Техническая информация
Вредоносные функции:
Отправляет СМС-сообщения:
- 12114516416: ####A
- 18258483241: ####A
Сетевая активность:
Подключается к:
- s####.####.com
- o####.####.com
- h####.####.com
- a####.####.com
- s####.####.cn
Запросы HTTP GET:
- s####.####.com/ajax/index_prolist.ashx?page=####&order=####&type2=####&type=####
- s####.####.com/files/Product//%E5%AE%89%E5%85%A8%E5%A5%97/945afd17-313a-44e3-be69-823aef8a9d22.jpg
- s####.####.com/ajax/getgouwuchecount.ashx
- s####.####.com/files/Product/201681616236.jpg
- s####.####.com/images/indexIcons.png
- s####.####.com/files/Product/2016824141221.jpg
- h####.####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&ep=####&et=####&ja=####&ln=####&lo=####<=####&nv=####&rnd=####&si=####&st=####&v=####&lv=####
- s####.####.cn/getconfig.aspx?
- s####.####.com/images/baseIcons.png
- h####.####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&ep=####&et=####&ja=####&ln=####&lo=####<=####&nv=####&rnd=####&si=####&st=####&v=####&lv=####&...
- s####.####.com/files/Product//%E6%83%85%E8%B6%A3%E6%8C%91%E9%80%97/3ffeba48-bc4f-491e-a852-86fbd2716cb3.jpg
- s####.####.com/?pno=####
- s####.####.com/files/Product//%E5%AE%89%E5%85%A8%E5%A5%97/9cfa166e-c4b7-443c-81c8-9eff5771fbe5.jpg
- s####.####.com/files/Product/bfdd13d4-2a8d-4e8e-a083-81e1901a401a_180_180.jpg
- s####.####.com/files/Product/e5643c41-24e7-41bf-9d88-a52cedc8c13e_500_500.jpg
- s####.####.com/js/loadimage.js
- h####.####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&ep=####&et=####&ja=####&ln=####&lo=####&nv=####&rnd=####&si=####&st=####&v=####&lv=####&u=####
- s####.####.com/versioncheck.aspx?
- h####.####.com/hm.js?b4f72db####
- s####.####.com/files/Product/08274665-3417-4dfa-a3eb-1d7b116798a6_500_500.jpg
- s####.####.com/GetFeeData.aspx?iswifi=####
- s####.####.com/js/loadingDate1.js
- h####.####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&et=####&ja=####&ln=####&lo=####<=####&nv=####&rnd=####&si=####&st=####&v=####&lv=####&tt=####
- s####.####.com/ajax/index_cainixihuan.ashx?page=####
- s####.####.com/ajax/index_seach.ashx?page=####&seach=####
- s####.####.com/images/bannerPic.png
- h####.####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&ep=####&et=####&ja=####&ln=####&lo=####&nv=####&rnd=####&si=####&st=####&v=####&lv=####
- s####.####.com/prodlist.aspx?type=####
- h####.####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&et=####&ja=####&ln=####&lo=####&nv=####&rnd=####&si=####&st=####&v=####&lv=####&tt=####
- s####.####.com/js/baidu.js
- s####.####.com/getconfig.aspx?
- s####.####.com/shop_list_detail.aspx?pro_id=####
- s####.####.com/css/basic.css
- s####.####.com/files/Product/a3e0612b-9876-43bf-afcf-840917d06d8b_500_500.jpg
- s####.####.cn/versioncheck.aspx?
- s####.####.com/images/smallPic.png
- s####.####.com/files/Product/bd0f09d3-276c-4373-afee-28feec1cb4f3_180_180.jpg
- s####.####.com/js/loadingDate.js
- s####.####.com/css/forIndex.css
- s####.####.com/files/Product/10354c2f-ec65-48b7-aefc-cb6b1e63b43d_500_500.jpg
- s####.####.com/files/Product/201683015542.jpg
- s####.####.com/search.aspx
- s####.####.cn/GetFeeData.aspx?iswifi=####
- s####.####.com/files/Product/2016816161359.jpg
- s####.####.com/files/Product//%E5%AE%89%E5%85%A8%E5%A5%97/6c6832d4-5c4b-48e9-aa60-ce71ffb4052c.jpg
- s####.####.com/js/ajaxhelp.js
- s####.####.com/images/hb.jpg
- s####.####.com/css/shop.css
Запросы HTTP POST:
- a####.####.com/app_logs
- o####.####.com/check_config_update
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/shared_prefs/uw.xml
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/shared_prefs/umeng_general_config.xml
- /data/data/####/files/.imprint
- /data/data/####/shared_prefs/ui.xml
- /data/data/####/databases/webview.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/shared_prefs/mobclick_agent_online_setting_####.xml.bak
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/files/umeng_it.cache
- /data/data/####/shared_prefs/ui.xml.bak
- /data/data/####/shared_prefs/uw.xml.bak
- /data/data/####/shared_prefs/mobclick_agent_online_setting_####.xml
- /data/data/####/cache/webviewCacheChromium/index
Другие:
Может автоматически отправлять СМС-сообщения.
