.2) 1####.217.21.164:443
UDP p####.google####.com:443

DNS requests:

and####.a####.go####.com
and####.google####.com
cdn1-sm####.ph####.com
ei.ph####.com
el.ph####.com
gmscomp####.google####.com
i####.vk.com
m####.traffic####.net
o####.vk.com
p####.google####.com
rr6---s####.g####.com
rr9---s####.g####.com
sc####.ho####.com
st####.ho####.com
st####.vk.com
sto####.google####.com
www.google####.com
www.googlet####.com
www.por####.com

File system changes:

Creates the following files:

/data/data/####/01706157b598f797_0
/data/data/####/01706157b598f797_1
/data/data/####/0386a459e7b6f86a_0 (deleted)
/data/data/####/08492863d1fc945c_0 (deleted)
/data/data/####/096855a9de0a4aac_0 (deleted)
/data/data/####/09966f715de8d9fc_0 (deleted)
/data/data/####/0a5b1c9a0d5fc5bc_0 (deleted)
/data/data/####/0adbcb30b6a555fe_0
/data/data/####/0adbcb30b6a555fe_1
/data/data/####/0f0cb75827195718_0
/data/data/####/0face18bfde98c1e_0
/data/data/####/0face18bfde98c1e_1
/data/data/####/11e6d0c100ef6553_0
/data/data/####/11e6d0c100ef6553_1
/data/data/####/132cd0f1c282f9dd_0
/data/data/####/140794e047d4b5bb_0 (deleted)
/data/data/####/1684d60144aef5d1_0 (deleted)
/data/data/####/17165a0031fc4bb0_0
/data/data/####/176e01ccf552e212_0
/data/data/####/176e01ccf552e212_1
/data/data/####/183f0cf96c4bf272_0
/data/data/####/19e84608854e1d42_0
/data/data/####/1d328e02d4c2df2d_0 (deleted)
/data/data/####/1d37e8377e9083c7_0 (deleted)
/data/data/####/1e01615353e20e88_0
/data/data/####/23409656d145ef46_0 (deleted)
/data/data/####/23985eb463fe70d0_0 (deleted)
/data/data/####/25216ce2fcf12765_0
/data/data/####/2566a84468e5cd42_0 (deleted)
/data/data/####/28c7f07a8684541c_0 (deleted)
/data/data/####/2b8aca57457aca9b_0 (deleted)
/data/data/####/2cc80dabc69f58b6_0
/data/data/####/30284986e3c319be_0 (deleted)
/data/data/####/31b08f80229e35af_0 (deleted)
/data/data/####/33f04c47bb7e1a26_0
/data/data/####/34db91b0ceae111d_0 (deleted)
/data/data/####/36a3027a273b2755_0 (deleted)
/data/data/####/38273d6edfe3d1ed_0
/data/data/####/38273d6edfe3d1ed_0 (deleted)
/data/data/####/38273d6edfe3d1ed_1
/data/data/####/3a3db6aaf90c60fb_0 (deleted)
/data/data/####/3c62f63b5204de42_0
/data/data/####/3d1b5d20b71f1c82_0
/data/data/####/3ee458ebd8b9c866_0 (deleted)
/data/data/####/40a132b78b90b6ee_0 (deleted)
/data/data/####/41f46a4ca4075f7b_0
/data/data/####/41fccf6505eca93f_0
/data/data/####/48e57f785e5e9261_0 (deleted)
/data/data/####/4bfc57defa7a233d_0
/data/data/####/4bfc57defa7a233d_1
/data/data/####/4c09b763c27e2c86_0
/data/data/####/4cb013792b196a35_0
/data/data/####/4cb013792b196a35_1
/data/data/####/4dbaa5c95e4c9e52_0
/data/data/####/4e5ed7894a1427cc_0
/data/data/####/4e78a89ca3bd32f0_0
/data/data/####/4f9ab39ca49a533e_0 (deleted)
/data/data/####/5024c019f15043b2_0 (deleted)
/data/data/####/51507baa63216c5e_0
/data/data/####/51de0ff9477769b7_0 (deleted)
/data/data/####/52d339c4d5a4b826_0 (deleted)
/data/data/####/550b8c8368b948f5_0 (deleted)
/data/data/####/5781004aade7f469_0
/data/data/####/58f2c11d6effdd92_0
/data/data/####/5c4ca42133616ec5_0 (deleted)
/data/data/####/5c84c9e17e85a73d_0 (deleted)
/data/data/####/5cc0f8663e02a828_0
/data/data/####/5cc0f8663e02a828_1
/data/data/####/5e0e401821df0cfe_0 (deleted)
/data/data/####/5f7a14d6dadb4d69_0
/data/data/####/61d1d3f89e61fe1d_0 (deleted)
/data/data/####/62691f9b0e4cf99d_0 (deleted)
/data/data/####/62a1f90c737d85ec_0
/data/data/####/62c7a4b13f61aac3_0
/data/data/####/636955bc83757f3b_0
/data/data/####/6399f0d8e006724a_0
/data/data/####/643628bbd2660b62_0
/data/data/####/64d8234ac9f17e57_0 (deleted)
/data/data/####/65c6f6bed1dea512_0 (deleted)
/data/data/####/6664964ceee1d1cc_0 (deleted)
/data/data/####/69a1af10851bcb56_0 (deleted)
/data/data/####/6a8ba16e17378301_0
/data/data/####/6b6c51db526a3383_0
/data/data/####/6b6c51db526a3383_0 (deleted)
/data/data/####/6b6c51db526a3383_1
/data/data/####/72440c078e9ddfc9_0
/data/data/####/72e660cebd328164_0
/data/data/####/73205d9e146e2984_0 (deleted)
/data/data/####/73a84ef314dc254e_0 (deleted)
/data/data/####/73b5bd9d9ba77a5c_0
/data/data/####/7588a9e20063411a_0
/data/data/####/7588a9e20063411a_0 (deleted)
/data/data/####/76139ae4da08eb16_0 (deleted)
/data/data/####/7697345c62b3d8b8_0 (deleted)
/data/data/####/77e366845bbfd977_0
/data/data/####/77e366845bbfd977_1
/data/data/####/77e6017a071e6296_0
/data/data/####/7864f34e87f5eebc_0 (deleted)
/data/data/####/794be95c9c76103a_0
/data/data/####/79a04caa4d061748_0
/data/data/####/79a04caa4d061748_1
/data/data/####/7a44fbf1a12a7d8e_0 (deleted)
/data/data/####/7ba9a4733a814a29_0
/data/data/####/7ba9a4733a814a29_1
/data/data/####/7d33ba12995a3e9a_0
/data/data/####/7edd9fe798a685e9_0 (deleted)
/data/data/####/7f066a5352876616_0
/data/data/####/80d74e6235489025_0
/data/data/####/80d74e6235489025_1
/data/data/####/834d364f291329bf_0
/data/data/####/834d364f291329bf_1
/data/data/####/84663331a0373c92_0 (deleted)
/data/data/####/84e10d0c3339ab71_0 (deleted)
/data/data/####/85f4e6d1f15221aa_0 (deleted)
/data/data/####/864627f32e7205ca_0 (deleted)
/data/data/####/87b370791c40571e_0
/data/data/####/87e57ccd1c225afd_0
/data/data/####/8ab4b3dbe6f75312_0 (deleted)
/data/data/####/8bb7b6facd55acad_0
/data/data/####/8eb2a46e22cf5abf_0
/data/data/####/8f4a34221b4349a0_0
/data/data/####/910f1d7ab076752f_0 (deleted)
/data/data/####/9402ef73a016ffbb_0
/data/data/####/95cae56d052c205b_0
/data/data/####/96107ea538a2a069_0 (deleted)
/data/data/####/96c9646b65a1e9ee_0
/data/data/####/972731d44f2f93d0_0 (deleted)
/data/data/####/99657658866f7e72_0
/data/data/####/996716846a3ac2e1_0 (deleted)
/data/data/####/9e24a00557ef1e9a_0
/data/data/####/9e24a00557ef1e9a_1
/data/data/####/9e9b592f41b85ad9_0
/data/data/####/9fe802ee1e21ccba_0
/data/data/####/9fe802ee1e21ccba_0 (deleted)
/data/data/####/CURRENT
/data/data/####/Cookies-journal
/data/data/####/Databases.db-journal
/data/data/####/MANIFEST-000001
/data/data/####/QuotaManager-journal
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/a0a11bf1d28df111_0
/data/data/####/a0a11bf1d28df111_0 (deleted)
/data/data/####/a0dc1783e8719050_0 (deleted)
/data/data/####/a11881fe6d867d24_0 (deleted)
/data/data/####/a1a0eb390b604316_0
/data/data/####/a1a0eb390b604316_1
/data/data/####/a1c8544852171d97_0 (deleted)
/data/data/####/a324f57e2fe9750c_0 (deleted)
/data/data/####/a4a8a3efa999be11_0 (deleted)
/data/data/####/a570909f38dfc9f7_0
/data/data/####/a570909f38dfc9f7_1
/data/data/####/acaa823ef823dcaf_0
/data/data/####/acb4ad120afb6f8f_0 (deleted)
/data/data/####/aceb2eed2fe3fde4_0 (deleted)
/data/data/####/ade6e0bcc564ae4c_0 (deleted)
/data/data/####/aeafe34adc808330_0
/data/data/####/aeafe34adc808330_1
/data/data/####/aed1ae88f4d71ee9_0 (deleted)
/data/data/####/af12ecf2cf927bdb_0
/data/data/####/b0733c7b6d64abb4_0 (deleted)
/data/data/####/b0ab10a1e5c17ceb_0
/data/data/####/b0ab10a1e5c17ceb_1
/data/data/####/b21587083978dc8b_0
/data/data/####/b2b5e4ebf6c9b5fb_0 (deleted)
/data/data/####/b5e1503c5f2f6b3d_0 (deleted)
/data/data/####/b6501107fb1735e3_0 (deleted)
/data/data/####/b9be6bda33081c46_0
/data/data/####/be1a5a49d3b83d41_0 (deleted)
/data/data/####/c670658a26ba6e89_0 (deleted)
/data/data/####/c9497eccef161b48_0 (deleted)
/data/data/####/cbedfaafbb421bc1_0
/data/data/####/cbedfaafbb421bc1_1
/data/data/####/cc03ac738d0bc437_0 (deleted)
/data/data/####/ccb6ae163afebfc0_0
/data/data/####/ccb6ae163afebfc0_0 (deleted)
/data/data/####/ccf707146b20ec66_0 (deleted)
/data/data/####/cf4a7f6a840d587d_0
/data/data/####/cf4a7f6a840d587d_1
/data/data/####/com.nczcehs_preferences.xml
/data/data/####/d0b7875ecb32b992_0
/data/data/####/d2bf425e53c0fe79_0
/data/data/####/d2bf425e53c0fe79_1
/data/data/####/d31c86ae5cb429c9_0 (deleted)
/data/data/####/d3f04aed859e86dc_0 (deleted)
/data/data/####/d4dd4bf3e1229ed3_0 (deleted)
/data/data/####/d75e2ad79a966566_0 (deleted)
/data/data/####/d7b77352673cb329_0 (deleted)
/data/data/####/d935bccea915c99b_0
/data/data/####/db2d317bde217586_0 (deleted)
/data/data/####/db50e34260eadf8f_0
/data/data/####/dd72b1b85b7dbe95_0 (deleted)
/data/data/####/df6cc5b5449ec0ea_0 (deleted)
/data/data/####/e0dcbb7148b0f2ef_0 (deleted)
/data/data/####/e1d54dbf38ea7440_0
/data/data/####/e5f84b5d3300068a_0 (deleted)
/data/data/####/e86b1131fee1cae4_0 (deleted)
/data/data/####/e90bc9e6308f7a83_0
/data/data/####/e96694d9e84e020a_0
/data/data/####/e96694d9e84e020a_1
/data/data/####/eb2e69b340d72ead_0 (deleted)
/data/data/####/eb44672f962c8a34_0
/data/data/####/eb44672f962c8a34_0 (deleted)
/data/data/####/eb44672f962c8a34_1
/data/data/####/eb8f51ed1910a5da_0 (deleted)
/data/data/####/efa88edec5456c55_0
/data/data/####/effd37cf07a9b470_0 (deleted)
/data/data/####/f09aeb914b886ffc_0
/data/data/####/f09aeb914b886ffc_1
/data/data/####/f0cd202777ceca72_0
/data/data/####/f3ae235dc16ba06a_0
/data/data/####/f4ae19dca82723f2_0 (deleted)
/data/data/####/f5fa9c6556e1c73b_0
/data/data/####/f5fa9c6556e1c73b_1
/data/data/####/f6393c98aa300495_0
/data/data/####/f812edc18a1e75f7_0 (deleted)
/data/data/####/fa9a46925838f796_0
/data/data/####/fb3371c4f38a1534_0 (deleted)
/data/data/####/fcd7fc43adbdd703_0
/data/data/####/fd768e39be5e8639_0 (deleted)
/data/data/####/ff18ba2b9466fc6b_0 (deleted)
/data/data/####/iNXvtJSVfphL.dex
/data/data/####/iNXvtJSVfphL.dex.flock (deleted)
/data/data/####/index
/data/data/####/iqWFYGRT.dex
/data/data/####/iqWFYGRT.dex.flock (deleted)
/data/data/####/metrics_guid
/data/data/####/qknIHnkGuIU.dex
/data/data/####/qknIHnkGuIU.dex.flock (deleted)
/data/data/####/the-real-index
/data/data/####/yODVKEDF.dex
/data/data/####/yODVKEDF.dex.flock (deleted)
/data/misc/####/primary.prof

Miscellaneous:

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Displays its own windows over windows of other apps.

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical information

Curing recommendations

Free trial