Техническая информация
Вредоносные функции:
Отправляет СМС-сообщения:
- 13023680732: ####A
- 1069009512114: 苏州易N支付##########
- 12114516416: ####A
Сетевая активность:
Подключается к:
- s####.####.com
- v####.####.com
- s####.####.cn
- 1####.cn
- v####.####.com:998
- 1####.####.90
- a####.####.com
Запросы HTTP GET:
- v####.####.com/h5/js/app.js?v=####
- v####.####.com/h5/images/more.png
- v####.####.com/public/img/banner/shikan_1.jpg
- v####.####.com/h5/js/ejs.js
- v####.####.com/h5/css/style.css?v=####
- v####.####.com:998/h5/recommend.html
- v####.####.com/mm/video.do?versionCode=####&videoTableType=####&netType=####&channelId=####&videoId=####
- v####.####.com/public/img/video/289ce505bde6d898.jpg
- 1####.####.90/code/init?app=####&lon=####&count=####&imei=####&iccid=####&nwtype=####&ctech=####&aimsi=####&cpid=####&cid=####&osversion=####&pck=####...
- v####.####.com/h5/images/reflash.png
- v####.####.com/h5/js/jquery.min.js
- v####.####.com/h5/css/style.css
- s####.####.com/versioncheck.aspx?
- v####.####.com/h5/images/top_bg.png
- v####.####.com/public/img/video/415c649e056b519a.jpg
- v####.####.com/public/img/video/b67a0db06b0d25fe.jpg
- s####.####.com/GetFeeData.aspx?iswifi=####
- v####.####.com/public/img/video/e1780441b950770f.jpg
- v####.####.com/mm/recommend.do
- s####.####.com/getconfig.aspx?
- v####.####.com/public/img/video/23451eef3d91d300.jpg
- v####.####.com/public/img/banner/a154bdad56f63313.jpg
- v####.####.com/h5/images/loading.gif
- v####.####.com/h5/video.html?id=####&table=####
- v####.####.com/public/img/video/a434611d2f33d25b.jpg
- s####.####.cn/GetFeeData.aspx?iswifi=####
- v####.####.com/public/img/banner/340794dd07cfd413.jpg
- v####.####.com/public/img/banner/shikan_2.jpg
- s####.####.cn/versioncheck.aspx?
- v####.####.com/h5/images/return.png
- v####.####.com/h5/images/bo.png
- v####.####.com/h5/images/icon_play.png
- v####.####.com/mm/recommend.banner
- v####.####.com/h5/images/jindu.png
- s####.####.cn/getconfig.aspx?
- v####.####.com/mm/video.hotlist
- v####.####.com/public/img/video/a1fc0fd5199a953f.jpg
- v####.####.com/h5/js/config.js?v=####
- v####.####.com/h5/images/1.jpg
Запросы HTTP POST:
- a####.####.com/app_logs
- 1####.cn/order/requestNoPhoneOrder
- 1####.cn/phone/fetch
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/shared_prefs/uw.xml
- /data/data/####/shared_prefs/device_authenticity.xml
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/shared_prefs/umeng_general_config.xml
- /data/data/####/files/.umeng/exchangeIdentity.json
- /data/data/####/files/.imprint
- /data/data/####/shared_prefs/ui.xml
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/shared_prefs/util_preference.xml
- /data/data/####/databases/webview.db-journal
- /data/data/####/databases/lepeng.db-journal
- /data/data/####/shared_prefs/Filter.xml
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/files/umeng_it.cache
- /data/data/####/shared_prefs/umeng_general_config.xml.bak
- /data/data/####/shared_prefs/ui.xml.bak
- /data/data/####/shared_prefs/uw.xml.bak
- /data/data/####/shared_prefs/device_authenticity.xml.bak
- /data/data/####/cache/webviewCacheChromium/index
Другие:
Может автоматически отправлять СМС-сообщения.
