Техническая информация
Вредоносные функции:
Отправляет СМС-сообщения:
- 3020: 200
- 3010: 200
Сетевая активность:
Подключается к:
- bac####.####.ir
- bac####.####.ir:8080
Запросы HTTP GET:
- bac####.####.ir/api/cb1f4e36-c707-b715-ff0f-9006dc34a300/v1/files/video_thumbnail/0f7bde33-fcbe-4ac3-a1e5-a94e7c3a4a68.jpg
- bac####.####.ir/api/cb1f4e36-c707-b715-ff0f-9006dc34a300/v1/files/video_thumbnail/6378d1c1-8914-4b71-bbf0-4bf27946c908.jpg
- bac####.####.ir/api/cb1f4e36-c707-b715-ff0f-9006dc34a300/v1/files/video_thumbnail/7d85a95e-f702-4be3-8757-0e24c062d57b.jpg
- bac####.####.ir/api/cb1f4e36-c707-b715-ff0f-9006dc34a300/v1/files/user_avatar/iraniranbe24f67c-912f-44c2-b5e9-a8a661941988.png
- bac####.####.ir/api/cb1f4e36-c707-b715-ff0f-9006dc34a300/v1/files/video_thumbnail/a1d5aae3-bf61-4f53-a8c8-616fd985084e.jpg
- bac####.####.ir/api/cb1f4e36-c707-b715-ff0f-9006dc34a300/v1/files/video_thumbnail/0677aeb0-ede1-4a20-860c-cd818abbecca.jpg
- bac####.####.ir/api/cb1f4e36-c707-b715-ff0f-9006dc34a300/v1/files/user_avatar/rahmah6e366671-c832-4999-b728-f97c8967776f.png
- bac####.####.ir/api/cb1f4e36-c707-b715-ff0f-9006dc34a300/v1/files/video_thumbnail/0b5f7bd5-ba88-4288-a536-427275f392ca.jpg
- bac####.####.ir/api/cb1f4e36-c707-b715-ff0f-9006dc34a300/v1/files/video_thumbnail/da248c67-e195-4b85-9780-dd1b2fa30570.jpg
- bac####.####.ir/api/cb1f4e36-c707-b715-ff0f-9006dc34a300/v1/files/video_thumbnail/2079bbb2-fac7-4af1-b504-338266454cac.jpg
- bac####.####.ir/api/cb1f4e36-c707-b715-ff0f-9006dc34a300/v1/files/video_thumbnail/6a90a46b-bc93-4204-9f4a-26f9b0ffeccf.jpg
- bac####.####.ir/api/cb1f4e36-c707-b715-ff0f-9006dc34a300/v1/files/video_thumbnail/bd77bc79-7629-4b36-af1a-8f4f8c397387.jpg
- bac####.####.ir/api/cb1f4e36-c707-b715-ff0f-9006dc34a300/v1/files/video_thumbnail/de5cdf17-197f-4a3f-9256-0d97d400b373.jpg
Запросы HTTP POST:
- bac####.####.ir:8080/api/v1/binary
- bac####.####.ir/api/v1/binary
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A59F02BA-0001-0834-E53F4D579970BeginSession.cls_temp
- /data/data/####/files/.Fabric/io.fabric.sdk.android:fabric/com.crashlytics.settings.json
- /data/data/####/shared_prefs/com.crashlytics.prefs.xml
- /data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A59F02BA-0001-0834-E53F4D579970SessionDevice.cls_temp
- /sdcard/Android/data/####/cache/uil-images/17612681990
- /sdcard/Android/data/####/cache/uil-images/-5312753900.tmp
- /sdcard/Android/data/####/cache/uil-images/-8532168190.tmp
- /data/data/####/databases/google_analytics_v4.db-journal
- /data/data/####/shared_prefs/com.google.android.gms.analytics.prefs.xml.bak
- /data/data/####/shared_prefs/BackendlessPrefs.xml
- /data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
- /sdcard/Android/data/####/cache/uil-images/990821020.tmp
- /data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A59F02BA-0001-0834-E53F4D579970SessionOS.cls_temp
- /sdcard/Android/data/####/cache/uil-images/3013887510.tmp
- /data/data/####/shared_prefs/multidex.version.xml
- /data/data/####/shared_prefs/TwitterAdvertisingInfoPreferences.xml
- /data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/5889A59F02BA-0001-0834-E53F4D579970SessionApp.cls_temp
- /sdcard/Android/data/####/cache/uil-images/-10943662660.tmp
- /data/data/####/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml
- /sdcard/Android/data/####/cache/uil-images/-18829138420.tmp
- /sdcard/Android/data/####/cache/uil-images/-15339846510.tmp
- /data/data/####/databases/OneSignal.db-journal
- /data/data/####/shared_prefs/abt.xml
- /sdcard/Android/data/####/cache/uil-images/21066316970.tmp
- /data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_c44ab7a9-d1c7-4ac9-9e4c-f8fd930c47d4_1485415840029.tap
- /sdcard/Android/data/####/cache/uil-images/16643386440.tmp
- /data/data/####/files/gaClientId
- /sdcard/Android/data/####/cache/uil-images/-5173348310.tmp
- /sdcard/Android/data/####/cache/uil-images/-14194549020.tmp
- /sdcard/Android/data/####/cache/.nomedia
- /data/data/####/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
- /sdcard/Android/data/####/cache/uil-images/-4384065380.tmp
- /data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
- /data/data/####/shared_prefs/io.fabric.sdk.android:fabric:aet.xml
- /sdcard/Android/data/####/cache/uil-images/journal.tmp
- /data/data/####/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_02f5837f-f2f4-4e89-beb1-b60b6b9bf9a4_1485415841513.tap
- /data/data/####/shared_prefs/appPrefs.xml
- /data/data/####/shared_prefs/com.google.android.gms.analytics.prefs.xml
- /data/data/####/databases/OneSignal.db
Другие:
Может автоматически отправлять СМС-сообщения.
