Техническая информация
Вредоносные функции:
Предлагает установить сторонние приложения.
Сетевая активность:
Подключается к:
- onaww####.####.com
- p####.####.com
- i####.####.cc
Запросы HTTP GET:
- i####.####.cc/handao_img/newsp/member_39.jpg
- i####.####.cc/handao_img/newsp/member_47.jpg
- p####.####.com/json2/stat.php?pay_Id=####&package=####&appid=####&v=####&channel=####&imei=####&md5=####&azsj=####
- i####.####.cc/handao_img/newsp/member_019.jpg
- i####.####.cc/handao_img/app_img/pay_img/pay_huangjin_top2.png
- i####.####.cc/handao_img/app_img/pay_img/p_top3.png
- i####.####.cc/handao_img/newsp/member_07.jpg
- i####.####.cc/handao_img/newsp/member_36.jpg
- i####.####.cc/handao_img/newsp/zuan_1.jpg
- i####.####.cc/handao_img/newsp/member_32.jpg
- i####.####.cc/handao_img/newsp/member_12.jpg
- i####.####.cc/handao_img/newsp/member_16.jpg
- i####.####.cc/handao_img/newsp/bo_04.jpg
- i####.####.cc/handao_img/newsp/member_41.jpg
- i####.####.cc/handao_img/newsp/member_20.jpg
- i####.####.cc/handao_img/newsp/member_31.jpg
- i####.####.cc/handao_img/newsp/member_11.jpg
- i####.####.cc/handao_img/app_img/pay_img/p_top1.png
- i####.####.cc/handao_img/app_img/video/jpg/shikan30.jpg
- i####.####.cc/handao_img/app_img/pay_img/p_top2.png
- i####.####.cc/handao_img/newsp/member_44.jpg
- p####.####.com/json2/update.php?pay_Id=####&package=####&appid=####&v=####&channel=####&imei=####&md5=####&azsj=####
- i####.####.cc/handao_img/newsp/bo_5.jpg
- i####.####.cc/handao_img/newsp/member_5.jpg
- i####.####.cc/handao_img/newsp/member_42.jpg
- i####.####.cc/handao_img/newsp/member_28.jpg
- i####.####.cc/handao_img/newsp/member_50.jpg
- i####.####.cc/handao_img/newsp/member_9.jpg
- i####.####.cc/handao_img/newsp/member_6.jpg
- i####.####.cc/handao_img/newsp/member_33.jpg
- i####.####.cc/handao_img/app_img/video/jpg/shikan00015.jpg
- i####.####.cc/handao_img/newsp/zuan_4.jpg
- i####.####.cc/handao_img/newsp/member_34.jpg
- i####.####.cc/handao_img/newsp/member_15.jpg
- i####.####.cc/handao_img/newsp/member_21.jpg
- i####.####.cc/handao_img/newsp/member_01.jpg
- p####.####.com/json2/upstat.php?pay_Id=####&package=####&appid=####&v=####&channel=####&imei=####&md5=####&azsj=####
- i####.####.cc/handao_img/newsp/member_35.jpg
- p####.####.com/json2/my.php?pay_Id=####&package=####&appid=####&v=####&channel=####&imei=####&md5=####&azsj=####
- i####.####.cc/handao_img/newsp/member_37.jpg
- i####.####.cc/handao_img/newsp/member_26.jpg
- i####.####.cc/handao_img/newsp/member_2.jpg
- p####.####.com/json2/free.php?pay_Id=####&package=####&appid=####&imei=####&v=####&channel=####
- i####.####.cc/handao_img/newsp/member_3.jpg
- onaww####.####.com/j38/app6/huobao_452.apk?sj=####
- i####.####.cc/handao_img/newsp/member_04.jpg
- p####.####.com/json2/upstat.php?pay_Id=####&package=####&appid=####&v=####&channel=####&imei=####&md5=####&submit=####&azsj=####
- i####.####.cc/handao_img/newsp/member_30.jpg
- i####.####.cc/handao_img/newsp/zuan_2.jpg
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/cache/picasso-cache/41a238e5d21c81dafafe4a6d1450e65d.1.tmp
- /data/data/####/cache/picasso-cache/bd449ffbef3288550a64d2b0d8ab0a2f.1.tmp
- /data/data/####/cache/picasso-cache/acc8642736f2f15b7286648176bc568c.1.tmp
- /data/data/####/cache/picasso-cache/322b83bed3f20531186a3cff44ad0e87.0.tmp
- /data/data/####/cache/picasso-cache/fa8c8a31dd54e5c9028fe77f97be919d.1.tmp
- /data/data/####/cache/picasso-cache/86fcbf6e09e9dcf280c601bc43e5e690.1.tmp
- /data/data/####/cache/picasso-cache/f84697c4ce5d602afcad69aff7dc7ba2.1.tmp
- /data/data/####/cache/picasso-cache/41a238e5d21c81dafafe4a6d1450e65d.0.tmp
- /data/data/####/databases/webview.db-journal
- /data/data/####/cache/picasso-cache/694e2afe85c137b272b4c417736aa005.1.tmp
- /data/data/####/cache/picasso-cache/a1984faee0b81b2f40af0063a43b638e.1.tmp
- /data/data/####/databases/natobww.db-journal
- /data/data/####/shared_prefs/config.xml
- /data/data/####/cache/picasso-cache/21a506a2b80f2344e6294a0c289f3f7b.0.tmp
- /data/data/####/cache/picasso-cache/b8b717cb9bfb6da32f0a119d199839bc.1.tmp
- /data/data/####/cache/picasso-cache/journal.tmp
- /data/data/####/cache/picasso-cache/58bb36feb92acf976fc1a7f84e06a095.0.tmp
- /data/data/####/cache/picasso-cache/d08a647020485bdc16b03dbabf1106d0.1.tmp
- /data/data/####/cache/picasso-cache/0471cd243cb39bb612814fc50e722dc3.0.tmp
- /data/data/####/cache/picasso-cache/4fe28f1b403183177333b09d9dc6155d.0.tmp
- /data/data/####/cache/picasso-cache/4caa3bbe1beae4e45464d35228d6e261.0.tmp
- /data/data/####/cache/picasso-cache/1ac2072fe5fe09bd43d55bbdab7bb4fb.0.tmp
- /data/data/####/shared_prefs/config.xml.bak
- /data/data/####/cache/picasso-cache/b66188d43590f446adb3931a04935940.1.tmp
- /data/data/####/cache/picasso-cache/4fe28f1b403183177333b09d9dc6155d.1.tmp
- /data/data/####/cache/picasso-cache/b8b717cb9bfb6da32f0a119d199839bc.0.tmp
- /data/data/####/cache/picasso-cache/18cd6e6fa68c7a11696935b1dfcf820d.0.tmp
- /data/data/####/cache/picasso-cache/576c2a1db9b857b39244bebda16a601b.0.tmp
- /data/data/####/cache/picasso-cache/78731c73df90dfea3ccb7a11b136d8a2.1.tmp
- /data/data/####/cache/picasso-cache/f6941dc5917aa9eb6d086f6fc94472ab.0.tmp
- /data/data/####/cache/picasso-cache/4ff1579c79e960b070b498ac01aca40b.0.tmp
- /data/data/####/cache/picasso-cache/9ea3678c317d203cbf4d2fc8062ba66f.1.tmp
- /data/data/####/cache/picasso-cache/1ac2072fe5fe09bd43d55bbdab7bb4fb.1.tmp
- /data/data/####/cache/picasso-cache/322b83bed3f20531186a3cff44ad0e87.1.tmp
- /data/data/####/cache/picasso-cache/f6941dc5917aa9eb6d086f6fc94472ab.1.tmp
- /sdcard/cfba883dfdf288abe9ade3fd56a71b85/p_top2.png
- /data/data/####/cache/picasso-cache/18cd6e6fa68c7a11696935b1dfcf820d.1.tmp
- /data/data/####/cache/picasso-cache/c2b5bc142e05b833ce51aba3d83b1a78.0.tmp
- /data/data/####/cache/picasso-cache/694e2afe85c137b272b4c417736aa005.0.tmp
- /data/data/####/cache/picasso-cache/c9e3fcef1e29b281516f4889fde06e56.1.tmp
- /sdcard/cfba883dfdf288abe9ade3fd56a71b85/p_top1.png
- /data/data/####/cache/picasso-cache/14189e15b69afe77849e192578cc305a.0.tmp
- /data/data/####/cache/picasso-cache/57093b4f5a02dec9b4af0ef31d30ed8e.1.tmp
- /data/data/####/cache/picasso-cache/14189e15b69afe77849e192578cc305a.1.tmp
- /data/data/####/cache/picasso-cache/57093b4f5a02dec9b4af0ef31d30ed8e.0.tmp
- /data/data/####/cache/picasso-cache/6f00e631990e59f141e3fac3728ce322.0.tmp
- /data/data/####/cache/picasso-cache/6f00e631990e59f141e3fac3728ce322.1.tmp
- /data/data/####/cache/picasso-cache/b66188d43590f446adb3931a04935940.0.tmp
- /data/data/####/cache/picasso-cache/78731c73df90dfea3ccb7a11b136d8a2.0.tmp
- /data/data/####/cache/picasso-cache/9b246c629f46f91b1494fbf6dfa3fca0.0.tmp
- /data/data/####/cache/picasso-cache/27f04a1fba7518f2a1f890b6c1aca151.0.tmp
- /data/data/####/cache/picasso-cache/0109ed8eede9f7952d62a9a01dc98d51.0.tmp
- /data/data/####/cache/picasso-cache/8315ca3efe0e104ff9271257e6806376.0.tmp
- /data/data/####/cache/picasso-cache/9ea3678c317d203cbf4d2fc8062ba66f.0.tmp
- /sdcard/cfba883dfdf288abe9ade3fd56a71b85/p_top3.png
- /data/data/####/cache/picasso-cache/58bb36feb92acf976fc1a7f84e06a095.1.tmp
- /data/data/####/cache/picasso-cache/2b57ef2c25c0657ec549e09f70c7bef7.1.tmp
- /sdcard/cfba883dfdf288abe9ade3fd56a71b85/pay_huangjin_top2.png
- /data/data/####/cache/picasso-cache/4ff1579c79e960b070b498ac01aca40b.1.tmp
- /data/data/####/cache/picasso-cache/d08a647020485bdc16b03dbabf1106d0.0.tmp
- /data/data/####/cache/picasso-cache/cca9050c43b6e4244b077b96983ec43b.1.tmp
- /data/data/####/cache/picasso-cache/cca9050c43b6e4244b077b96983ec43b.0.tmp
- /data/data/####/cache/picasso-cache/576c2a1db9b857b39244bebda16a601b.1.tmp
- /data/data/####/cache/picasso-cache/86fcbf6e09e9dcf280c601bc43e5e690.0.tmp
- /data/data/####/cache/picasso-cache/8315ca3efe0e104ff9271257e6806376.1.tmp
- /data/data/####/cache/picasso-cache/acc8642736f2f15b7286648176bc568c.0.tmp
- /data/data/####/cache/picasso-cache/78b83a51ecc5e0eb4ce6d124adc6fe8f.1.tmp
- /data/data/####/cache/picasso-cache/6638c37c206152f2f22a192df3f0b61d.0.tmp
- /data/data/####/cache/picasso-cache/a1984faee0b81b2f40af0063a43b638e.0.tmp
- /sdcard/huobaotv.apk
- /data/data/####/cache/picasso-cache/0471cd243cb39bb612814fc50e722dc3.1.tmp
- /data/data/####/cache/picasso-cache/bd449ffbef3288550a64d2b0d8ab0a2f.0.tmp
- /data/data/####/cache/picasso-cache/6638c37c206152f2f22a192df3f0b61d.1.tmp
- /data/data/####/cache/picasso-cache/9b246c629f46f91b1494fbf6dfa3fca0.1.tmp
- /data/data/####/libats.lock
- /data/data/####/cache/picasso-cache/4caa3bbe1beae4e45464d35228d6e261.1.tmp
- /data/data/####/cache/picasso-cache/21a506a2b80f2344e6294a0c289f3f7b.1.tmp
- /data/data/####/cache/picasso-cache/f84697c4ce5d602afcad69aff7dc7ba2.0.tmp
- /data/data/####/cache/picasso-cache/90b2d700770232c003b7f7d1884eee36.0.tmp
- /data/data/####/cache/picasso-cache/27f04a1fba7518f2a1f890b6c1aca151.1.tmp
- /data/data/####/cache/picasso-cache/78b83a51ecc5e0eb4ce6d124adc6fe8f.0.tmp
- /data/data/####/cache/picasso-cache/90b2d700770232c003b7f7d1884eee36.1.tmp
- /data/data/####/cache/picasso-cache/2b57ef2c25c0657ec549e09f70c7bef7.0.tmp
- /data/data/####/cache/picasso-cache/c9e3fcef1e29b281516f4889fde06e56.0.tmp
- /data/data/####/cache/picasso-cache/0109ed8eede9f7952d62a9a01dc98d51.1.tmp
- /data/data/####/cache/picasso-cache/fa8c8a31dd54e5c9028fe77f97be919d.0.tmp
- /data/data/####/cache/picasso-cache/c2b5bc142e05b833ce51aba3d83b1a78.1.tmp
Другие:
Может автоматически отправлять СМС-сообщения.
