Техническая информация
Вредоносные функции:
Отправляет СМС-сообщения:
- 32324: ON HIT
Предлагает установить сторонние приложения.
Сетевая активность:
Подключается к:
- fil####.####.com
- clip####.info
- a####.####.com
Запросы HTTP GET:
- clip####.info/wp-content/uploads/2016/12/goowon-couple-jin-goo-kim-ji-wo.jpg
- clip####.info/wp-content/themes/vilandvideo1/images/bg-stripes-diag-blue-white.png
- a####.####.com/config.get?app=####&keys=####&versionCode=####&versionName=####&um_ch=####&appPackageName=####&platformId=####&v=####&langCode=####&net...
- clip####.info/wp-content/themes/vilandvideo1/css/global.css?ver=####
- clip####.info/wp-content/uploads/2016/12/funny-football-5.jpg
- clip####.info/wp-content/uploads/2016/12/funny-football-8.jpg
- clip####.info/wp-content/themes/vilandvideo1/css/bootstrap.min.css?ver=####
- clip####.info/wp-content/uploads/2016/12/funny-football-3.jpg
- clip####.info/wp-content/uploads/2016/12/mr-bean-red-nose-day.jpg
- clip####.info/wp-includes/js/wp-emoji-release.min.js?ver=####
- clip####.info/wp-content/uploads/2016/12/2016-comedy-football-bizzare-ep.jpg
- clip####.info/wp-content/uploads/2016/12/jin-goo-kim-ji-won-reenact-thei.jpg
- clip####.info/wp-content/uploads/2016/12/funny-football-11-1.jpg
- clip####.info/wp-content/uploads/2016/12/funny-fails-and-accidents-in-ind.jpg
- clip####.info/wp-content/uploads/2016/12/funny-kpop-vines.jpg
- clip####.info/wp-content/themes/vilandvideo1/css/fonts.css?ver=####
- clip####.info/wp-content/uploads/2016/12/lee-kwang-soo-so-obsessed-with-k.jpg
- clip####.info/wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=####
- clip####.info/wp-content/uploads/2016/12/funny-football-10.jpg
- a####.####.com/config?app=####&versionCode=####&versionName=####&um_ch=####&appPackageName=####&platformId=####&v=####&langCode=####&netWorkType=####&...
- a####.####.com/app.pkgUrlList?app=####&versionCode=####&versionName=####&um_ch=####&appPackageName=####&platformId=####&v=####&langCode=####&netWorkTy...
- fil####.####.com/games/9apps3.0.3.3.apk
- clip####.info/wp-content/themes/vilandvideo1/js/jquery.js?ver=####
- clip####.info/wp-content/uploads/2016/12/funny-football-4.jpg
- clip####.info/wp-content/uploads/2016/12/funnyvideo-8-some-daily-chinese.jpg
- clip####.info/wp-includes/js/wp-embed.min.js?ver=####
- clip####.info/wp-content/uploads/2016/12/funny-kpop-vine-compilation-part.jpg
- clip####.info/wp-content/uploads/2016/12/comedy-football-2016-bizzare-ep.jpg
- clip####.info/wp-content/themes/vilandvideo1/css/clip-page.css?ver=####
- a####.####.com/client/check/task?app=####&versionCode=####&versionName=####&net=####&um_ch=####&appPackageName=####&platformId=####&v=####&langCode=##...
- clip####.info/wp-content/uploads/2016/12/funny-football-7.jpg
- clip####.info/wp-content/themes/vilandvideo1/images/logo.png
- clip####.info/wp-content/uploads/2016/12/funny-chinese-videos-chinese-pra.jpg
- clip####.info/wp-content/themes/vilandvideo1/js/bootstrap.min.js?ver=####
- a####.####.com/messageUser?app=####®istrationId=####®Only=####&versionCode=####&versioncode=####&senderId=####&versionName=####&um_ch=####&appPa...
- clip####.info/wp-content/uploads/2016/12/funny-football-6.jpg
- clip####.info/
- clip####.info/wp-content/uploads/2016/12/funny-kpop-vines-2.jpg
- clip####.info/wp-content/uploads/2016/12/football-funny-moments-2015-foot.jpg
- clip####.info/wp-content/uploads/2016/12/mr-bean-at-the-beach.jpg
- a####.####.com/pushmessage.json?app=####&versionCode=####&versioncode=####&versionName=####&um_ch=####&appPackageName=####&platformId=####&version=###...
- clip####.info/wp-content/uploads/2016/12/funny-football-9.jpg
- clip####.info/wp-content/uploads/2016/12/funny-kpop-vines-1.jpg
Запросы HTTP POST:
- a####.####.com/user/check-increment-update.json?app=####&gzip=####&versionCode=####&versionName=####&um_ch=####&appPackageName=####&platformId=####&v=...
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/cache/webviewCacheChromium/f_00000e
- /data/data/####/cache/webviewCacheChromium/f_00000d
- /data/data/####/cache/webviewCacheChromium/f_00000f
- /data/data/####/cache/webviewCacheChromium/f_000016
- /sdcard/####.tmp
- /data/data/####/cache/webviewCacheChromium/f_000018
- /data/data/####/cache/webviewCacheChromium/f_000019
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/cache/webviewCacheChromium/f_000012
- /data/data/####/cache/webviewCacheChromium/f_000013
- /data/data/####/cache/webviewCacheChromium/f_000010
- /data/data/####/cache/webviewCacheChromium/f_000011
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000015
- /data/data/####/databases/google_analytics_v4.db-journal
- /sdcard/.UTSystemConfig/Global/Alvin2.xml
- /data/data/####/shared_prefs/com.google.android.gms.analytics.prefs.xml
- /sdcard/.DataStorage/ContextData.xml
- /data/data/####/shared_prefs/####_preferences.xml
- /data/data/####/cache/webviewCacheChromium/f_000017
- /data/data/####/cache/webviewCacheChromium/f_00001a
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/databases/webview.db-journal
- /data/data/####/files/gaClientId
- /data/data/####/cache/webviewCacheChromium/f_000014
- /data/data/####/cache/webviewCacheChromium/index
Другие:
Запускает следующие shell-скрипты:
- ps
- sh
Может автоматически отправлять СМС-сообщения.
