Техническая информация
Вредоносные функции:
Загружает из Интернета следующие детектируемые угрозы:
- Android.Banker.1137
Отправляет данные получаемых СМС-сообщений на удалённый хост.
Сетевая активность:
Подключается к:
- s####.####.com
- con####.####.net
- mediafi####.####.net
- plat####.####.com
- face####.com
- o####.website
- a####.####.net
- c####.####.com
- downloa####.####.com
- trans####.####.com
- fast####.####.com
- googlet####.com
- media####.com
- a####.####.com
Запросы HTTP GET:
- plat####.####.com/widgets/follow_button.html?screen_name=####&show_count=####&show_screen_name=####
- a####.####.net/ads.min.js
- a####.####.com/measure.min.js
- a####.####.com/ajax/libs/jquery/1.7.2/jquery.min.js
- s####.####.com/stats/page_view_event/0C8902ACD83D44E0/a.js?wl_div_hid_t0=####&div_hid_t0=####&wl_i_blk=####&i_blk=####&s_blk=####&is_ab=####&is_wl=###...
- a####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/paper.css
- a####.####.net/adimages/textlink-ads.jpg
- a####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/jquery.fancybox.css
- a####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/nprogress.css
- media####.com/blank.html
- a####.####.net/apk.html
- a####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/translateelement.css
- a####.####.com/adimages/adsense.js
- a####.####.net/js/bootstrap.min.js
- con####.####.net/en_US/sdk.js?_=####
- c####.####.com/css/mfv4_118148.php?ver=####
- trans####.####.com/r/collect?v=####&_v=####&a=####&t=####&_s=####&dl=####&dr=####&ul=####&de=####&dt=####&sd=####&sr=####&vp=####&je=####&_u=####&jid=...
- a####.####.net/js/jquery.waypoints.min.js
- c####.####.com/css/mfv3_118148.php?ver=####
- a####.####.net/js/magnific-popup-options.js
- a####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/bootstrap-paper.min.css
- fast####.####.com/a/api/fastlane.json?account_id=####&size_id=####&p_pos=####&rp_floor=####&rf=####&p_screen_res=####&tg_fl.eid=####&tg_fl.uname=####&...
- c####.####.com/images/backgrounds/footer/social/footerIcons.png
- a####.####.net/css/bootstrap.css
- c####.####.com/css/download.css_118148.php?ver=####
- a####.####.net/css/icomoon.css
- mediafi####.####.net/w/1.0/jstag?nc=####
- a####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/analytics.js.indir
- c####.####.com/js/encoder_118148.js
- media####.com/unicorn/images/mf_logo_flame_mono.svg
- a####.####.net/js/jquery.easing.1.3.js
- a####.####.com/adimages/textlink-ads.jpg
- a####.####.net/js/modernizr-2.6.2.min.js
- a####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/lightgallery.min.css
- googlet####.com/tag/js/gpt.js
- a####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/element_main.js.indir
- trans####.####.com/analytics.js
- media####.com/file/b8sijf29965z01h/INSTAGRAM+FOLLOWERS+V1.3.apk?target=####
- trans####.####.com/translate_a/element.js?cb=####
- a####.####.net/js/jquery.magnific-popup.min.js
- a####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/font-awesome.min.css
- face####.com/plugins/like.php?href=####&send=####&layout=####&width=####&show_faces=####&action=####&colorscheme=####&f####&height=####
- a####.####.com/header/3196.js
- a####.####.net/css/style.css
- a####.####.net/js/jquery.countTo.js
- downloa####.####.com/ce2jj9pyp68g/b8sijf29965z01h/INSTAGRAM+FOLLOWERS+V1.3.apk
- a####.####.net/images/img_bg_1.jpg
- o####.website/
- a####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/main.js.indir
- a####.####.net/css/magnific-popup.css
- a####.####.net/js/jquery.min.js
- c####.####.com/js/master_118148.js
- a####.####.net/js/main.js
- a####.####.net/css/animate.css
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/shared_prefs/p.xml
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/shared_prefs/com.google.android.gms.measurement.prefs.xml.bak
- /data/data/####/databases/google_analytics_v4.db-journal
- /data/data/####/shared_prefs/com.google.android.gms.analytics.prefs.xml.bak
- /data/data/####/cache/ads2093793135.jar
- /data/data/####/databases/webview.db-journal
- /data/data/####/databases/com.google.android.gms.ads.db/localstorage/http_app1.realfollowers.net_0.localstorage-journal
- /data/data/####/shared_prefs/com.google.android.gms.analytics.prefs.xml
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/shared_prefs/p.xml.bak
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/shared_prefs/com.google.android.gms.measurement.prefs.xml
- /data/data/####/files/gaClientId
- /data/data/####/databases/com.google.android.gms.ads.db/localstorage/http_www.mediafire.com_0.localstorage-journal
- /data/data/####/cache/ApplicationCache.db-journal
- /data/data/####/cache/webviewCacheChromium/index
Другие:
Может автоматически отправлять СМС-сообщения.
