Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.Triada.308.origin
Сетевая активность:
Подключается к:
- UDP(DNS) <Google DNS>
- TCP(GCM) <Google Host>
- TCP(HTTP/1.1) hm.b####.com:80
- TCP(HTTP/1.1) box.jom####.com:80
- TCP(HTTP/1.1) cpu.b####.com:80
- TCP(HTTP/1.1) g####.bdst####.com:80
- TCP(HTTP/1.1) nb2.wh####.com:10091
- TCP(HTTP/1.1) cac####.b####.com:80
Запросы DNS:
- cac####.b####.com
- cpu.b####.com
- g####.bdst####.com
- g####.bdst####.com
- hm.b####.com
- mt####.go####.com
- nb2.wh####.com
- s.bdst####.com
Запросы HTTP GET:
- box.jom####.com/common/openjs/openBox.js?_v=####
- cac####.b####.com/log.gif?entry=####&ctid=####&log_type=####&req_id=####...
- cac####.b####.com/log.gif?site_id=####&event_id=####&session_id=####&rse...
- cpu.b####.com/1001/c5646cac
- cpu.b####.com/1001/c5646cac?chk=####
- cpu.b####.com/1002/c5646cac
- cpu.b####.com/1003/c5646cac
- cpu.b####.com/1003/c5646cac/detail/27582289143/image?sub_chn=####&pvid=#...
- cpu.b####.com/1005/c5646cac
- cpu.b####.com/1021/c5646cac
- cpu.b####.com/1021/c5646cac/detail/27951326749/image?focusid=####&pvid=#...
- cpu.b####.com/1021/c5646cac?chk=####
- cpu.b####.com/img/icons.png
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/01b501f5-c605-4457...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/029ef546-6c40-4e7a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0339e8c1-7263-4df6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/040c34c5-28ce-489e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0772a5bc-16f3-41dd...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0a54cc10-2e11-4139...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0da6969f-0602-4dd8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0dcd0108-a601-49b6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0eb29120-a585-4f36...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0f571a8e-04d5-40a2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1108f51e-4b4b-457a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1309005c-e751-4390...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/13a4acf6-1f00-4f87...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/13b117e8-5d5e-4e70...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1442e1d0-2090-41d0...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/15014909-0e22-4db3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/15fdf82e-33a5-4261...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1662acdf-e46c-48c8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/170d3b20-00a2-4c8d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/189cf6fb-31be-427d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/19f9ae68-d404-40c6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1a9fadd9-a874-417a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1acea007-4fa6-4bf3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1d4f0fad-2618-4a94...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1db745cf-aa67-4915...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1dcbd2d2-f3fa-4a8a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1ebb604d-2533-4d5e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/20884152-925b-4072...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/22a85cee-e86c-43a2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/25076559-7177-4f30...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/2531a4f9-5c29-4c71...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/25bf2acd-7166-4bf3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/2b54ab14-c403-421e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/2cbca3be-fe5f-4ba4...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/2f043811-5b43-474f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/30692eb5-3160-4f7b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/30cf8928-73cf-4854...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/31b72a41-2e4c-45d9...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/326ebbc5-a2ea-4796...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3472b977-818d-426a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/35fa5ff7-b8ab-4cd5...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/36bcb2c1-5706-4be9...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/37cdd3a7-16d3-42dd...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/39f2ab4a-e441-408e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3a4a8543-e2de-44e5...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3baf15cf-3df4-4dcc...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3d6d92c1-d1e3-4c7b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3d71e11b-ec30-4df3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3db2716d-a7bb-4952...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/424c9845-77ff-4582...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4447b15c-6171-4f5d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4582fa02-9167-4220...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/47b1f65f-5dd3-441a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/47b57529-e4c1-449e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/48a9a342-fe0a-4754...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4aad9624-5bb4-4bae...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4d9610e0-26da-4076...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4d9da1c8-2d57-4952...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4e53faff-9a25-4d69...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4e7bdacb-e7a5-4f83...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4eca40c5-f1af-4220...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4f1da9b9-9f50-42c5...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/50276a87-44cb-4e6e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/505cc747-b251-480c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/51250f21-894f-41fd...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/564f8181-9a17-4d70...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/57aef2a8-3eb7-4769...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/58586ea2-3b94-4f09...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/5a7129d8-6bfe-4f3d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/5ac116e3-3b31-42f2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/5c144719-3368-4a72...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/5c1e14f4-ceab-4c84...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/5c42764d-04e7-4794...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/60bbcae5-d1a8-470a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/60c8781a-701b-48d3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/618f203e-47d7-49a1...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/65a3eee5-f38c-423d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/67b650ac-e816-4eab...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/680d4344-d916-4591...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/68cdb30e-ea82-48aa...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/691ec1bd-2386-4368...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/69701275-f8e6-49e3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6a9064c6-ee04-4310...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6b1b2e09-d6cd-422e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6dc7551d-3afd-4a8e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/701c28d6-f90e-480f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/70867986-26eb-4093...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/70aa10e0-945f-4be3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/725c2052-78e4-4119...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/72801c60-dc9d-4316...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/74e02890-a08e-45a4...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/760e4222-6fae-400a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/77272825-9e3a-442a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/777adb36-13d7-4ed8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/78a213bb-7dd9-4861...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/78f9f26a-5643-4cfd...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7a6ad4c0-6c1c-48d8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7c681355-30fc-4f36...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7ec1b75b-3bf6-4363...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7ee037e9-3429-43b0...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/801d8a85-5060-4d2e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8104c9bc-02fc-4e1f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/810a25e9-687c-473b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/82a93e8e-01fa-4b9c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/82b39f69-c555-4922...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8405d2dc-21cd-461c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/843e061e-684a-41a4...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/878ba8a0-f6a4-4f6b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/87ce4f0f-623d-4a2e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8b4be786-a247-41af...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8bc3f1c1-5de9-4470...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8c84bc0e-6d75-4ca3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8ede6c21-aa00-4a9a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8fbb18ff-4296-4fc0...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/92468e87-8d4c-4f95...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9248d342-ff4b-4177...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9270c913-8e70-4026...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/93f75d10-0f9a-42ee...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/95259f64-2935-4712...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9532fcef-deb0-41b3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9613b88f-0a10-4e3c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/967e8a0f-4d9f-42b3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/96baf14e-8493-42f0...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9781536e-fb18-4afc...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/97959779-e1d7-4e3b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9844e4cb-08e4-4657...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/990db700-d668-4272...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9b531d6a-5b47-4976...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9f34812d-e6fc-4d45...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9f35572c-3f0a-47b5...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9f426621-56aa-4177...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a04cf6d7-bece-4f81...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a065ea42-6679-4f26...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a0854f5b-2796-4d74...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a1087ac0-b474-45a3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a16244ba-9fe0-444b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a5fe523d-b447-4bdb...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a7dc034a-1cb0-4022...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a8d3d55b-dd4f-441a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a8f873f8-6172-4c5a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a94913c9-7bb8-4b26...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a95e9e31-ec23-4d29...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/aa9af92c-19f5-423a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/aaaa003d-f9d2-463b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/aabfc211-1f84-4062...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ab72321e-c500-40c6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/abbe2a08-f7d7-490d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ac511f12-eebc-4b1d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/acb58c7d-04e3-414e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/af27d84e-edc3-48dc...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b1c03067-d71e-46d8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b5c8b710-c3cb-4ea1...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b714baa2-7d84-41d8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b7657d42-8dbc-4820...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/bdbe18fa-5e18-4af0...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/be278657-5599-4da0...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/be5a1361-ee41-4ac2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/bffd40bd-379d-48e0...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c1a3b3ad-fcdb-4e14...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c2895866-6969-4c65...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c300ddbe-0a61-4b49...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c3e813bd-7cec-439a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c43b296f-d06c-4f37...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c73d5085-7987-4f05...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c768d8c8-fb05-4751...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c958a54a-28c3-48c3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/cd7fed9d-b1f1-43e2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/cd9372bc-8796-4ccc...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/cdb108b5-ef6a-4382...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/cfa5c9f6-f16c-4bd2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d0c01e9d-31fa-4d51...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d2b96bb5-7a14-4893...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d2f4c932-3d30-48bb...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d4bc5c82-9de8-45ef...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d52f81f2-d6a5-43cd...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d5f23bb7-2a3f-4fc7...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d5f5ecb5-f2bd-425c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d7b2b2b9-6177-4f17...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d9081d1b-cd13-4fd2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dad3281e-fbed-4ce1...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/db5db977-1833-463e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/db61bd5b-602d-4bcf...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dbe7a029-503d-428a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dc354636-1fb5-4f15...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dc57fb78-604c-4115...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dd47eeb0-5387-45f1...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dd49f723-f5fb-429d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dda7a3fb-bcb3-4475...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dec336f8-07c4-43b9...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/df072ded-a29d-4ade...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/df283744-87d3-42ff...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e1477221-3d1d-4bf2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e20f1615-6dcf-4775...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e2955d88-f7ae-4b8e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e2a308ec-4630-4318...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e2d2ba66-6623-41a8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e2f9575f-f3cc-4dcd...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e31fbd3e-9d39-4a9b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e7031bfd-71f4-4728...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e7ebec94-9cf2-498d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e93092bb-713f-4d8d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ea9b0ce6-c547-4aae...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ec1d1e7f-e488-4873...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ed19f880-2040-418e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ed6c3fcd-0075-4ac9...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/eee001cd-1a1c-41e2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ef6eac38-a9fd-4ef7...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ef84a126-9cb3-443d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f0273267-71d0-4783...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f12b3694-30c3-46a7...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f190070d-5edc-4ca9...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f43efc91-03bc-473b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f5fa5c56-cf79-4f21...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f70c6280-33b2-4d7f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f7624915-7b2b-4bab...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f7e02691-b896-4f8c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f89290d7-2b3d-440e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f8f68442-9773-44c0...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/fbaa667d-91e0-4289...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/fc763856-c240-4366...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/fdf764bd-6756-456c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/044f230f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/2e317eb0...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/6b91bb98...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/730b36bd...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/80aa0e0d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/b454e49c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/cc8465dd...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/df2c4860...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/f28adfeb...
- g####.bdst####.com/9aQTbzqaKgQFm2e88IuM_a/static/2017092781538/img/icons...
- g####.bdst####.com/9aQTbzqaKgQFm2e88IuM_a/static/2017092781538/js/common...
- g####.bdst####.com/9aQTbzqaKgQFm2e88IuM_a/static/2017092781538/js/defaul...
- hm.b####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&ep=####&et=####&ja=#...
- hm.b####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&et=####&ja=####&ln=#...
- hm.b####.com/hm.gif?cc=0&ck=1&cl=16-bit&ds=800x600&ep=news*bottom*type=s...
- hm.b####.com/hm.js?7e45c71####
Запросы HTTP POST:
- cpu.b####.com/1003/c5646cac
- cpu.b####.com/1003/c5646cac/ads/27582289143/image
- cpu.b####.com/1021/c5646cac/ads/27951326749/image
- nb2.wh####.com:10091/opaService/link
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/.shell_ass/####/libopalink.so_32
- <Package Folder>/.shell_ass/####/libopalink.so_64
- <Package Folder>/.shell_ass/libopalink.so
- <Package Folder>/.shell_ass/opa_link.jar
- <Package Folder>/.shell_ass/stupid
- <Package Folder>/.shell_ass/stupid.zip
- <Package Folder>/cache/####/data_0
- <Package Folder>/cache/####/data_1
- <Package Folder>/cache/####/data_2
- <Package Folder>/cache/####/data_3
- <Package Folder>/cache/####/f_000001
- <Package Folder>/cache/####/f_000002
- <Package Folder>/cache/####/f_000003
- <Package Folder>/cache/####/f_000004
- <Package Folder>/cache/####/f_000005
- <Package Folder>/cache/####/f_000006
- <Package Folder>/cache/####/f_000007
- <Package Folder>/cache/####/f_000008
- <Package Folder>/cache/####/f_000009
- <Package Folder>/cache/####/f_00000a
- <Package Folder>/cache/####/f_00000b
- <Package Folder>/cache/####/f_00000c
- <Package Folder>/cache/####/f_00000d
- <Package Folder>/cache/####/f_00000e
- <Package Folder>/cache/####/f_00000f
- <Package Folder>/cache/####/f_000010
- <Package Folder>/cache/####/f_000011
- <Package Folder>/cache/####/f_000012
- <Package Folder>/cache/####/f_000013
- <Package Folder>/cache/####/f_000014
- <Package Folder>/cache/####/f_000015
- <Package Folder>/cache/####/f_000016
- <Package Folder>/cache/####/f_000017
- <Package Folder>/cache/####/f_000018
- <Package Folder>/cache/####/f_000019
- <Package Folder>/cache/####/f_00001a
- <Package Folder>/cache/####/f_00001b
- <Package Folder>/cache/####/f_00001c
- <Package Folder>/cache/####/f_00001d
- <Package Folder>/cache/####/f_00001e
- <Package Folder>/cache/####/f_00001f
- <Package Folder>/cache/####/f_000020
- <Package Folder>/cache/####/f_000021
- <Package Folder>/cache/####/f_000022
- <Package Folder>/cache/####/f_000023
- <Package Folder>/cache/####/f_000024
- <Package Folder>/cache/####/f_000025
- <Package Folder>/cache/####/f_000026
- <Package Folder>/cache/####/f_000027
- <Package Folder>/cache/####/f_000028
- <Package Folder>/cache/####/f_000029
- <Package Folder>/cache/####/f_00002a
- <Package Folder>/cache/####/f_00002b
- <Package Folder>/cache/####/f_00002c
- <Package Folder>/cache/####/f_00002d
- <Package Folder>/cache/####/f_00002e
- <Package Folder>/cache/####/f_00002f
- <Package Folder>/cache/####/f_000030
- <Package Folder>/cache/####/f_000031
- <Package Folder>/cache/####/f_000032
- <Package Folder>/cache/####/f_000033
- <Package Folder>/cache/####/f_000034
- <Package Folder>/cache/####/f_000035
- <Package Folder>/cache/####/f_000036
- <Package Folder>/cache/####/f_000037
- <Package Folder>/cache/####/f_000038
- <Package Folder>/cache/####/f_000039
- <Package Folder>/cache/####/f_00003a
- <Package Folder>/cache/####/f_00003b
- <Package Folder>/cache/####/f_00003c
- <Package Folder>/cache/####/f_00003d
- <Package Folder>/cache/####/f_00003e
- <Package Folder>/cache/####/f_00003f
- <Package Folder>/cache/####/f_000040
- <Package Folder>/cache/####/f_000041
- <Package Folder>/cache/####/f_000042
- <Package Folder>/cache/####/f_000043
- <Package Folder>/cache/####/f_000044
- <Package Folder>/cache/####/f_000045
- <Package Folder>/cache/####/f_000046
- <Package Folder>/cache/####/f_000047
- <Package Folder>/cache/####/f_000048
- <Package Folder>/cache/####/f_000049
- <Package Folder>/cache/####/f_00004a
- <Package Folder>/cache/####/f_00004b
- <Package Folder>/cache/####/f_00004c
- <Package Folder>/cache/####/f_00004d
- <Package Folder>/cache/####/f_00004e
- <Package Folder>/cache/####/f_00004f
- <Package Folder>/cache/####/f_000050
- <Package Folder>/cache/####/index
- <Package Folder>/databases/####/cc.db
- <Package Folder>/databases/####/cc.db-journal
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
- <Package Folder>/files/gxfx.png
- <Package Folder>/shared_prefs/cuf_config.xml
- <Package Folder>/shared_prefs/umeng_general_config.xml
Другие:
Запускает следующие shell-скрипты:
- cat /proc/version
- cat /sys/class/net/wlan0/address
- getprop
- getprop ro.board.platform
- getprop ro.product.cpu.abi
Загружает динамические библиотеки:
- libopalink
Использует следующие алгоритмы для шифрования данных:
- DES
Использует следующие алгоритмы для расшифровки данных:
- DES
Осуществляет доступ к информации о сети.
Осуществляет доступ к информации о телефоне (номер, imei и тд.).
Добавляет задания в системный планировщик.
Отрисовывает собственные окна поверх других приложений.
