Техническая информация
Вредоносные функции:
Отправляет СМС-сообщения:
- TMGAME5 01 A1: 53010
Сетевая активность:
Подключается к:
- woo####.com:8082
- t####.####.com:6566
- tra####.####.com
- a####.####.mobi
- gl####.####.com:6566
- technol####.net
- 2####.####.155
- adse####.####.mobi
- d####.####.com
- f####.####.com
- gl####.####.com
- trackme####.com
- a####.####.com
- pag####.####.com
Запросы HTTP GET:
- technol####.net/wp-content/plugins/wp-share-buttons/Front_end/js/custom_...
- technol####.net/wp-content/themes/yeahthemes-sparkle/js/jquery.flexslide...
- technol####.net/wp-content/themes/yeahthemes-sparkle/style.css
- a####.####.mobi/?utm_term=####&clickverify=####&utm_content=####
- gl####.####.com/AdRedirect.aspx?offerid=####&cid=####&affid=####&aff_sub...
- trackme####.com/r/181a4b72-2e8f-11e7-bd88-11413e67e5b8/0/
- technol####.net/wp-content/themes/yeahthemes-sparkle/js/yt.custom.min.js...
- d####.####.com/d/33164576433fd4daa1?sub=####&do=####&test=####
- technol####.net/wp-content/themes/yeahthemes-sparkle/framework/css/boots...
- adse####.####.mobi/tracker/click.php?link=####&click_id=####&pub_id=####...
- technol####.net/wp-content/themes/yeahthemes-sparkle/css/font-awesome.cs...
- technol####.net/wp-includes/js/jquery/jquery.js?ver=####
- technol####.net/entertainment/gaming/super-mario-run-loses-top-spot-high...
- technol####.net/wp-content/themes/yeahthemes-sparkle/js/jquery.sharrre.m...
- technol####.net/wp-content/themes/yeahthemes-sparkle/css/flexslider.css?...
- trackme####.com/r/181a4b72-2e8f-11e7-bd88-11413e67e5b8/1/
- a####.####.com/pool_link/1514/bmconv_20170501185615_06d99b20_8a09_499a_9...
- technol####.net/wp-content/plugins/wp-share-buttons/style/front.end.css?...
- pag####.####.com/pagead/js/adsbygoogle.js
- a####.####.mobi/proc.php?5de7557####
- d####.####.com/d/33164576433fd4daa1?sub=####
- technol####.net/wp-content/themes/sparkle-childtheme/style.css?ver=####
- technol####.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=####
- technol####.net/wp-content/themes/yeahthemes-sparkle/framework/js/bootst...
- tra####.####.com/?p=####&media_type=####&click_id=####
- gl####.####.com:6566/AdRedirect.aspx?offerid=####&cid=####&affid=####&af...
- d####.####.com/gw?url=####&vId=####&ef=####&ch=####&nid=####&sub=####&te...
- a####.####.mobi/?utm_medium=####&utm_campaign=####&cid=####
- 2####.####.155/cm-tracker/cmreqrec.do?pid=####&sysuid=####&cid=####&publ...
- technol####.net/wp-includes/js/wp-emoji-release.min.js?ver=####
- technol####.net/wp-content/themes/yeahthemes-sparkle/css/animate.css?ver...
- technol####.net/wp-content/themes/yeahthemes-sparkle/js/yt.script.min.js...
- technol####.net/wp-includes/js/wp-embed.min.js?ver=####
- f####.####.com/css?family=####&ver=####
Запросы HTTP POST:
- t####.####.com:6566/app.aspx?offerid=####&affid=####&adrid=####&imei=###...
- woo####.com:8082/sdkwap/sd.action?b=####
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/databases/webview.db-journal
- /data/data/####/shared_prefs/com.hyjt.app.spf_wap_413.xml
- /data/data/####/shared_prefs/####_preferences.xml
- /sdcard/commonsdk/update.data
- /data/data/####/shared_prefs/####_preferences.xml.bak
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/cache/webviewCacheChromium/index
Другие:
Может автоматически отправлять СМС-сообщения.
