Техническая информация
Вредоносные функции:
Отправляет СМС-сообщения:
- 106906316717912114: PAY#wjGKvK5ZE7926RMvOx.Dtvanx5wwYKL5Zza6b.swBOoyQYdKZVTaSajXxX/dsC.l
- 106906316717912114: 苏州易N支付##########
Сетевая активность:
Подключается к:
- s####.####.com
- v####.####.com
- v####.####.com:998
- p####.####.com
- 1####.cn
- s####.####.cn
- m####.####.tv
- 1####.####.90
- a####.####.com
Запросы HTTP GET:
- v####.####.com/public/v2/201604/847edb0f2e19a065.jpg
- v####.####.com/v3/images/VIP.png
- v####.####.com/public/v2/201604/a6ccc953e4f93d32.jpg
- p####.####.com/cityjson?ie=####
- v####.####.com/public/v2/201604/48e00143b02eb221.jpg
- m####.####.tv/static/js/v12/pkg/mtool_v12_9d9d3156a.js
- m####.####.tv/static/js/v12/pkg/mcore_v12_b11cffdae.js
- v####.####.com:998/v3/recommend.html
- 1####.####.90/code/init?app=####&lon=####&count=####&imei=####&iccid=####&nwtype=####&ctech=####&aimsi=####&cpid=####&cid=####&osversion=####&pck=####...
- v####.####.com/v3/images/bo.png
- v####.####.com/v3/css/style-bak.css
- v####.####.com/v3/css/style.css
- v####.####.com/v3/images/1.jpg
- v####.####.com/v2/recommend.do
- v####.####.com/v2/video.do?channel=####&videoTableType=####&imsi=####&videoId=####
- s####.####.com/website/searchsource?query=*_*from=unknown*_*charset=utf8*_*ref=http://video.elouge.com:998/v3/video.html?id=####&table=1####
- v####.####.com/v3/js/core.js
- v####.####.com/v2/funs.web
- v####.####.com/v3/js/apps.js
- s####.####.com/website/pv?rprotoc####
- v####.####.com/v2/video.hotlist
- v####.####.com/v3/images/more.png
- v####.####.com/public/v2/201604/17686305416604ff.jpg
- s####.####.cn/versioncheck.aspx
- v####.####.com/v3/video.html?id=####&table=####
- v####.####.com/v3/images/loading.gif
- v####.####.com/public/v2/201604/1db4f9acbd22c7b6.jpg
- v####.####.com/public/v2/201604/96c1f91255a7ee2e.jpg
- v####.####.com/public/v2/201604/9b3e8ff60eb90273.jpg
- p####.####.com/v7/config/channel?cl=####&uc=####
- v####.####.com/v2/recommend.banner
- v####.####.com/v3/images/jindu.png
- v####.####.com/public/v2/banner/87f66e4.jpg
- p####.####.com/v5/config/init?cl=####
- v####.####.com/public/v2/banner/X1K4zmQ.jpg
- v####.####.com/v3/images/reflash.png
- v####.####.com/public/v2/201604/ebe26c7982c0ec13.jpg
- v####.####.com/public/v2/201604/63a78eb2593004bd.jpg
Запросы HTTP POST:
- a####.####.com/app_logs
- 1####.cn/phone/fetch
- v####.####.com/v2/funs.set
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/cache/webviewCacheChromium/f_00000e
- /data/data/####/cache/webviewCacheChromium/f_00000d
- /data/data/####/cache/webviewCacheChromium/f_00000f
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/shared_prefs/device_authenticity.xml
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/shared_prefs/umeng_general_config.xml
- /data/data/####/files/.umeng/exchangeIdentity.json
- /data/data/####/shared_prefs/MmData.xml
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/files/.imprint
- /data/data/####/shared_prefs/util_preference.xml
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/databases/lepeng.db-journal
- /data/data/####/shared_prefs/Filter.xml
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/databases/webview.db-journal
- /data/data/####/files/umeng_it.cache
- /data/data/####/shared_prefs/vkels.xml
- /data/data/####/shared_prefs/umeng_general_config.xml.bak
- /data/data/####/shared_prefs/STORE.xml
- /data/data/####/cache/webviewCacheChromium/index
Другие:
Может автоматически отправлять СМС-сообщения.
