Техническая информация
Вредоносные функции:
Отправляет СМС-сообщения:
- 12114: 优易付注册,保护您的账号安全,安全码@FCR55513509Aaa58
Сетевая активность:
Подключается к:
- 1####.####.159:26000
- reso####.####.net
- i####.####.com
- jiangai####.com
- a####.####.com
- 1####.####.159
Запросы HTTP GET:
- reso####.####.net/gslb/?ver=####&type=####&connpt=####&uuid=####&list=####&key=####
- i####.####.com/picture//video/2016/06/01/10/09/LD9W2QY3864DVFYFU1SJ.jpg
- i####.####.com/ImageResize.JPG?pic=####&w=####&h=####&t=####&i=####&y=####
Запросы HTTP POST:
- jiangai####.com/resource/v2/sysservice/regtime
- jiangai####.com/resource/v2/searchservice/getrecommenduserlist/v2
- jiangai####.com/resource/v2/sysservice/stat
- 1####.####.159/gamefee/sdk/init
- jiangai####.com/resource/v2/componentservice/getfateuid
- jiangai####.com/resource/v2/userservice/isshowad
- jiangai####.com/resource/v2/userservice/getalbumphotolist
- jiangai####.com/resource/v2/searchservice/getuser
- a####.####.com/app_logs
- jiangai####.com/resource/v2/userservice/touserinfo
- jiangai####.com/resource/v2/sysservice/activationcount/v2
- jiangai####.com/resource/v2/sysservice/spswitch
- jiangai####.com/resource/v2/userservice/userserver
- jiangai####.com/resource/v2/userservice/userreg
- 1####.####.159:26000/gamefee/sdk/dot_upload
- jiangai####.com/resource/v2/userservice/edituser
- jiangai####.com/resource/v2/msgservice/getunredemsgnum
- jiangai####.com/resource/v2/msgservice/bombbox
- jiangai####.com/resource/v2/userservice/login
- 1####.####.159/gamefee/sdk/uaiu?uuid=####
- jiangai####.com/resource/v2/regservice/answer
- jiangai####.com/resource/v2/msgservice/getmsglist
- jiangai####.com/resource/v2/billservice/channelbillstate
- jiangai####.com/resource/v2/regservice/regguide/v2
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/cache/volley/2107577378-1005030213
- /data/data/####/files/mobclick_agent_cached_####12
- /data/data/####/shared_prefs/mipush.xml
- /data/data/####/shared_prefs/####_preferences.xml
- /data/data/####/shared_prefs/user_login.xml
- /data/data/####/shared_prefs/mipush_extra.xml
- /data/data/####/shared_prefs/hpay_game_config.xml.bak
- /data/data/####/shared_prefs/loginid.xml
- /sdcard/Android/data/####/cache/4ctcexf9x5v21cqyxq2o4ccyk.tmp
- /data/data/####/cache/volley/-18427018831664213463
- /data/data/####/shared_prefs/user_reg_date.xml
- /data/data/####/cache/volley/-13099803652040756959
- /sdcard/Android/data/####/cache/11ytau77lmtbh2mmhn2ze101o.tmp
- /data/data/####/cache/volley/-1842701883447925753
- /sdcard/Android/data/####/cache/6popk9md59g596s1qdafjah1.tmp
- /sdcard/Android/data/####/cache/5uuoidvh6csyhcldof5e46bqk.tmp
- /data/data/####/cache/volley/910389325593284129
- /data/data/####/shared_prefs/pref_registered_pkg_names.xml
- /data/data/####/shared_prefs/umeng_general_config.xml
- /data/data/####/files/.umeng/exchangeIdentity.json
- /sdcard/Android/data/####/cache/3jgzdhhgtrelqgusomt0n9lcx.tmp
- /data/data/####/files/.imprint
- /data/data/####/shared_prefs/regtime.xml
- /data/data/####/shared_prefs/activation.xml
- /data/data/####/files/.um/um_cache_1485418702057.env
- /data/data/####/cache/volley/-1955346620-247450088
- /data/data/####/cache/volley/910389325-1451086862
- /sdcard/Android/data/####/cache/66pczovx0kjdfu4gjipsaccgr.tmp
- /sdcard/Android/data/####/cache/573gq05g0vk2cw66sy670b2zl.tmp
- /data/data/####/shared_prefs/firstReg.xml
- /data/data/####/files/umeng_it.cache
- /data/data/####/shared_prefs/close_headmenu.xml
- /data/data/####/shared_prefs/spswitch_v2.xml.bak
- /data/data/####/cache/volley/2107577378-2124389449
- /data/data/####/shared_prefs/hpay.xml
- /data/data/####/shared_prefs/hpay_game_config.xml
- /sdcard/hpay100/.hpay_device_id
- /data/data/####/cache/volley/-486202965980150800
- /data/data/####/cache/volley/-1954685540967834319
- /data/data/####/shared_prefs/mobclick_agent_user_####.xml
- /sdcard/Android/data/####/cache/6dg04t3gf8v5unbsjg7kbbi6x.tmp
- /sdcard/Android/data/####/cache/7aao3aagm70fsssn24zzp9ili.tmp
- /data/data/####/cache/volley/-1206610085338781526
- /sdcard/com.fullfunfriend.c/jahl_v2.db
- /sdcard/Android/data/####/cache/.nomedia
- /data/data/####/shared_prefs/umeng_general_config.xml.bak
- /sdcard/com.jiangaihunlian/files/-1743847459
- /data/data/####/shared_prefs/returnphone.xml
- /data/data/####/shared_prefs/mipush.xml.bak
- /data/data/####/shared_prefs/spswitch_v2.xml
- /data/data/####/shared_prefs/mipush_account.xml
- /sdcard/Android/data/####/cache/ytczf7owck8bvj5oelnjjbzt.tmp
- /sdcard/Android/data/####/cache/6vpiny3waab6o4yj0p217wam6
- /sdcard/.jimo_device_id
- /sdcard/Android/data/####/cache/zwwiow0qwbjbw9dnv9fz2lc0.tmp
- /sdcard/com.fullfunfriend.c/jahl_v2.db-journal
- /sdcard/Android/data/####/cache/d7nwmlbw9mchsht3iyanqbrz.tmp
- /data/data/####/cache/volley/21075773781960088591
- /data/data/####/files/####:pushservice
Другие:
Может автоматически отправлять СМС-сообщения.
