Android.Locker.18221

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Locker.14669

Threat detection based on machine learning.

Network activity:

Connects to:

UDP(DNS) <Google DNS>
TCP(TLS/1.0) rr6---s####.g####.com:443
TCP(TLS/1.0) p####.google####.com:443
TCP(TLS/1.0) rt.por####.org:443
TCP(TLS/1.0) gmscomp####.google####.com:443
TCP(TLS/1.0) www.googlet####.com:443
TCP(TLS/1.0) ei.ph####.com:443
TCP(TLS/1.0) pla####.google####.com:443
TCP(TLS/1.0) 1####.250.74.67:443
TCP(TLS/1.0) cdn1-sm####.ph####.com:443
TCP(TLS/1.0) rr11---####.g####.com:443
TCP(TLS/1.2) 1####.250.74.164:443
TCP(TLS/1.2) pla####.google####.com:443
TCP(TLS/1.2) gmscomp####.google####.com:443
TCP(TLS/1.2) 1####.250.74.67:443
TCP(TLS/1.2) 1####.217.130.150:443
UDP p####.google####.com:443

DNS requests:

cdn1-sm####.ph####.com
ei.ph####.com
firebas####.google####.com
gmscomp####.google####.com
m####.traffic####.net
p####.google####.com
pla####.google####.com
rr11---####.g####.com
rr6---s####.g####.com
rt.por####.org
www.googlet####.com
www.por####.com

File system changes:

Creates the following files:

/data/data/####/017d5c1f76fddfe6_0
/data/data/####/02e60d6902d21bf0_0
/data/data/####/041d4f8ef9ebb42b_0
/data/data/####/0620c32bba5a766f_0
/data/data/####/070bbf23c68a17dc_0
/data/data/####/09f51f81fbb5de1c_0
/data/data/####/09f51f81fbb5de1c_1
/data/data/####/0c29f9a9f35d7d5e_0
/data/data/####/0f9d7f3048a01ab6_0
/data/data/####/0f9d7f3048a01ab6_1
/data/data/####/101f65c1b9265953_0
/data/data/####/10204b7d57c2efb9_0
/data/data/####/1198b8aeb893ad17_0
/data/data/####/11e6d0c100ef6553_0
/data/data/####/11e6d0c100ef6553_1
/data/data/####/12cb4d5be948e801_0
/data/data/####/12e49770d328344c_0
/data/data/####/12e49770d328344c_1
/data/data/####/131a95643526e2f4_0
/data/data/####/13b9fd3a2023d818_0
/data/data/####/15757e79507a9f57_0
/data/data/####/18c890de7058bf99_0
/data/data/####/1a589d0adff804a0_0
/data/data/####/1ae5911c5cd50f6f_0
/data/data/####/1b366531acbf3a33_0
/data/data/####/1cd56002499635c5_0
/data/data/####/1cd56002499635c5_1
/data/data/####/1e024645f48b2978_0
/data/data/####/1ea0937c97bdc479_0
/data/data/####/1f10c9760ed43483_0
/data/data/####/20d27e40a18f85fb_0
/data/data/####/211773483a6662aa_0
/data/data/####/218f85a31e62debc_0
/data/data/####/2581a534383cb79d_0
/data/data/####/279092d020f0de92_0
/data/data/####/29d69263bfeb4d6f_0
/data/data/####/29d69263bfeb4d6f_1
/data/data/####/2b5751ab32cde953_0
/data/data/####/2b5751ab32cde953_1
/data/data/####/3170ddbb8c3444f7_0
/data/data/####/338627803abfbdcc_0
/data/data/####/344236c16ca6ea3a_0
/data/data/####/35653ce860ffe9c3_0
/data/data/####/37e9ff0ffd83add9_0
/data/data/####/37e9ff0ffd83add9_1
/data/data/####/3b7d3f1abc74b2eb_0
/data/data/####/3cb2ce3de1c5199e_0
/data/data/####/3df3bdca89b49569_0
/data/data/####/3df3bdca89b49569_1
/data/data/####/3e32cdefb91ddd2f_0
/data/data/####/42656d6c169e3c07_0
/data/data/####/42656d6c169e3c07_1
/data/data/####/452e6dea79460ac4_0
/data/data/####/4dcda273855e3bce_0
/data/data/####/4dcda273855e3bce_0 (deleted)
/data/data/####/4e44e388c958a507_0
/data/data/####/50703879e533791c_0
/data/data/####/50703879e533791c_1
/data/data/####/51d0cfc68061c733_0
/data/data/####/5349f56d83ef09bf_0
/data/data/####/537cff21e8daa912_0
/data/data/####/537cff21e8daa912_0 (deleted)
/data/data/####/537cff21e8daa912_1
/data/data/####/55abe3290ee5eafa_0 (deleted)
/data/data/####/57026f7929db4995_0
/data/data/####/584c1f1c7706299e_0
/data/data/####/584c1f1c7706299e_1
/data/data/####/5a23a06550e2abe6_0
/data/data/####/5efe8b44c88c8516_0
/data/data/####/60f55f3861e9d442_0
/data/data/####/61b6a7a788792ee9_0
/data/data/####/61b6a7a788792ee9_1
/data/data/####/694c6a5458811783_0
/data/data/####/6a627b094fea8a43_0
/data/data/####/6ab982f0c261b605_0
/data/data/####/6ae65c737f4262e1_0
/data/data/####/6cd2054a592ecd56_0
/data/data/####/6d56296f77720deb_0
/data/data/####/6f6ad7f128821c5c_0
/data/data/####/6fc90922a356cf08_0
/data/data/####/6fc90922a356cf08_1
/data/data/####/71ab8f19490b2fbb_0
/data/data/####/71ab8f19490b2fbb_1
/data/data/####/739978752a4049e8_0
/data/data/####/794f1c82b5139bad_0
/data/data/####/7aac1f02c820df85_0
/data/data/####/7b4c9488a83cf945_0
/data/data/####/7bdeaa583c410f49_0
/data/data/####/7bdeaa583c410f49_1
/data/data/####/7d33ba12995a3e9a_0
/data/data/####/7feac450eecba12e_0
/data/data/####/8088e260b623e7f3_0
/data/data/####/81a1eec094e036de_0
/data/data/####/8447201c44e7cd62_0
/data/data/####/850b37838d1066ef_0
/data/data/####/869b9c123d2de523_0
/data/data/####/869b9c123d2de523_0 (deleted)
/data/data/####/8a35f9b833be2adc_0
/data/data/####/8c8d0444d38f8194_0
/data/data/####/8cc976fe919a603c_0
/data/data/####/910e6455adeef454_0
/data/data/####/91511c222ef119b1_0
/data/data/####/92b9ea6325a0526f_0
/data/data/####/92b9ea6325a0526f_1
/data/data/####/9314230c86b90d18_0
/data/data/####/9402ef73a016ffbb_0
/data/data/####/96cb23c4aaa7ba79_0
/data/data/####/98443c9e9be88afa_0
/data/data/####/996fefb718579921_0
/data/data/####/AVSgHQU.dex
/data/data/####/AVSgHQU.dex.flock (deleted)
/data/data/####/Cookies-journal
/data/data/####/GyeSt.dex
/data/data/####/GyeSt.dex.flock (deleted)
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/a0cedb0ef510d2b7_0
/data/data/####/a1a0eb390b604316_0
/data/data/####/a1a0eb390b604316_1
/data/data/####/a559ad3b29c9d1cf_0
/data/data/####/a732a9c8a827cf33_0
/data/data/####/a733ca062ea6762f_0
/data/data/####/a85cd17d2d0752cd_0
/data/data/####/a85cd17d2d0752cd_1
/data/data/####/a8bc68075e91c755_0
/data/data/####/aa82858daddb86db_0
/data/data/####/aa82858daddb86db_1
/data/data/####/ad4baa722c5c939f_0
/data/data/####/ad6a05d3f26ef06b_0
/data/data/####/aeafe34adc808330_0
/data/data/####/aeafe34adc808330_1
/data/data/####/af3c4e234c56371b_0
/data/data/####/af3c4e234c56371b_1
/data/data/####/b28da8bcfac29a5d_0
/data/data/####/b973ef557706343c_0
/data/data/####/b9b45b8818fa1c3c_0
/data/data/####/bc81d1b2cb654b4c_0
/data/data/####/bf463e9c1438fb24_0
/data/data/####/bfcfd6ce9d582be5_0
/data/data/####/c17f1f83b2227855_0
/data/data/####/c497781fd47e8949_0
/data/data/####/c6ae4fde4b75898f_0
/data/data/####/ccb6ae163afebfc0_0
/data/data/####/clyWQvmeQ.dex
/data/data/####/clyWQvmeQ.dex.flock (deleted)
/data/data/####/com.skrvajh_preferences.xml
/data/data/####/d16f48a2166ea2ff_0
/data/data/####/d16f48a2166ea2ff_1
/data/data/####/d83928c10bf761fd_0
/data/data/####/daa6219090f1db92_0
/data/data/####/dba5a4702cdf0ca8_0
/data/data/####/de53b5cd17eec69b_0
/data/data/####/def212627ce7bc58_0
/data/data/####/e031527692c1ccb0_0
/data/data/####/e3186b9084fcb909_0
/data/data/####/e59c3c6567c0921d_0
/data/data/####/e62fa41081f4a736_0
/data/data/####/edca9bb7e9d74e10_0
/data/data/####/ee9429b3e5cbb59c_0
/data/data/####/efbbb989bfc7549e_0
/data/data/####/effd37cf07a9b470_0 (deleted)
/data/data/####/f1af47b0a68cc794_0
/data/data/####/f3c05831590d973f_0
/data/data/####/f4f6b0f332496268_0
/data/data/####/f4ff5eaa56c15a7f_0
/data/data/####/f502d0a486df090d_0
/data/data/####/f559b9cf54771a8f_0
/data/data/####/f5fa9c6556e1c73b_0
/data/data/####/f5fa9c6556e1c73b_1
/data/data/####/f63fd0805cfd8a4d_0
/data/data/####/fad0850e2b74f99b_0
/data/data/####/fda57013cc3f4e5a_0
/data/data/####/index
/data/data/####/metrics_guid
/data/data/####/the-real-index
/data/misc/####/primary.prof

Miscellaneous:

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Displays its own windows over windows of other apps.

Attempts to detect sandbox environment.

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical information

Curing recommendations

Free trial