Technical information
Malicious functions:
Sends SMS messages:
- +32711: ON CHALLENGE
Gains access to the ITelephony private interface.
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) fil####.apk####.com:80
- TCP(HTTP/1.1) ma####.bootstr####.com:80
- TCP(HTTP/1.1) mobigen####.com:80
- TCP(HTTP/1.1) game####.topmobi####.com:80
- TCP(HTTP/1.1) 1####.162.12.207:80
- TCP(TLS/1.0) lh3.googleu####.com:443
- TCP(TLS/1.0) ssl.google-####.com:443
DNS requests:
- fil####.apk####.com
- game####.topmobi####.com
- lh3.googleu####.com
- ma####.bootstr####.com
- mobigen####.com
- ssl.google-####.com
HTTP GET requests:
- fil####.apk####.com/games/TubeMate.apk
- game####.topmobi####.com/games/2048-growup/img/icon/icon-120x120.png
- game####.topmobi####.com/games/african-savannah/img/icon/icon-120x120.png
- game####.topmobi####.com/games/bubble-zoobies/img/icon/icon-120x120.png
- game####.topmobi####.com/games/daily-heggies/img/icon/icon-120x120.png
- game####.topmobi####.com/games/fairy-word-search/img/icon/icon-120x120.png
- game####.topmobi####.com/games/ferris-wheel/img/icon/icon-120x120.png
- game####.topmobi####.com/games/frog-jumper/img/icon/icon-120x120.png
- game####.topmobi####.com/games/ghost-bubbles/img/icon/icon-120x120.png
- game####.topmobi####.com/games/gold-miner/img/icon/icon-120x120.png
- game####.topmobi####.com/games/happy-zoobies/img/icon/icon-120x120.png
- game####.topmobi####.com/games/main-power/img/icon/icon-120x120.png
- game####.topmobi####.com/games/supermarket-numbers/img/icon/icon-120x120...
- game####.topmobi####.com/games/swipe-a-car/img/icon/icon-120x120.png
- game####.topmobi####.com/games/totem-blast/img/icon/icon-120x120.png
- game####.topmobi####.com/games/tower-of-hanoi/img/icon/icon-120x120.png
- game####.topmobi####.com/games/treasure-hunt/img/icon/icon-120x120.png
- game####.topmobi####.com/games/zoo-animals/img/icon/icon-120x120.png
- game####.topmobi####.com/games/zuma-ball/img/icon/icon-120x120.png
- mobigen####.com/
- mobigen####.com/wp-content/plugins/vt-ringtones/admin/js/rt-js.js?ver=####
- mobigen####.com/wp-content/themes/anhnbt-theme/css/bootstrap.min.css?ver...
- mobigen####.com/wp-content/themes/anhnbt-theme/css/style.css?ver=####
- mobigen####.com/wp-content/themes/anhnbt-theme/images/button_bg.png
- mobigen####.com/wp-content/themes/anhnbt-theme/images/header-bg.png
- mobigen####.com/wp-content/themes/anhnbt-theme/js/bootstrap.min.js?ver=#...
- mobigen####.com/wp-content/themes/anhnbt-theme/js/jplayer/blue.monday/cs...
- mobigen####.com/wp-content/themes/anhnbt-theme/js/jplayer/circleplayer/c...
- mobigen####.com/wp-content/themes/anhnbt-theme/js/jplayer/circleplayer/j...
- mobigen####.com/wp-content/themes/anhnbt-theme/js/jplayer/jquery.jplayer...
- mobigen####.com/wp-content/themes/anhnbt-theme/js/menu.js?ver=####
- mobigen####.com/wp-content/themes/anhnbt-theme/style.css
- mobigen####.com/wp-content/uploads/2017/12/1212-topmobile-challenge-funn...
- mobigen####.com/wp-content/uploads/2017/12/1312-topmobile-challenge-funn...
- mobigen####.com/wp-content/uploads/2017/12/31XjNT7u-dL-150x150.jpg
- mobigen####.com/wp-content/uploads/2017/12/Disgusted-oh-god-why-text-150...
- mobigen####.com/wp-content/uploads/2017/12/YourTV_logo-150x150.png
- mobigen####.com/wp-content/uploads/2017/12/alarms_clock_app_iphone_5s_he...
- mobigen####.com/wp-content/uploads/2017/12/rs_600x600-170619162805-600x6...
- mobigen####.com/wp-content/uploads/2017/12/s-l300-150x150.jpg
- mobigen####.com/wp-content/uploads/2017/12/tải-xuống-1-2-150x150.jpg
- mobigen####.com/wp-content/uploads/2017/12/tải-xuống-1-3-150x150.jpg
- mobigen####.com/wp-content/uploads/2017/12/tải-xuống-1-4-150x150.jpg
- mobigen####.com/wp-content/uploads/2017/12/tải-xuống-1-5-150x150.jpg
- mobigen####.com/wp-content/uploads/2017/12/tải-xuống-2-1-150x150.jpg
- mobigen####.com/wp-content/uploads/2017/12/tải-xuống-2-150x150.png
- mobigen####.com/wp-content/uploads/2017/12/tải-xuống-4-150x150.jpg
- mobigen####.com/wp-content/uploads/2017/12/tải-xuống-5-150x150.jpg
- mobigen####.com/wp-content/uploads/2017/12/tải-xuống-6-150x150.jpg
- mobigen####.com/wp-content/uploads/2017/12/tải-xuống-7-150x150.jpg
- mobigen####.com/wp-content/uploads/2017/12/tải-xuống-8-150x150.jpg
- mobigen####.com/wp-content/uploads/2017/12/tải-xuống-9-150x150.jpg
- mobigen####.com/wp-content/uploads/ringtones/disco_girl.mp3
- mobigen####.com/wp-content/uploads/ringtones/fabriziof_delirium.mp3
- mobigen####.com/wp-content/uploads/ringtones/listen_to_your_heart.mp3
- mobigen####.com/wp-content/uploads/ringtones/lofi_levi_you.mp3
- mobigen####.com/wp-content/uploads/ringtones/midoriya_smaaash_dub.mp3
- mobigen####.com/wp-content/uploads/ringtones/pantelidis_aggelos2.mp3
- mobigen####.com/wp-content/uploads/ringtones/pantelidis_erwtasgam.mp3
- mobigen####.com/wp-content/uploads/ringtones/route_73.mp3
- mobigen####.com/wp-content/uploads/ringtones/seisoubakuretsu_sseb.mp3
- mobigen####.com/wp-content/uploads/ringtones/shanahan_wastingtime.mp3
- mobigen####.com/wp-content/uploads/ringtones/sleepless_nights.mp3
- mobigen####.com/wp-content/uploads/ringtones/u_deserve_my_praise.mp3
- mobigen####.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=####
- mobigen####.com/wp-includes/js/jquery/jquery.js?ver=####
- mobigen####.com/wp-includes/js/wp-embed.min.js?ver=####
- mobigen####.com/wp-includes/js/wp-emoji-release.min.js?ver=####
Modified file system:
Creates the following files:
- <Package Folder>/cache/####/data_0
- <Package Folder>/cache/####/data_1
- <Package Folder>/cache/####/data_2
- <Package Folder>/cache/####/data_3
- <Package Folder>/cache/####/f_000001
- <Package Folder>/cache/####/f_000002
- <Package Folder>/cache/####/f_000003
- <Package Folder>/cache/####/f_000004
- <Package Folder>/cache/####/f_000005
- <Package Folder>/cache/####/f_000006
- <Package Folder>/cache/####/f_000007
- <Package Folder>/cache/####/f_000008
- <Package Folder>/cache/####/f_000009
- <Package Folder>/cache/####/f_00000a
- <Package Folder>/cache/####/index
- <Package Folder>/databases/google_analytics_v4.db-journal
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/databases/webviewCookiesChromium.db-journal
- <Package Folder>/files/gaClientId
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/com.google.android.gms.analytics.prefs.xml
- <SD-Card>/<Package>.tmp
Miscellaneous:
Gains access to network information.
Gains access to telephone information (number, imei, etc.).
Displays its own windows over windows of other applications.
