Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Tool.SMSSend.76.origin
Сетевая активность:
Подключается к:
- 1####.####.101
- m####.####.com
- i####.####.cn
- h####.####.com
- pag####.####.com
Запросы HTTP GET:
- m####.####.com/pic/zjpic/3/23777.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20161010/190cc35d1dfc2dc7.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20161103/758390e7f03a13c0.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/141384.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20161128/4e55d749b96fc54c.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160518/e291fe86fee3b926.jpg?x-oss-process=####
- m####.####.com/9kuimg/newtj/20160628/4752909824312574.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20161128/6a627dbc89840758.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/141661.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/14/139991.jpg?x-oss-process=####
- m####.####.com/static/images/top.png
- m####.####.com/9kuimg/zhuanji/20160817/827c75291d90e781.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/4/37433.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160428/9ae740e82a9871e2.jpg?x-oss-process=####
- m####.####.com/static/js/jquery.jplayer.min.js
- m####.####.com/pic/zjpic/14/138389.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160525/42eb7db2bc223a5e.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/145928.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20161206/a26fee3a187705ea.jpg?x-oss-process=####
- m####.####.com/static/js/player.js
- m####.####.com/taoge/804.htm
- m####.####.com/pic/zjpic/15/146326.jpg?x-oss-process=####
- m####.####.com/static/js/jquery.cookie.js
- m####.####.com/pic/gstx/2/11000.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160808/cad9afc4bb817c6e.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/2/19748.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160524/850fb09313b3f76d.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/5/42860.jpg?x-oss-process=####
- m####.####.com/pic/gstx/5/40253.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160817/0755b0b6aee318fc.jpg?x-oss-process=####
- m####.####.com/pic/gstx/1/959.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/3/20425.jpg?x-oss-process=####
- m####.####.com/pic/gstx/5/46502.jpg?x-oss-process=####
- m####.####.com/static/style/base.css
- m####.####.com/pic/gstx/1/147.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20151123/f436f57de92cb9dd.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/141619.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160928/93c969d6fdfb3b3b.jpg?x-oss-process=####
- m####.####.com/i/bang/bang_jingdian_1.png
- m####.####.com/9kuimg/zhuanji/20151116/bc8846a529fc5ec2.jpg?x-oss-process=####
- m####.####.com/static/images/searchBtn1.png
- m####.####.com/pic/zjpic/4/37903.jpg?x-oss-process=####
- m####.####.com/play/829043.htm
- m####.####.com/pic/zjpic/15/143812.jpg?x-oss-process=####
- m####.####.com/9kuimg/geshou/20160521/871465a95f3d001d.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/144961.jpg?x-oss-process=####
- m####.####.com/static/images/downBtn.png
- h####.####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&et=####&ja=####&ln=####&lo=####<=####&nv=####&rnd=####&si=####&st=####&su=####&v=####&lv=####&...
- m####.####.com/static/js/jquery.jplayer.lyric.js
- h####.####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&ep=####&et=####&ja=####&ln=####&lo=####<=####&nv=####&rnd=####&si=####&st=####&su=####&v=####&...
- m####.####.com/9kuimg/newtj/20160628/501274243cdaf9bf.jpg
- m####.####.com/9kuimg/zhuanji/20160718/f45937ca237f4333.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/141695.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/140455.jpg?x-oss-process=####
- m####.####.com/
- m####.####.com/static/images/pause_btn.png
- m####.####.com/9kuimg/newtj/20160627/9dca47ea7efb1bce.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160817/185a990e1728f88e.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/4/33209.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160823/b464e37aa14b9137.jpg?x-oss-process=####
- m####.####.com/9kuimg/geshou/20160521/a20c3d41e6571258.jpg?x-oss-process=####
- m####.####.com/static/images/line1.png
- m####.####.com/upload/2016/05/24/829043.m4a
- m####.####.com/9kuimg/geshou/20160202/28b93d8a8d846b53.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160817/bc687c944c53ae97.jpg?x-oss-process=####
- m####.####.com/static/images/playBtn.png
- m####.####.com/pic/zjpic/3/20777.jpg?x-oss-process=####
- h####.####.com/hm.js?141f152####
- m####.####.com/9kuimg/geshou/20160507/c3b61584e81e2588.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/14/139840.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/3/26262.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160524/8e7c153b0f69241c.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160624/dac992206427e61c.jpg?x-oss-process=####
- m####.####.com/static/images/play_btn.png
- m####.####.com/pic/gstx/5/46211.jpg?x-oss-process=####
- pag####.####.com/pagead/js/r20170308/r20170110/show_ads_impl.js
- pag####.####.com/pagead/gen_204?id=####&message=####
- m####.####.com/pic/zjpic/5/42495.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/142616.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/146481.jpg?x-oss-process=####
- i####.####.cn/iplookup/iplookup.php?format=####
- m####.####.com/pic/zjpic/15/141677.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20161019/34ae9f6066bf9a14.jpg?x-oss-process=####
- m####.####.com/9kuimg/geshou/20160512/72717e2d19fd9705.jpg?x-oss-process=####
- m####.####.com/images/no-small-avatar.png
- m####.####.com/9kuimg/zhuanji/20151124/3c684be1ff907ec9.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/141353.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/6/52348.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160817/1b412373264a2c21.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/140250.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160407/49391068dfa2fd7c.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160909/533c0ae15cd76aa2.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/5/42726.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/5/41937.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20170309/20ccce590a189af9.jpg?x-oss-process=####
- pag####.####.com/pagead/js/adsbygoogle.js
- m####.####.com/9kuimg/zhuanji/20161124/cdf96536d7cee8fe.jpg?x-oss-process=####
- m####.####.com/9kuimg/newtj/20160628/7642e0ead84269a4.jpg
- m####.####.com/9kuimg/geshou/20160521/f4a6f919a5c24c59.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/141372.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20161226/682f7bc696447ea2.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/7/68057.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/4/36175.jpg?x-oss-process=####
- m####.####.com/static/js/9kubdgw.js
- m####.####.com/pic/zjpic/3/20780.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160318/c752a3752bbd2064.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160524/ce300ace90792c12.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20161109/3208468c140d0551.jpg?x-oss-process=####
- m####.####.com/9kuimg/taoge/20160603/8c5b274f2e50cf21.jpg
- m####.####.com/9kuimg/zhuanji/20160817/13c43c8bc9d12082.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20170103/fa9bacdde4b20af3.jpg?x-oss-process=####
- m####.####.com/pic/gstx/1/2834.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20170118/9f0117d43780fd1e.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160518/22ee4f82714dc403.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/3/26342.jpg?x-oss-process=####
- m####.####.com/static/js/jquery.js
- m####.####.com/static/images/showLrc.png
- m####.####.com/static/js/TouchSlide.1.1.js
- m####.####.com/pic/zjpic/5/46668.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160524/d6503608b58bfe63.jpg?x-oss-process=####
- m####.####.com/9kuimg/taoge/20160525/e82b0392e647572a.jpg
- m####.####.com/pic/gstx/5/49139.jpg?x-oss-process=####
- m####.####.com/9kuimg/taoge/20160818/3bdacb72244e1362.jpg
- m####.####.com/9kuimg/zhuanji/20160321/1bff7530172fe87a.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/142344.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/141351.jpg?x-oss-process=####
- m####.####.com/static/js/9ku.js
- m####.####.com/9kuimg/zhuanji/20161222/e7fe5d416f5adc08.jpg?x-oss-process=####
- m####.####.com/play/645108.htm
- m####.####.com/pic/zjpic/4/38371.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/14/139772.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160817/aea9cecfc3666437.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20161111/855954f016981008.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/14/131760.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20170118/0e834d403c267746.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20161103/5ccc86bb1ca25c4a.jpg?x-oss-process=####
- 1####.####.101/mp32.9ku.com/upload/2016/05/24/829043.m4a
- m####.####.com/9kuimg/zhuanji/20160816/7b8442308dd188ce.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/3/24731.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/1/1652.jpg?x-oss-process=####
- m####.####.com/static/images/logoBack.png
- m####.####.com/static/js/base.js
- m####.####.com/9kuimg/newtj/20160628/3b3d1a03dceda440.jpg?x-oss-process=####
- m####.####.com/9kuimg/newtj/20160628/5f69a98e2d9a4ed1.jpg?x-oss-process=####
- h####.####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&et=####&ja=####&ln=####&lo=####&nv=####&rnd=####&si=####&st=####&su=####&v=####&lv=####&tt=####
- m####.####.com/9kuimg/zhuanji/20170103/2c435830565cf487.jpg?x-oss-process=####
- m####.####.com/taoge/545.htm
- m####.####.com/pic/zjpic/15/142807.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/140177.jpg?x-oss-process=####
- m####.####.com/9kuimg/geshou/20160521/756f8588e987a539.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/141987.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/5/42853.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160708/41a31ec012e9ccde.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160229/65c1435694a70f0a.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/2/16920.jpg?x-oss-process=####
- m####.####.com/pic/gstx/1/9261.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20161009/44f4d910f7e289f0.jpg?x-oss-process=####
- m####.####.com/static/images/titLine.png
- m####.####.com/9kuimg/zhuanji/20170310/39a940d429cb8f86.jpg?x-oss-process=####
- m####.####.com/pic/gstx/1/855.jpg?x-oss-process=####
- m####.####.com/pic/gstx/2/12014.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/3/29905.jpg?x-oss-process=####
- m####.####.com/9kuimg/zhuanji/20160524/59c4f86e074e0111.jpg?x-oss-process=####
- m####.####.com/pic/zjpic/15/146480.jpg?x-oss-process=####
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/cache/webviewCacheChromium/f_00002a
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/cache/webviewCacheChromium/f_00000e
- /data/data/####/cache/webviewCacheChromium/f_00000d
- /data/data/####/cache/webviewCacheChromium/f_00000f
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/f_000018
- /data/data/####/cache/webviewCacheChromium/f_000019
- /data/data/####/cache/webviewCacheChromium/f_000016
- /data/data/####/cache/webviewCacheChromium/f_000017
- /data/data/####/cache/webviewCacheChromium/f_000014
- /data/data/####/cache/webviewCacheChromium/f_000015
- /data/data/####/cache/webviewCacheChromium/f_000012
- /data/data/####/cache/webviewCacheChromium/f_000013
- /data/data/####/cache/webviewCacheChromium/f_000010
- /data/data/####/cache/webviewCacheChromium/f_000011
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/shared_prefs/WebViewSettings.xml
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/cache/webviewCacheChromium/f_000029
- /data/data/####/cache/webviewCacheChromium/f_000028
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/f_00001f
- /data/data/####/cache/webviewCacheChromium/f_00001d
- /data/data/####/cache/webviewCacheChromium/f_00001e
- /data/data/####/cache/webviewCacheChromium/f_00001b
- /data/data/####/cache/webviewCacheChromium/f_00001c
- /data/data/####/cache/webviewCacheChromium/f_00001a
- /data/data/####/databases/webview.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000026
- /data/data/####/cache/webviewCacheChromium/f_000025
- /data/data/####/cache/webviewCacheChromium/f_000024
- /data/data/####/cache/webviewCacheChromium/f_000023
- /data/data/####/cache/webviewCacheChromium/f_000022
- /data/data/####/cache/webviewCacheChromium/f_000021
- /data/data/####/cache/webviewCacheChromium/f_000020
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/cache/webviewCacheChromium/f_000027
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/files/dex/cj.jar
- /data/data/####/cache/webviewCacheChromium/index
Другие:
Может автоматически отправлять СМС-сообщения.
