Android.Locker.17225

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Locker.14669

Threat detection based on machine learning.

Network activity:

Connects to:

UDP(DNS) 8####.8.4.4:53
TCP(TLS/1.0) and####.a####.go####.com:443
TCP(TLS/1.0) s####.g.doublec####.net:443
TCP(TLS/1.0) dy####.com:443
TCP(TLS/1.0) sto####.google####.com:443
TCP(TLS/1.0) rr9---s####.g####.com:443
TCP(TLS/1.0) st####.traffic####.com:443
TCP(TLS/1.0) h####.por####.com:443
TCP(TLS/1.0) www.por####.com:443
TCP(TLS/1.0) www.google-####.com:443
TCP(TLS/1.0) m####.traffic####.net:443
TCP(TLS/1.0) ads.traffic####.net:443
TCP(TLS/1.0) pla####.google####.com:443
TCP(TLS/1.0) ht-####.a####.com:443
TCP(TLS/1.0) www.go####.com:443
TCP(TLS/1.0) connect####.gst####.com:443
TCP(TLS/1.0) i.bimbo####.com:443
TCP(TLS/1.0) di.ph####.com:443
TCP(TLS/1.0) cdn1-sm####.ph####.com:443
TCP(TLS/1.0) www.googlet####.com:443
TCP(TLS/1.0) hw-####.a####.com:443
TCP(TLS/1.0) i.dy####.com:443
TCP(TLS/1.0) and####.google####.com:443
TCP(TLS/1.2) and####.google####.com:443
TCP(TLS/1.2) connect####.gst####.com:443
UDP and####.google####.com:443

DNS requests:

ads.traffic####.net
and####.a####.go####.com
and####.google####.com
cdn1-sm####.ph####.com
connect####.gst####.com
di.ph####.com
dy####.com
ei.ph####.com
ei.ph####.com.####.8
h####.por####.com
ht-####.a####.com
hw-####.a####.com
i.bimbo####.com
i.dy####.com
m####.traffic####.net
p####.google####.com
pla####.google####.com
rr9---s####.g####.com
s####.g.doublec####.net
st####.traffic####.com
sto####.google####.com
www.go####.com
www.go####.ru
www.google-####.com
www.googlet####.com
www.por####.com

File system changes:

Creates the following files:

/data/data/####/00256a9f25b3caba_0 (deleted)
/data/data/####/01d499bc2f69c353_0
/data/data/####/039b100c91954ce0_0 (deleted)
/data/data/####/0507f22726810148_0
/data/data/####/0571d5e466cfd316_0
/data/data/####/0a364fb28e1eff70_0
/data/data/####/0a364fb28e1eff70_1
/data/data/####/0bbd78db2abda802_0
/data/data/####/0e9153dbf07b719e_0 (deleted)
/data/data/####/1005f6391954be16_0
/data/data/####/1005f6391954be16_1
/data/data/####/11e6d0c100ef6553_0
/data/data/####/11e6d0c100ef6553_1
/data/data/####/12a6ab2820351259_0
/data/data/####/12fcc173091a4677_0 (deleted)
/data/data/####/13d2472b524bec67_0
/data/data/####/13e77088e80af0e8_0
/data/data/####/13e77088e80af0e8_1
/data/data/####/146d06d154de130f_0 (deleted)
/data/data/####/1565d245e6847e23_0
/data/data/####/1565d245e6847e23_1
/data/data/####/15aadff6118cb158_0 (deleted)
/data/data/####/15d20099a59bb62b_0
/data/data/####/17639daa6292f777_0
/data/data/####/195285e0640f6033_0
/data/data/####/1a56afcce90d19a2_0
/data/data/####/1de6cf89cab051cd_0
/data/data/####/1f2710207c06c3b0_0
/data/data/####/1feab658df97de5d_0
/data/data/####/222f1beeb719ceeb_0
/data/data/####/24e2bf8f6aeb3d7e_0 (deleted)
/data/data/####/252f771b55b181a6_0 (deleted)
/data/data/####/25bd16d6e9042f00_0
/data/data/####/2940195bd9870d6e_0
/data/data/####/2940195bd9870d6e_1
/data/data/####/2abf2c7b3c284606_0
/data/data/####/2b03160711a1f619_0
/data/data/####/2b03160711a1f619_1
/data/data/####/2cc80dabc69f58b6_0
/data/data/####/2cf5d71606c5f47a_0 (deleted)
/data/data/####/31047f4020465500_0
/data/data/####/3115aaf0594f9f90_0
/data/data/####/32e2ae6847c4d6ce_0
/data/data/####/3322313a90958dfd_0
/data/data/####/33474d826c1f993c_0
/data/data/####/335679bad0c96762_0
/data/data/####/336a6ad174711748_0
/data/data/####/336a6ad174711748_1
/data/data/####/33a5b5f1346693b4_0
/data/data/####/345285701b3c74aa_0
/data/data/####/36dbfa0d24b31235_0
/data/data/####/36dbfa0d24b31235_1
/data/data/####/37c4c8df92d952a6_0
/data/data/####/37cf1a19edc9e515_0
/data/data/####/38bafc63d0efa15c_0 (deleted)
/data/data/####/390b0551b37a0337_0 (deleted)
/data/data/####/396e6e7cff7f80fd_0
/data/data/####/39f0f5b33b71b709_0
/data/data/####/39fcebd5f1d3651d_0
/data/data/####/3a021a62bbd40646_0 (deleted)
/data/data/####/3b1be2d497c0f0ca_0
/data/data/####/3ba40968012af6b7_0
/data/data/####/3c1d9424cb905ba4_0
/data/data/####/3d7d3c634506d55d_0
/data/data/####/3e7b1de7a6f00a46_0
/data/data/####/3e7b1de7a6f00a46_1
/data/data/####/3ea4d78ea985ea67_0
/data/data/####/406507f4d80bf406_0
/data/data/####/43a57ce78478ae3c_0
/data/data/####/448cceca131f6fb5_0
/data/data/####/4546a0bc68254cb5_0
/data/data/####/4724daffd2928f89_0
/data/data/####/49aa44f4198af9ce_0
/data/data/####/49e428bdcbe3750b_0
/data/data/####/49e428bdcbe3750b_1
/data/data/####/4a1d0d8a385cc78a_0
/data/data/####/4a429c7534e5c0d5_0
/data/data/####/4a7d5b2e8e252c57_0
/data/data/####/4ac31db319f68191_0
/data/data/####/4b930145c335b5c7_0
/data/data/####/4cb013792b196a35_0
/data/data/####/4cb013792b196a35_1
/data/data/####/4ed92342b9895a0f_0
/data/data/####/4ed92342b9895a0f_1
/data/data/####/5206b445f0eb5222_0
/data/data/####/52b046d1c0abaf78_0
/data/data/####/53fed62e3a766062_0
/data/data/####/54bbbe2a936c73d5_0
/data/data/####/5505ba76bfec8424_0
/data/data/####/554a79872b1c8821_0 (deleted)
/data/data/####/563ae8fccfa4862e_0
/data/data/####/595aa9be4987818e_0
/data/data/####/5b7c3795db465cbd_0
/data/data/####/5b7fd38d2969bd10_0
/data/data/####/5b7fd38d2969bd10_1
/data/data/####/5bf890d0cdef5c86_0
/data/data/####/5bf890d0cdef5c86_1
/data/data/####/5c565ed73d549088_0
/data/data/####/5f0f9c4c9d7c7a29_0
/data/data/####/60560c5a4803c975_0
/data/data/####/61a1b58fbe187bbf_0
/data/data/####/62c7a4b13f61aac3_0
/data/data/####/63e649c4a844e976_0
/data/data/####/64508fa1cd46b0ab_0
/data/data/####/64508fa1cd46b0ab_1
/data/data/####/6453d2b6ddaf56ed_0
/data/data/####/657ff5c00fa7a1db_0
/data/data/####/671ce8fb6cecf26e_0
/data/data/####/689d4b3a29e02f75_0
/data/data/####/6c81c2cf27f431a5_0
/data/data/####/6c81c2cf27f431a5_1
/data/data/####/6d67593daaee7211_0 (deleted)
/data/data/####/6d6ae115068b0c8c_0
/data/data/####/6ec709d0deb02e20_0
/data/data/####/6ec709d0deb02e20_1
/data/data/####/7387a061ad84992e_0
/data/data/####/73fd0ac5a79ae55e_0
/data/data/####/78d54890c89b589e_0
/data/data/####/795cf6ff53b7385e_0
/data/data/####/7c36fcfeed892bef_0
/data/data/####/7c36fcfeed892bef_1
/data/data/####/7e1834b8b5cbd821_0
/data/data/####/7e1834b8b5cbd821_1
/data/data/####/7ea3cb682f87d215_0 (deleted)
/data/data/####/7f8f42114cf04e3b_0
/data/data/####/7fa20fd22cf76513_0
/data/data/####/8118214c11342d6c_0 (deleted)
/data/data/####/82022c0324d6aef8_0
/data/data/####/84924f64ffa04a3f_0
/data/data/####/85885f38b9c76b61_0
/data/data/####/8651e178a0c8ccee_0 (deleted)
/data/data/####/8888bac454c36fa6_0
/data/data/####/8888bac454c36fa6_1
/data/data/####/898f4048f09cc6bd_0 (deleted)
/data/data/####/8b7b5f6a61cec2e8_0 (deleted)
/data/data/####/8c254af9d88d9949_0
/data/data/####/8c4b981c4ca0f3d9_0
/data/data/####/8eda8a00953e5525_0
/data/data/####/92c0e885140f6fc1_0
/data/data/####/92c0e885140f6fc1_1
/data/data/####/9402ef73a016ffbb_0
/data/data/####/95cae56d052c205b_0
/data/data/####/95e356569b7cffc3_0
/data/data/####/977f696a47bd3ad6_0 (deleted)
/data/data/####/99e021ef16b71f52_0 (deleted)
/data/data/####/9b4fc54f5cb0ed7d_0
/data/data/####/9d4c48a5f53e3901_0
/data/data/####/9d4c48a5f53e3901_1
/data/data/####/9ecbdeae0bb709c9_0
/data/data/####/9ecbdeae0bb709c9_1
/data/data/####/CURRENT
/data/data/####/Cookies-journal
/data/data/####/Databases.db-journal
/data/data/####/GQCBXR.dex
/data/data/####/GQCBXR.dex.flock (deleted)
/data/data/####/IjEgnZCV.dex
/data/data/####/IjEgnZCV.dex.flock (deleted)
/data/data/####/IpDeicPSy.dex
/data/data/####/IpDeicPSy.dex.flock (deleted)
/data/data/####/MANIFEST-000001
/data/data/####/QuotaManager-journal
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/a08d79b16ec53387_0
/data/data/####/a1a0eb390b604316_0
/data/data/####/a1a0eb390b604316_1
/data/data/####/a1e9a669d1e877f2_0
/data/data/####/a1e9a669d1e877f2_1
/data/data/####/a3238c2596542399_0
/data/data/####/a6de974ba3e9eea4_0
/data/data/####/a7a9ee2785628ae3_0
/data/data/####/a80fb90778f73989_0
/data/data/####/a9d56e07f351f496_0
/data/data/####/a9f0cfb98317b6c5_0
/data/data/####/aba2663df997c241_0
/data/data/####/ae3dd6551675d9f5_0
/data/data/####/aeafe34adc808330_0
/data/data/####/aeafe34adc808330_1
/data/data/####/b003b3d4d04019d6_0
/data/data/####/b04a903d3df4b8b7_0
/data/data/####/b04a903d3df4b8b7_1
/data/data/####/b07ebca918ad22f6_0
/data/data/####/b0c60a04f4f952b9_0
/data/data/####/b1c078d30fc26dd0_0
/data/data/####/b2575f6ecf380ef9_0
/data/data/####/b2c8b6e1a9003eae_0
/data/data/####/b54ae8981a6906ee_0
/data/data/####/b895d57e3460980c_0
/data/data/####/b90f76047353f6c0_0
/data/data/####/bceec9c7fa9ed778_0
/data/data/####/bd49ffa69488246a_0
/data/data/####/bd4ef994d23cf57f_0 (deleted)
/data/data/####/bec5eafc9af51afe_0
/data/data/####/c0a74d88111f3ae9_0 (deleted)
/data/data/####/c14ca00c05ad58f4_0
/data/data/####/c25818358fe3f008_0
/data/data/####/c357ec67b8c4f214_0
/data/data/####/c4c95a4a3476bfa9_0
/data/data/####/c5b7e46790a09f66_0
/data/data/####/c643cb7daaa3bbbe_0
/data/data/####/c66bcc049b8910a6_0
/data/data/####/c66bcc049b8910a6_1
/data/data/####/c6f9c8ef0e147cca_0
/data/data/####/c95eede56877ae63_0 (deleted)
/data/data/####/ca8e78ec2f6f99b8_0 (deleted)
/data/data/####/cb43a6bbbf85d1b4_0 (deleted)
/data/data/####/cbdbca0830988ca4_0
/data/data/####/cc40f1ccd60547a4_0
/data/data/####/ccb6ae163afebfc0_0
/data/data/####/ce4560923496b9c0_0
/data/data/####/com.cnvew_preferences.xml
/data/data/####/d0e458a6605f1445_0 (deleted)
/data/data/####/d1720d61b1b79ee2_0
/data/data/####/d1720d61b1b79ee2_1
/data/data/####/d592d9c23859ebbd_0
/data/data/####/d80feaa54722b061_0
/data/data/####/d8e5b5e630a80c53_0
/data/data/####/d9f60e015c7b3e30_0
/data/data/####/e06199fda9757ab5_0 (deleted)
/data/data/####/e0d83eb4e6cd321a_0
/data/data/####/e160927f33dbe8e5_0
/data/data/####/e2176d97d57f5049_0
/data/data/####/e6673f992d0d715c_0
/data/data/####/e6cdca9f85948a80_0
/data/data/####/e6fd53d0bd10b2fd_0
/data/data/####/e823eac1f4594717_0
/data/data/####/e8eb80236ce3b384_0
/data/data/####/e9a0dfe405912f2e_0
/data/data/####/e9f4a327211e6082_0 (deleted)
/data/data/####/ea8a2038ba702930_0
/data/data/####/ea8a2038ba702930_1
/data/data/####/edf292f624515dc6_0
/data/data/####/eed51e851baa181f_0
/data/data/####/effd37cf07a9b470_0 (deleted)
/data/data/####/f51ecbf188d1697c_0
/data/data/####/f5eaa762420328be_0
/data/data/####/f5fa9c6556e1c73b_0
/data/data/####/f5fa9c6556e1c73b_1
/data/data/####/f677f433f90f8759_0
/data/data/####/f6a3d6b718353577_0
/data/data/####/f7008c1751266aa4_0
/data/data/####/f7008c1751266aa4_1
/data/data/####/f7c9f819cbb323b3_0
/data/data/####/fad0549774210637_0
/data/data/####/fe92d5f3560cee71_0
/data/data/####/fee6ef73fdd6723e_0
/data/data/####/ff90f42f7f949fc4_0
/data/data/####/hkCsW.dex
/data/data/####/hkCsW.dex.flock (deleted)
/data/data/####/index
/data/data/####/metrics_guid
/data/data/####/temp-index
/data/data/####/the-real-index
/data/misc/####/primary.prof

Miscellaneous:

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Displays its own windows over windows of other apps.

Technologies

Begriffe

Schulung und Training

Mythen

Technical information

Curing recommendations

Free trial