Техническая информация
Вредоносные функции:
Отправляет СМС-сообщения:
- +32324: ON MON
Сетевая активность:
Подключается к:
- UDP(DNS) <Google DNS>
- TCP(GCM) <Google Host>
- TCP(HTTP/1.1) lu####.net:80
- TCP(HTTP/1.1) fil####.apk####.com:80
- TCP(HTTP/1.1) contro####.viland####.com:80
- TCP(TLS/1.0) lh3.googleu####.com:443
- TCP(TLS/1.0) ssl.google-####.com:443
Запросы DNS:
- contro####.viland####.com
- fil####.apk####.com
- lh3.googleu####.com
- lu####.net
- set####.viland####.com
- ssl.google-####.com
Запросы HTTP GET:
- contro####.viland####.com/apksubs.php?&shortcode=####&keyword=####
- contro####.viland####.com/demo.php
- contro####.viland####.com/shotcut_setting.php?&isDelay=####&packageName=...
- fil####.apk####.com/games/playstore.apk
- lu####.net/
- lu####.net/css/bootstrap.min.css
- lu####.net/css/cake.generic.css
- lu####.net/css/styles.css
- lu####.net/images/Jangan dilihat gan.PNG
- lu####.net/images/Jika anda melihatnya sekali, mungkin anda akan tertipu...
- lu####.net/images/anak melompa.png
- lu####.net/images/icons/3.jpg
- lu####.net/images/icons/4.jpg
- lu####.net/images/icons/7.jpg
- lu####.net/images/icons/icon_gototop.png
- lu####.net/images/icons/mn_01.png
- lu####.net/images/icons/mn_02.png
- lu####.net/images/icons/mn_03.png
- lu####.net/images/icons/mn_04.png
- lu####.net/images/icons/mn_05.png
- lu####.net/images/icons/mn_08.png
- lu####.net/images/icons/xemdi_01.png
- lu####.net/images/icons/xemdi_25.png
- lu####.net/images/icons/xemdi_logo01.png
- lu####.net/images/lucu kan.PNG
- lu####.net/images/video_10-most-horrific-football-injuries-18-.jpg
- lu####.net/images/video_best-football-vines-compilation-2015-best-footba...
- lu####.net/images/video_footballs-crazy-chip-lob-goals-hd.jpg
- lu####.net/images/video_funniest-red-cards-in-football-soccer-history-to...
- lu####.net/js/application.js
- lu####.net/js/bootstrap.min.js
- lu####.net/js/jquery.lazyload.js
- lu####.net/js/jquery.min.js
- lu####.net/js/menu.js
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/cache/####/data_0
- <Package Folder>/cache/####/data_1
- <Package Folder>/cache/####/data_2
- <Package Folder>/cache/####/data_3
- <Package Folder>/cache/####/f_000001
- <Package Folder>/cache/####/f_000002
- <Package Folder>/cache/####/f_000003
- <Package Folder>/cache/####/f_000004
- <Package Folder>/cache/####/f_000005
- <Package Folder>/cache/####/f_000006
- <Package Folder>/cache/####/f_000007
- <Package Folder>/cache/####/f_000008
- <Package Folder>/cache/####/f_000009
- <Package Folder>/cache/####/f_00000a
- <Package Folder>/cache/####/f_00000b
- <Package Folder>/cache/####/index
- <Package Folder>/databases/google_analytics_v4.db-journal
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
- <Package Folder>/files/gaClientId
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/com.google.android.gms.analytics.prefs.xml
- <SD-Card>/Android/####/.nomedia
Другие:
Осуществляет доступ к информации о сети.
Осуществляет доступ к информации о телефоне (номер, imei и тд.).
Отрисовывает собственные окна поверх других приложений.
