Android.Locker.18195

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Locker.14669

Network activity:

Connects to:

UDP(DNS) <Google DNS>
TCP(TLS/1.0) i####.vk.com:443
TCP(TLS/1.0) and####.a####.go####.com:443
TCP(TLS/1.0) m####.traffic####.net:443
TCP(TLS/1.0) rr6---s####.g####.com:443
TCP(TLS/1.0) www.por####.com:443
TCP(TLS/1.0) pla####.google####.com:443
TCP(TLS/1.0) p####.google####.com:443
TCP(TLS/1.0) 1####.250.74.35:443
TCP(TLS/1.0) cdn1-sm####.ph####.com:443
TCP(TLS/1.0) www.googlet####.com:443
TCP(TLS/1.0) rr9---s####.g####.com:443
TCP(TLS/1.0) www.google####.com:443
TCP(TLS/1.0) st####.vk.com:443
TCP(TLS/1.0) sto####.google####.com:443
TCP(TLS/1.2) 1####.217.21.164:443
TCP(TLS/1.2) www.google####.com:443
TCP(TLS/1.2) 1####.250.74.35:443
UDP p####.google####.com:443

DNS requests:

and####.a####.go####.com
and####.google####.com
cdn1-sm####.ph####.com
ei.ph####.com
gmscomp####.google####.com
i####.vk.com
m####.traffic####.net
o####.vk.com
p####.google####.com
pla####.google####.com
rr6---s####.g####.com
rr9---s####.g####.com
rt.por####.org
st####.vk.com
sto####.google####.com
www.google####.com
www.googlet####.com
www.por####.com

File system changes:

Creates the following files:

/data/data/####/02e9d0421483cc1d_0
/data/data/####/03c2bcbe35d1d5d3_0
/data/data/####/047a96627cff1296_0
/data/data/####/06057968685d5dbf_0 (deleted)
/data/data/####/083a63e78c029927_0
/data/data/####/083a63e78c029927_1
/data/data/####/0887ff1746f3bbfb_0
/data/data/####/09a77bee5a402286_0
/data/data/####/0b9744dda9a1e98f_0 (deleted)
/data/data/####/11e6d0c100ef6553_0
/data/data/####/11e6d0c100ef6553_1
/data/data/####/12389a68c7fb3f15_0
/data/data/####/12389a68c7fb3f15_1
/data/data/####/139a9bb66a975268_0 (deleted)
/data/data/####/165622bd6fc9f9c3_0
/data/data/####/165622bd6fc9f9c3_0 (deleted)
/data/data/####/1666bea590c15a76_0
/data/data/####/176d7e3da68d7fcd_0
/data/data/####/17b87c318317af2f_0
/data/data/####/17ecf597ab082777_0
/data/data/####/17ecf597ab082777_1
/data/data/####/193ef75a8d88b2c8_0
/data/data/####/1cea101bf70d60f2_0
/data/data/####/1f7e8be066f55b2a_0
/data/data/####/207511c62482c0ca_0 (deleted)
/data/data/####/21bd63c0f47787bb_0
/data/data/####/226f29c9db4a77ee_0
/data/data/####/23c9abe1936f26cf_0 (deleted)
/data/data/####/23ca458c931e5035_0 (deleted)
/data/data/####/256b32edfd5d5c7c_0
/data/data/####/2662f5794660b37d_0
/data/data/####/2662f5794660b37d_1
/data/data/####/291256eff2132a29_0
/data/data/####/2cc80dabc69f58b6_0
/data/data/####/2cc80dabc69f58b6_1
/data/data/####/2cf2aa4455093a24_0
/data/data/####/2cf2aa4455093a24_1
/data/data/####/2d62bfa8bd71066f_0 (deleted)
/data/data/####/2f4dafe08c5e3a66_0
/data/data/####/30e528f0729c4994_0
/data/data/####/30e528f0729c4994_0 (deleted)
/data/data/####/3396c92ceddd1275_0 (deleted)
/data/data/####/3435df5a8ed2de55_0
/data/data/####/345649688b04f4dd_0
/data/data/####/36b5f015ecbd3f34_0 (deleted)
/data/data/####/380d3aa3023c3d11_0 (deleted)
/data/data/####/38c02e12b9ffd2a1_0
/data/data/####/399625d9353882c9_0
/data/data/####/3ee458ebd8b9c866_0
/data/data/####/403f5a033d55c181_0
/data/data/####/4608c2e16db31599_0
/data/data/####/477c0ea2cc2aa93e_0
/data/data/####/477c0ea2cc2aa93e_1
/data/data/####/4b59184d835046d1_0
/data/data/####/4cb013792b196a35_0
/data/data/####/4cb013792b196a35_1
/data/data/####/50d7fdc822207b29_0 (deleted)
/data/data/####/531393983fd341cc_0
/data/data/####/531393983fd341cc_0 (deleted)
/data/data/####/5457cbeab20b4b4b_0
/data/data/####/55abe3290ee5eafa_0 (deleted)
/data/data/####/5781004aade7f469_0
/data/data/####/58bdaefefe5fcd5a_0 (deleted)
/data/data/####/5936b4ff8b6b723d_0
/data/data/####/5936b4ff8b6b723d_1
/data/data/####/59d552a80373b3dc_0
/data/data/####/59fcf6ccc8d834a9_0
/data/data/####/59fcf6ccc8d834a9_1
/data/data/####/5ab7a6d22498dcfd_0 (deleted)
/data/data/####/5cb051da04306a3b_0
/data/data/####/5cc0f8663e02a828_0
/data/data/####/5cc0f8663e02a828_1
/data/data/####/5d0572744054d932_0
/data/data/####/5d9c7cc8d06d324d_0
/data/data/####/5e0b51bc3ad898d9_0
/data/data/####/5e7e9acb89189e34_0
/data/data/####/5e7e9acb89189e34_1
/data/data/####/5f592b3c688e6335_0 (deleted)
/data/data/####/64d68162142416be_0
/data/data/####/64d68162142416be_1
/data/data/####/655dc30ae327a2cd_0 (deleted)
/data/data/####/67a473248953641b_0
/data/data/####/67a473248953641b_1
/data/data/####/68a8f2ec8be0b922_0 (deleted)
/data/data/####/6946cba6210422bf_0
/data/data/####/6a548cffa0cb225f_0
/data/data/####/6a548cffa0cb225f_1
/data/data/####/6a681ec720df093e_0
/data/data/####/6b442344f77f32ca_0
/data/data/####/6c4d7bb718c77327_0
/data/data/####/6d4059c8678e232b_0
/data/data/####/6f5ff4016d40de5b_0 (deleted)
/data/data/####/7266024e6731734c_0
/data/data/####/72dd8344220fa56e_0 (deleted)
/data/data/####/73086b08215b62e8_0 (deleted)
/data/data/####/7476f58c1168773e_0
/data/data/####/78a77489df036751_0
/data/data/####/794f1c82b5139bad_0 (deleted)
/data/data/####/7ae853aac9d783d4_0
/data/data/####/7b60272bded07ddb_0 (deleted)
/data/data/####/7c318369f0d459f5_0 (deleted)
/data/data/####/7d33ba12995a3e9a_0
/data/data/####/7ead47091bf12704_0
/data/data/####/7f3215a96969ed0c_0
/data/data/####/805b5b05773a4e3e_0
/data/data/####/84be0127197a4dfc_0
/data/data/####/874824bb41016790_0
/data/data/####/874824bb41016790_1
/data/data/####/8bfee36ff5fdbf20_0
/data/data/####/8c6a4d33afe86dce_0
/data/data/####/8dac9a0b2a49a2c1_0 (deleted)
/data/data/####/8e877062cab39958_0 (deleted)
/data/data/####/8f563a66031d89d8_0
/data/data/####/8fdef187dd37d099_0
/data/data/####/9088847aa76d016a_0
/data/data/####/918d5a36adf37007_0
/data/data/####/91a5209355493ffe_0
/data/data/####/92c7b84c047d5ec7_0 (deleted)
/data/data/####/9314230c86b90d18_0
/data/data/####/9402ef73a016ffbb_0
/data/data/####/9cb1f66b1c317d37_0
/data/data/####/9d286f1a04679933_0 (deleted)
/data/data/####/9e87a15b404e541e_0
/data/data/####/CURRENT
/data/data/####/Cookies-journal
/data/data/####/Databases.db-journal
/data/data/####/MANIFEST-000001
/data/data/####/QuotaManager-journal
/data/data/####/UZHlxDCEJ.dex
/data/data/####/UZHlxDCEJ.dex.flock (deleted)
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/XdzaA.dex
/data/data/####/XdzaA.dex.flock (deleted)
/data/data/####/a150a6340cbc512c_0
/data/data/####/a1a0eb390b604316_0
/data/data/####/a1a0eb390b604316_1
/data/data/####/a30b419a2d533e06_0
/data/data/####/a67836ef093eef8e_0
/data/data/####/a67836ef093eef8e_0 (deleted)
/data/data/####/a6a100dbcbb0eb34_0
/data/data/####/a6a100dbcbb0eb34_1
/data/data/####/a6b227248ce95a8c_0 (deleted)
/data/data/####/a9112872d34adc55_0 (deleted)
/data/data/####/aa98e49426c9a2a0_0 (deleted)
/data/data/####/ac8eb62e2fea8973_0
/data/data/####/aeafe34adc808330_0
/data/data/####/aeafe34adc808330_1
/data/data/####/aedb4303c3b98a78_0
/data/data/####/af873e5ed1586e99_0
/data/data/####/af873e5ed1586e99_1
/data/data/####/b10a0ec6d700e93c_0 (deleted)
/data/data/####/b1784c2a20f2df41_0
/data/data/####/b36258535872ffd9_0
/data/data/####/ba23d8ecda68de77_0
/data/data/####/ba23d8ecda68de77_1
/data/data/####/c08723d398e13e89_0
/data/data/####/c08723d398e13e89_1
/data/data/####/c08827024e3af54e_0
/data/data/####/c1c1c3929a635f16_0
/data/data/####/c1c1c3929a635f16_1
/data/data/####/c291877fbfd9ee75_0
/data/data/####/c291877fbfd9ee75_1
/data/data/####/c7e8b606b4e3c98a_0
/data/data/####/c965fa62df9f0021_0
/data/data/####/ccb6ae163afebfc0_0
/data/data/####/cf2c2bfb71fe90f9_0 (deleted)
/data/data/####/com.canlfsdok_preferences.xml
/data/data/####/d23889b7ba6f1e13_0
/data/data/####/d3f4285d02d3fdc1_0 (deleted)
/data/data/####/d4dd4bf3e1229ed3_0 (deleted)
/data/data/####/dca56eb66a1352ff_0
/data/data/####/dfb9c0e944a4329e_0
/data/data/####/e08cceaa1c81b727_0 (deleted)
/data/data/####/e32411061023b0dc_0
/data/data/####/e7ef8af3e6543f10_0
/data/data/####/e7ef8af3e6543f10_1
/data/data/####/e87e22ea7fc3979b_0 (deleted)
/data/data/####/e9b2a505decb3f56_0
/data/data/####/e9b2a505decb3f56_1
/data/data/####/ee6405092702be1d_0
/data/data/####/ef095f54c7a4e19e_0
/data/data/####/ef095f54c7a4e19e_0 (deleted)
/data/data/####/ef4217c25856a7e5_0
/data/data/####/ef4217c25856a7e5_1
/data/data/####/ef7398d91cffb737_0
/data/data/####/effd37cf07a9b470_0 (deleted)
/data/data/####/f060e3b3a1ef51be_0
/data/data/####/f1cdccba37924bda_0
/data/data/####/f1cdccba37924bda_1
/data/data/####/f22fdb7e9210693c_0 (deleted)
/data/data/####/f35378d16895cb43_0 (deleted)
/data/data/####/f5001145aba1a64e_0 (deleted)
/data/data/####/f5fa9c6556e1c73b_0
/data/data/####/f5fa9c6556e1c73b_1
/data/data/####/f62d3191355d89c7_0
/data/data/####/f85048f7024cda18_0
/data/data/####/f8f6937e3e2bf1ef_0
/data/data/####/fa813c9ad67834ac_0
/data/data/####/fa813c9ad67834ac_1
/data/data/####/fb0414ee80204341_0 (deleted)
/data/data/####/fb43bc2fd40dca25_0 (deleted)
/data/data/####/fbace4b3ecf3bce4_0
/data/data/####/fbace4b3ecf3bce4_1
/data/data/####/ff89b71b5afac6a3_0 (deleted)
/data/data/####/index
/data/data/####/metrics_guid
/data/data/####/sdyqFOJ.dex
/data/data/####/sdyqFOJ.dex.flock (deleted)
/data/data/####/the-real-index
/data/misc/####/primary.prof

Miscellaneous:

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Displays its own windows over windows of other apps.

Technologies

Begriffe

Schulung und Training

Mythen

Technical information

Curing recommendations

Free trial