Android.Locker.17922

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Locker.1472.origin

Network activity:

Connects to:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) 2####.85.233.94:80
TCP(HTTP/1.1) 1####.177.14.94:80
TCP(HTTP/1.1) www.go####.com:80
TCP(TLS/1.0) ei.ph####.com:443
TCP(TLS/1.0) p####.google####.com:443
TCP(TLS/1.0) www.googlet####.com:443
TCP(TLS/1.0) rr6---s####.g####.com:443
TCP(TLS/1.0) www.por####.com:443
TCP(TLS/1.0) sto####.google####.com:443
TCP(TLS/1.0) u####.com:443
TCP(TLS/1.0) f####.gst####.com:443
TCP(TLS/1.0) 64.2####.161.139:443
TCP(TLS/1.0) analy####.go####.com:443
TCP(TLS/1.0) 2####.85.233.94:443
TCP(TLS/1.0) cdn1-sm####.ph####.com:443
TCP(TLS/1.0) s####.g.doublec####.net:443
TCP(TLS/1.0) rr9---s####.g####.com:443
TCP(TLS/1.0) a####.vk.com:443
TCP(TLS/1.0) st####.vk.com:443
TCP(TLS/1.0) l####.vk.com:443
TCP(TLS/1.0) www.go####.com:443
TCP(TLS/1.0) digital####.google####.com:443
TCP(TLS/1.0) sun####.use####.com:443
TCP(TLS/1.0) h####.por####.com:443
TCP(TLS/1.0) rr2---s####.g####.com:443
TCP(TLS/1.0) www.go####.ru:443
TCP(TLS/1.0) www.google-####.com:443
TCP(TLS/1.0) st####.vk-po####.net:443
TCP(TLS/1.2) 1####.194.73.106:443
TCP(TLS/1.2) pla####.google####.com:443
TCP(TLS/1.2) digital####.google####.com:443
UDP digital####.google####.com:443
UDP p####.google####.com:443

DNS requests:

a####.vk.com
analy####.go####.com
cdn1-sm####.ph####.com
digital####.google####.com
ei.ph####.com
f####.gst####.com
gmscomp####.google####.com
h####.por####.com
i####.vk.com
l####.vk.com
m####.go####.com
m####.traffic####.net
o####.vk.com
p####.google####.com
pla####.google####.com
rr2---s####.g####.com
rr6---s####.g####.com
rr9---s####.g####.com
s####.g.doublec####.net
st####.vk-po####.net
st####.vk.com
sto####.google####.com
sun####.use####.com
u####.com
www.go####.com
www.go####.ru
www.google-####.com
www.googlet####.com
www.por####.com

HTTP GET requests:

www.go####.com/gen_204

File system changes:

Creates the following files:

/data/data/####/00517210ebc94e8b_0
/data/data/####/00517210ebc94e8b_0 (deleted)
/data/data/####/0059d4c61ef7bea0_0
/data/data/####/00b8f7dd06b5077f_0
/data/data/####/00dba794b0e8fb81_0
/data/data/####/0381e936a2ac8f76_0
/data/data/####/0381e936a2ac8f76_0 (deleted)
/data/data/####/0788931a1a455b0b_0
/data/data/####/0788931a1a455b0b_0 (deleted)
/data/data/####/0a07a06781c9ca36_0 (deleted)
/data/data/####/0a364fb28e1eff70_0
/data/data/####/0b300795ce8ff691_0
/data/data/####/0bdb7fd61cf6a42a_0
/data/data/####/0ce153fe0c38db33_0
/data/data/####/0d14d3720d9098ea_0
/data/data/####/0dfa4a20444e25ea_0
/data/data/####/0fecc5dfd83d3311_0
/data/data/####/11954de1c68a3aac_0
/data/data/####/11954de1c68a3aac_1
/data/data/####/11e6d0c100ef6553_0
/data/data/####/11e6d0c100ef6553_1
/data/data/####/183bc42e227e1b6c_0
/data/data/####/183bc42e227e1b6c_0 (deleted)
/data/data/####/183bc42e227e1b6c_1
/data/data/####/19be328c11835dd9_0
/data/data/####/19f46fdb2f10d2ce_0 (deleted)
/data/data/####/1c39645586c78c5a_0 (deleted)
/data/data/####/1edf8f22f71ae995_0
/data/data/####/1fda99d0c2eaf8cb_0
/data/data/####/1fda99d0c2eaf8cb_1
/data/data/####/1ff722b3a38744ee_0
/data/data/####/209ca5920ca6490c_0
/data/data/####/230b1fc8a2a5a2ae_0
/data/data/####/2325d324e5394243_0
/data/data/####/2325d324e5394243_0 (deleted)
/data/data/####/23a3cefaaa3334eb_0
/data/data/####/25309ccf291f06fb_0
/data/data/####/253adf8c1e670d24_0
/data/data/####/25553bdabf0c6377_0
/data/data/####/25553bdabf0c6377_0 (deleted)
/data/data/####/26ffa9a3b99fc24f_0
/data/data/####/2940195bd9870d6e_0
/data/data/####/2940195bd9870d6e_1
/data/data/####/2987436855e49ef7_0
/data/data/####/2987436855e49ef7_0 (deleted)
/data/data/####/2a1ac2855cb07f3c_0
/data/data/####/2a89e85e375d3490_0
/data/data/####/2ae31d1fd52af88a_0
/data/data/####/2c5257544019a561_0
/data/data/####/2cc80dabc69f58b6_0
/data/data/####/2e1db4164ee011b1_0
/data/data/####/2e1db4164ee011b1_0 (deleted)
/data/data/####/2e761f694438a3a6_0
/data/data/####/2fc06c91053754df_0
/data/data/####/2fc06c91053754df_0 (deleted)
/data/data/####/33722cf88a938c86_0
/data/data/####/33792c0994c66578_0
/data/data/####/36781dce59c0b3dd_0
/data/data/####/3b585071f7fa0da1_0
/data/data/####/3b585071f7fa0da1_0 (deleted)
/data/data/####/3db90b6ff1681f41_0
/data/data/####/3db90b6ff1681f41_1
/data/data/####/3ea4d78ea985ea67_0
/data/data/####/3ee458ebd8b9c866_0
/data/data/####/41e007fd4700d87e_0
/data/data/####/41e007fd4700d87e_0 (deleted)
/data/data/####/46233012966c85b0_0
/data/data/####/46233012966c85b0_0 (deleted)
/data/data/####/49f5ba5b3357a1d6_0
/data/data/####/49f5ba5b3357a1d6_0 (deleted)
/data/data/####/4b497c5c5056211f_0
/data/data/####/4cb013792b196a35_0
/data/data/####/4cb013792b196a35_1
/data/data/####/4ed0070704a56e97_0
/data/data/####/4f339779106045cf_0
/data/data/####/4f339779106045cf_0 (deleted)
/data/data/####/515b6e193c7bcc62_0
/data/data/####/51601d3d55b76398_0
/data/data/####/51601d3d55b76398_0 (deleted)
/data/data/####/528d059e6672f280_0
/data/data/####/529aaddcce8fa8f2_0
/data/data/####/52de6b2c22d44461_0
/data/data/####/52de6b2c22d44461_1
/data/data/####/53c90d780ce1ad46_0
/data/data/####/53c90d780ce1ad46_0 (deleted)
/data/data/####/53e336962895ac34_0
/data/data/####/53e336962895ac34_1
/data/data/####/53fc771990509335_0
/data/data/####/55fdbaa9389ca747_0
/data/data/####/56d7f599dbdcf9e7_0
/data/data/####/58b30bc08e758eae_0
/data/data/####/5a6ec868f2ae9749_0
/data/data/####/5a6ec868f2ae9749_0 (deleted)
/data/data/####/5b8e498d769b2c74_0
/data/data/####/5ccc31855ffdc121_0
/data/data/####/5ccc31855ffdc121_1
/data/data/####/5f021f109ed1c1a2_0
/data/data/####/5fe0a1324e7c1980_0
/data/data/####/60892cec7c828414_0
/data/data/####/62c7a4b13f61aac3_0
/data/data/####/66f53875ef135f74_0
/data/data/####/6750bde6e7c0df08_0
/data/data/####/6750bde6e7c0df08_0 (deleted)
/data/data/####/6750bde6e7c0df08_1
/data/data/####/6b419e241eb6bc22_0
/data/data/####/6da0ab2b7b0d1b14_0
/data/data/####/6da0ab2b7b0d1b14_0 (deleted)
/data/data/####/6e7afba5f213a003_0
/data/data/####/6fa1c75808ae4245_0
/data/data/####/70cdcdc860267edd_0
/data/data/####/71f9a14009f097be_0
/data/data/####/723087d2448516ba_0
/data/data/####/72f94cf6a77fbc0d_0
/data/data/####/72f94cf6a77fbc0d_1
/data/data/####/73ba3596e8214a71_0
/data/data/####/73ba3596e8214a71_0 (deleted)
/data/data/####/743f304bdc5fbaa4_0
/data/data/####/783003eb1e2b502a_0
/data/data/####/788cb1db5b971757_0
/data/data/####/788cb1db5b971757_0 (deleted)
/data/data/####/7abed74745d16bcd_0
/data/data/####/7b0aee4ac2c556c3_0
/data/data/####/7b0aee4ac2c556c3_1
/data/data/####/7d2f483fb21b60f2_0
/data/data/####/7e48091a74668621_0
/data/data/####/7ef6f6525932c01f_0
/data/data/####/7f67230712f25f00_0
/data/data/####/7f67230712f25f00_0 (deleted)
/data/data/####/873619e3b1917ad0_0
/data/data/####/87848e7bb3b66ca6_0
/data/data/####/8888bac454c36fa6_0
/data/data/####/8888bac454c36fa6_1
/data/data/####/8e81b8ce9036d9cd_0
/data/data/####/914b4d546ef0b8b6_0
/data/data/####/938b18e8793bc3c7_0
/data/data/####/938b18e8793bc3c7_1
/data/data/####/9402ef73a016ffbb_0
/data/data/####/9402ef73a016ffbb_0 (deleted)
/data/data/####/95cae56d052c205b_0
/data/data/####/9a1bf0afe324c249_0
/data/data/####/9a1bf0afe324c249_0 (deleted)
/data/data/####/9b06f944d82f56bf_0
/data/data/####/9b06f944d82f56bf_1
/data/data/####/9b64de437880cd27_0
/data/data/####/9c72299e0aabf1eb_0
/data/data/####/9caf89cc190e65ea_0
/data/data/####/9debadc9b7b69ebf_0
/data/data/####/9eb401e684c4f15b_0
/data/data/####/9eb401e684c4f15b_1
/data/data/####/CURRENT
/data/data/####/Cookies-journal
/data/data/####/Databases.db-journal
/data/data/####/MANIFEST-000001
/data/data/####/QuotaManager-journal
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/a08f9f821f3f349a_0
/data/data/####/a0939fd11ad0ca04_0
/data/data/####/a16e8d7427620593_0
/data/data/####/a1a0eb390b604316_0
/data/data/####/a1a0eb390b604316_1
/data/data/####/a26dfd2160f6e9ac_0 (deleted)
/data/data/####/a29edc4312d19735_0
/data/data/####/a29edc4312d19735_0 (deleted)
/data/data/####/a7338aa8029118f8_0
/data/data/####/a8a49ddcf850e4c6_0
/data/data/####/a9b2a86db302774a_0
/data/data/####/a9b2a86db302774a_1
/data/data/####/a9fb05ac05a9f2cb_0
/data/data/####/a9fb05ac05a9f2cb_0 (deleted)
/data/data/####/ac612308a2081165_0
/data/data/####/ac612308a2081165_1
/data/data/####/ad582fdd06fb34fd_0
/data/data/####/ad582fdd06fb34fd_0 (deleted)
/data/data/####/ae780e890c5a9f7f_0
/data/data/####/ae780e890c5a9f7f_1
/data/data/####/aeafe34adc808330_0
/data/data/####/aeafe34adc808330_1
/data/data/####/af0cb7e3c93e0dbb_0
/data/data/####/b35ec17b7804f676_0
/data/data/####/b35ec17b7804f676_0 (deleted)
/data/data/####/b4b9d41aabc22b7f_0
/data/data/####/b5848703af3ff2fd_0
/data/data/####/b61d3c3523e750fe_0
/data/data/####/b65bd9cc5588b496_0
/data/data/####/b7bda711931af62b_0
/data/data/####/b7bda711931af62b_0 (deleted)
/data/data/####/b7d32c2095d471ec_0
/data/data/####/b8a2584655d64708_0
/data/data/####/b8c938c1af88606b_0
/data/data/####/b97521682eb94942_0
/data/data/####/b97521682eb94942_0 (deleted)
/data/data/####/bc807f4a0d56b437_0
/data/data/####/bfac1c83d1900353_0
/data/data/####/c09b54bd1ae88cac_0 (deleted)
/data/data/####/c3ad037f6aa07275_0
/data/data/####/c3ad037f6aa07275_0 (deleted)
/data/data/####/c44cf6295904ce6f_0
/data/data/####/c57b6524763fe785_0
/data/data/####/c57b6524763fe785_0 (deleted)
/data/data/####/c72957b9ad5460c9_0
/data/data/####/c75152099e8c1e8a_0
/data/data/####/c75152099e8c1e8a_0 (deleted)
/data/data/####/c966280c2fcda712_0
/data/data/####/c966280c2fcda712_0 (deleted)
/data/data/####/cb9cde24f5b096f9_0
/data/data/####/cb9cde24f5b096f9_0 (deleted)
/data/data/####/ccb6ae163afebfc0_0
/data/data/####/ccb6ae163afebfc0_0 (deleted)
/data/data/####/cccbdccc46660121_0
/data/data/####/cd1860cc1264f113_0
/data/data/####/ce0828a8b7865632_0
/data/data/####/ce0828a8b7865632_0 (deleted)
/data/data/####/ce0828a8b7865632_1
/data/data/####/cf2a268c9f3207e8_0
/data/data/####/com.fmgk_preferences.xml
/data/data/####/d147273db75b17c8_0
/data/data/####/d1ca85f5e2058fba_0
/data/data/####/d1ca85f5e2058fba_0 (deleted)
/data/data/####/d40eec0b73a7befc_0
/data/data/####/d4230c7c8cde309b_0
/data/data/####/d610f9697d06f6cd_0
/data/data/####/d63f51ef9e6f585e_0
/data/data/####/d63f51ef9e6f585e_0 (deleted)
/data/data/####/d82435f16019a704_0
/data/data/####/d943e1bffc20bdfd_0
/data/data/####/d943e1bffc20bdfd_0 (deleted)
/data/data/####/da4fa71c6dd5a772_0
/data/data/####/da656b5775b93a3c_0
/data/data/####/da656b5775b93a3c_0 (deleted)
/data/data/####/dd2a948a620c0ad9_0
/data/data/####/e04ecf0bca57320a_0
/data/data/####/e417daa654918a08_0
/data/data/####/e5af8aefe7b8c11e_0
/data/data/####/e5ffa155a556ad9a_0
/data/data/####/e5ffa155a556ad9a_0 (deleted)
/data/data/####/e626718779220788_0
/data/data/####/ebef35fb2b0f0bf4_0
/data/data/####/ebef35fb2b0f0bf4_0 (deleted)
/data/data/####/ef07203ffda029e2_0
/data/data/####/effd37cf07a9b470_0 (deleted)
/data/data/####/f1a0696347a2a23c_0
/data/data/####/f28884e0244ccf3f_0
/data/data/####/f5fa9c6556e1c73b_0
/data/data/####/f5fa9c6556e1c73b_1
/data/data/####/f7dd3533cfed2581_0
/data/data/####/f7dd3533cfed2581_0 (deleted)
/data/data/####/f7f50188faf58335_0
/data/data/####/f878f1f825d9dd7c_0 (deleted)
/data/data/####/f8afb8840593c24f_0 (deleted)
/data/data/####/fbd3ba0341e0b989_0
/data/data/####/fbd3ba0341e0b989_0 (deleted)
/data/data/####/fd16679f42f9c828_0
/data/data/####/fd9468a5f59dbadf_0
/data/data/####/fd9468a5f59dbadf_1
/data/data/####/ffbdf32df4454de2_0
/data/data/####/index
/data/data/####/keSlPWrJwT.dex
/data/data/####/keSlPWrJwT.dex.flock (deleted)
/data/data/####/lPGMrlGZ.dex
/data/data/####/lPGMrlGZ.dex.flock (deleted)
/data/data/####/metrics_guid
/data/data/####/niLTRKzV.dex
/data/data/####/niLTRKzV.dex.flock (deleted)
/data/data/####/the-real-index
/data/misc/####/primary.prof

Miscellaneous:

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Displays its own windows over windows of other apps.

Technologies

Begriffe

Schulung und Training

Mythen

Technical information

Curing recommendations

Free trial