Техническая информация
Вредоносные функции:
Отправляет СМС-сообщения:
- 18258483243: ####A
- 12114516416: ####A
Сетевая активность:
Подключается к:
- s####.####.com
- o####.####.com
- h####.####.com
- a####.####.com
- s####.####.cn
Запросы HTTP GET:
- s####.####.com/ajax/getgouwuchecount.ashx
- s####.####.com/js/loadimage.js
- s####.####.com/images/indexIcons.png
- s####.####.cn/getconfig.aspx?
- s####.####.com/files/Product/1961ea0e-6a5b-438e-9fec-5395a0e4027c_500_500.jpg
- s####.####.com/images/baseIcons.png
- s####.####.com/files/Product/cceb6850-c9c3-417d-aa3e-f7af53909ffc_500_500.jpg
- s####.####.cn/versioncheck.aspx?
- s####.####.com/?pno=####
- s####.####.com/versioncheck.aspx?
- h####.####.com/hm.js?b4f72db####
- s####.####.com/files/Product/cc209cfd-6c05-489e-abde-c8caf14ef28a_500_500.jpg
- s####.####.com/files/Product/bfdd13d4-2a8d-4e8e-a083-81e1901a401a_500_500.jpg
- s####.####.com/remai_new.aspx?adid=####
- s####.####.com/js/loadingDate1.js
- s####.####.com/images/bannerPic.png
- h####.####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&ep=####&et=####&ja=####&ln=####&lo=####&nv=####&rnd=####&si=####&st=####&v=####&lv=####
- s####.####.com/GetFeeData.aspx?iswifi=####
- s####.####.com/ajax/zhuanti.ashx?page=####&adid=####
- s####.####.com/getconfig.aspx?
- s####.####.com/shop_list_detail.aspx?pro_id=####
- s####.####.com/css/basic.css
- s####.####.com/js/baidu.js
- s####.####.com/images/smallPic.png
- s####.####.com/js/loadingDate.js
- s####.####.com/css/forIndex.css
- h####.####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&et=####&ja=####&ln=####&lo=####&nv=####&rnd=####&si=####&st=####&v=####&lv=####&tt=####
- s####.####.com/files/Product/bd0f09d3-276c-4373-afee-28feec1cb4f3_500_500.jpg
- s####.####.com/ajax/order_add_shop.ashx?productId=####
- s####.####.cn/GetFeeData.aspx?iswifi=####
- s####.####.com/js/ajaxhelp.js
- s####.####.com/css/shop.css
Запросы HTTP POST:
- a####.####.com/app_logs
- o####.####.com/check_config_update
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/files/umeng_it.cache
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/shared_prefs/ui.xml
- /data/data/####/shared_prefs/uw.xml
- /data/data/####/shared_prefs/umeng_general_config.xml
- /data/data/####/shared_prefs/ui.xml.bak
- /data/data/####/shared_prefs/uw.xml.bak
- /data/data/####/databases/webview.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/shared_prefs/mobclick_agent_online_setting_####.xml
- /data/data/####/files/.imprint
- /data/data/####/shared_prefs/mobclick_agent_online_setting_####.xml.bak
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/index
- /data/data/####/cache/webviewCacheChromium/f_000003
Другие:
Может автоматически отправлять СМС-сообщения.
