Android.Locker.2557

Техническая информация

Вредоносные функции:

Устанавливает свой пароль на экран блокировки.

Сетевая активность:

Подключается к:

s####.####.com
startap####.com
i####.####.com
r####.####.com
d####.####.com
9####.####.58

Запросы HTTP GET:

d####.####.com/static/images/close-btn-infra.png
i####.####.com/InApp/resources/info_ex_l.png
i####.####.com/InApp/resources/info_s.png
startap####.com/1.4/trackdownload?productId=####&os=####&sdkVersion=####&packageId=####&userAdvertisingId=####&model=####&manufacturer=####&deviceVers...
9####.####.58/tracking/adClick?d=####&lu=####&index=####&clientSessionId=####&displayDuration=####&ts=####&afh=####
d####.####.com/styles/compressed/fullscreen_market_material_infra_blue.20170117-0902.min.css
r####.####.com/1.4/gethtmlad?productId=####&os=####&sdkVersion=####&packageId=####&userAdvertisingId=####&model=####&manufacturer=####&deviceVersion=#...
startap####.com/1.4/getadsmetadata?productId=####&os=####&sdkVersion=####&packageId=####&userAdvertisingId=####&model=####&manufacturer=####&deviceVer...
d####.####.com/static/images/banner_rt_2d_rays_base/download_icon_30.png
d####.####.com/static/images/star_half_big.png
9####.####.58/tracking/adImpression?d=####&clientSessionId=####&ts=####&afh=####
s####.####.com/srv/click/?pid=####&p1=####&p2=####&p3=####&p7=####&index=####
d####.####.com/image/fetch/f_auto,q_80,w_48,h_48/http%3A%2F%2Flh3.googleusercontent.com%2FI1xORgYMJHkPwlF-CRzgprHMuy3-O6qUBF0SS28D8x7oGlr0yLY2ouJywbLB...
d####.####.com/static/images/star_full_big.png
9####.####.58/tracking/adImpression?d=####&position=####&clientSessionId=####&ts=####&afh=####
i####.####.com/InApp/resources/info_ex_s.png
d####.####.com/styles/compressed/banner_rt_2d_rays_infra.20170117-0902.min.css
d####.####.com/static/images/fullpage_moving_hand_click/drawable-mdpi/black.png
i####.####.com/InApp/resources/info_l.png
d####.####.com/styles/compressed/fullpage_moving_hand_click.20170117-0902.min.css

Изменения в файловой системе:

Создает следующие файлы:

/data/data/####/databases/webviewCookiesChromium.db-journal
/data/data/####/files/StartappMetadata
/data/data/####/files/shared_prefs_sdk_ad_prefs
/data/data/####/shared_prefs/com.startapp.android.publish.CookiePrefsFile.xml.bak
/data/data/####/shared_prefs/com.startapp.android.publish.xml.bak
/data/data/####/shared_prefs/com.startapp.android.publish.CookiePrefsFile.xml
/data/data/####/files/startapp_ads/keys/1565317145
/data/data/####/databases/webview.db-journal
/data/data/####/files/startapp_ads/ads/1565317145
/data/data/####/files/startapp_ads/keys/_1410597251
/data/data/####/shared_prefs/com.startapp.android.publish.xml
/data/data/####/files/startapp_ads/ads/_1410597251
/data/data/####/cache/webviewCacheChromium/data_3
/data/data/####/cache/webviewCacheChromium/data_2
/data/data/####/cache/webviewCacheChromium/data_1
/data/data/####/cache/webviewCacheChromium/data_0
/data/data/####/cache/webviewCacheChromium/index