Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.Triada.308.origin
Сетевая активность:
Подключается к:
- UDP(DNS) <Google DNS>
- TCP(GCM) <Google Host>
- TCP(HTTP/1.1) hm.b####.com:80
- TCP(HTTP/1.1) box.jom####.com:80
- TCP(HTTP/1.1) cpu.b####.com:80
- TCP(HTTP/1.1) g####.bdst####.com:80
- TCP(HTTP/1.1) nb2.wh####.com:10091
- TCP(HTTP/1.1) cac####.b####.com:80
Запросы DNS:
- cac####.b####.com
- cpu.b####.com
- g####.bdst####.com
- g####.bdst####.com
- hm.b####.com
- nb2.wh####.com
- s.bdst####.com
Запросы HTTP GET:
- box.jom####.com/common/openjs/openBox.js?_v=####
- cac####.b####.com/log.gif?entry=####&ctid=####&log_type=####&req_id=####...
- cac####.b####.com/log.gif?entry=0&ctid=C2ECB42A9074FB9E9F176062DC8ABEB0&...
- cac####.b####.com/log.gif?site_id=####&event_id=####&session_id=####&rse...
- cpu.b####.com/1001/c5646cac
- cpu.b####.com/1001/c5646cac?chk=####
- cpu.b####.com/1021/c5646cac
- cpu.b####.com/1021/c5646cac/detail/27850558551/image?position_id=####&pv...
- cpu.b####.com/1021/c5646cac/detail/27951326749/image?focusid=####
- cpu.b####.com/1021/c5646cac/detail/27951326749/image?focusid=####&pvid=#...
- cpu.b####.com/1021/c5646cac?chk=####
- cpu.b####.com/img/icons.png
- cpu.b####.com/img/image_default.jpg
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0203f9f7-5562-40f2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/060df8b4-f266-4f66...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/093e6f18-0b94-4c38...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0c575f3c-93f1-4624...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0da6969f-0602-4dd8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0ea5b1fe-e761-433f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0f571a8e-04d5-40a2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0f8f878d-ac8d-4c86...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1131d177-9d27-4539...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/11a3687a-a15e-4f51...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/12189d7f-96fa-4e3c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/123a7d7d-67e3-450a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1662acdf-e46c-48c8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1735870c-2e2d-4f41...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/179f1a41-62c5-4793...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/19592e04-47a5-4f01...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1cb18136-6a21-4efa...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1dcfd2c6-2e1d-433e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1dfe5474-6084-4f43...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1e23d182-ef79-4214...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1ebb604d-2533-4d5e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/23c74de8-e28b-4dc2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/2b54ab14-c403-421e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/30692eb5-3160-4f7b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/30cf8928-73cf-4854...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/325007a0-7fd7-4b7b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3472b977-818d-426a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/35cd071b-38d0-45b4...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/392b1fca-eb71-4283...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3a4a8543-e2de-44e5...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3a8b7b22-0ab9-44ee...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3b981a3c-6ffb-4b77...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3db2716d-a7bb-4952...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/435354fe-4959-4a2c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/452a9bf3-f72c-4aa5...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/456d8fbf-72e6-40de...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/47b1f65f-5dd3-441a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4aad9624-5bb4-4bae...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4b476a98-c060-45be...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4b6fdd01-21ac-4df6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4d9da1c8-2d57-4952...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4fc313c7-52cc-419f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/51e2ba95-4529-4d5f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/53d73ebc-2e1a-4e20...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/564f8181-9a17-4d70...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/56ccc62a-784c-4188...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/58586ea2-3b94-4f09...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/58eb59b4-07b0-49c7...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/5b7c9906-b98e-4f84...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/5d5e0000-c2e5-4ee0...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/5df70b8e-995e-4868...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6360387c-abbd-49b1...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/65fd8c1c-b977-49a3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/67b650ac-e816-4eab...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/69701275-f8e6-49e3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6b22a308-b136-4f8b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6fa7676e-4782-4a0c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/70867986-26eb-4093...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/725c2052-78e4-4119...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/72801c60-dc9d-4316...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7297e79b-7eb7-4955...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/74f9ea56-f014-4b3e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/76716173-58c0-438d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/76f8516c-9646-486e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7b0ab4d8-6367-407e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7cca4749-91c0-4b5d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8104c9bc-02fc-4e1f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/810a25e9-687c-473b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8324c27a-3068-498d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/84be6d06-877e-4a91...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8555d043-6488-41a3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/87ce4f0f-623d-4a2e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/88116502-5afe-4d07...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8890200a-6468-4db8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8ad870dc-9caf-4ec4...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8b4be786-a247-41af...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8f182d8c-ffb2-46ed...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8f65f93e-c4d3-41be...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/91722d45-5aad-402e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/91fdaa29-fc8b-4c7a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/924709a4-98f0-44b5...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9248d342-ff4b-4177...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/92e89089-b912-444e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9550392f-9622-48b1...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9613b88f-0a10-4e3c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9665a383-418d-4e37...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/96919d24-e077-4099...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9b00e3dc-0ad0-406e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9cd7f385-5d2b-407a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9d193734-0f24-4e53...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9e480415-5efb-4427...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a065ea42-6679-4f26...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a46cd751-76ed-4d65...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a54aa550-da85-4051...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a565184f-7c95-4733...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a6e716a3-9953-4ce6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a84a2a84-8a37-4fd8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a9622510-9ff6-435f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a9dcb847-6799-4318...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/aabfc211-1f84-4062...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b5c8b710-c3cb-4ea1...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b714baa2-7d84-41d8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b80cb6c6-6546-4cc4...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b8beac10-5e46-4d65...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ba4b350e-ac4f-4db7...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/be5a1361-ee41-4ac2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/beeb3661-2143-4574...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/bf065a22-676f-433d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/bffd40bd-379d-48e0...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c09604da-56a0-4c59...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c227ccd3-4176-4eab...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c2670079-b090-4999...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c44ed783-bc1d-40aa...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c523ea4e-abd0-46dc...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c81e0509-ae25-4623...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/cb436408-93b6-4d56...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/cbcffcd0-01d5-4fb3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/cdb108b5-ef6a-4382...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d174c164-2e19-4c54...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d1ed01f3-62e8-4b18...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d2b96bb5-7a14-4893...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d2f4c932-3d30-48bb...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d36c20f3-154a-4782...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d4c7a410-01ba-4b41...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d4d1569d-a4ab-4f6c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d52f81f2-d6a5-43cd...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d5a14bdb-8e4e-4317...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d5e07ca5-9db7-483b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d5f5ecb5-f2bd-425c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d9c3a181-c01d-428f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/da89d101-534f-4ba8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dde7eb78-be34-43e2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dec336f8-07c4-43b9...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dfbd39b0-c3cf-42cf...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e7031bfd-71f4-4728...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e7ebec94-9cf2-498d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e93092bb-713f-4d8d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e9aa3128-92d6-40a6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ea9b0ce6-c547-4aae...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ec1d1e7f-e488-4873...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f1872cb8-8712-4bfd...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f3441131-ed9b-4816...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f4fe7186-cc11-4aaf...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f5da4663-addb-4e53...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f7d2e5d7-6de0-4bb6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f7f1f281-843d-4492...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f8f68442-9773-44c0...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f9ab28eb-4d56-434d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/fc763856-c240-4366...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/fe45e6ce-3fca-4782...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ffac1db4-4120-4334...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/044f230f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/2e317eb0...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/6b91bb98...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/730b36bd...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/80aa0e0d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/b454e49c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/f28adfeb...
- g####.bdst####.com/9aQTbzqaKgQFm2e88IuM_a/static/2017092781538/img/icons...
- g####.bdst####.com/9aQTbzqaKgQFm2e88IuM_a/static/2017092781538/js/common...
- g####.bdst####.com/9aQTbzqaKgQFm2e88IuM_a/static/2017092781538/js/defaul...
- hm.b####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&ep=####&et=####&ja=#...
- hm.b####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&et=####&ja=####&ln=#...
- hm.b####.com/hm.gif?cc=0&ck=1&cl=16-bit&ds=800x600&ep=6299,5816&et=3&ja=...
- hm.b####.com/hm.gif?cc=0&ck=1&cl=16-bit&ds=800x600&et=0&ja=0&ln=en-us&lo...
- hm.b####.com/hm.js?7e45c71####
Запросы HTTP POST:
- cpu.b####.com/1021/c5646cac/ads/27850558551/image
- cpu.b####.com/1021/c5646cac/ads/27951326749/image
- cpu.b####.com/1021/c5646cac/recommend/list
- nb2.wh####.com:10091/opaService/link
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/.shell_ass/####/libopalink.so_32
- <Package Folder>/.shell_ass/####/libopalink.so_64
- <Package Folder>/.shell_ass/libopalink.so
- <Package Folder>/.shell_ass/opa_link.jar
- <Package Folder>/.shell_ass/stupid
- <Package Folder>/.shell_ass/stupid.zip
- <Package Folder>/cache/####/data_0
- <Package Folder>/cache/####/data_1
- <Package Folder>/cache/####/data_2
- <Package Folder>/cache/####/data_3
- <Package Folder>/cache/####/f_000001
- <Package Folder>/cache/####/f_000002
- <Package Folder>/cache/####/f_000003
- <Package Folder>/cache/####/f_000004
- <Package Folder>/cache/####/f_000005
- <Package Folder>/cache/####/f_000006
- <Package Folder>/cache/####/f_000007
- <Package Folder>/cache/####/f_000008
- <Package Folder>/cache/####/f_000009
- <Package Folder>/cache/####/f_00000a
- <Package Folder>/cache/####/f_00000b
- <Package Folder>/cache/####/f_00000c
- <Package Folder>/cache/####/f_00000d
- <Package Folder>/cache/####/f_00000e
- <Package Folder>/cache/####/f_00000f
- <Package Folder>/cache/####/f_000010
- <Package Folder>/cache/####/f_000011
- <Package Folder>/cache/####/f_000012
- <Package Folder>/cache/####/f_000013
- <Package Folder>/cache/####/f_000014
- <Package Folder>/cache/####/f_000015
- <Package Folder>/cache/####/f_000016
- <Package Folder>/cache/####/f_000017
- <Package Folder>/cache/####/f_000018
- <Package Folder>/cache/####/f_000019
- <Package Folder>/cache/####/f_00001a
- <Package Folder>/cache/####/f_00001b
- <Package Folder>/cache/####/f_00001c
- <Package Folder>/cache/####/f_00001d
- <Package Folder>/cache/####/f_00001e
- <Package Folder>/cache/####/f_00001f
- <Package Folder>/cache/####/f_000020
- <Package Folder>/cache/####/f_000021
- <Package Folder>/cache/####/f_000022
- <Package Folder>/cache/####/f_000023
- <Package Folder>/cache/####/f_000024
- <Package Folder>/cache/####/index
- <Package Folder>/databases/####/cc.db
- <Package Folder>/databases/####/cc.db-journal
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
- <Package Folder>/files/ltij.png
- <Package Folder>/shared_prefs/cuf_config.xml
- <Package Folder>/shared_prefs/umeng_general_config.xml
Другие:
Запускает следующие shell-скрипты:
- cat /proc/version
- cat /sys/class/net/wlan0/address
- getprop
- getprop ro.board.platform
- getprop ro.product.cpu.abi
Загружает динамические библиотеки:
- libopalink
Использует следующие алгоритмы для шифрования данных:
- DES
Использует следующие алгоритмы для расшифровки данных:
- DES
Осуществляет доступ к информации о сети.
Осуществляет доступ к информации о телефоне (номер, imei и тд.).
Добавляет задания в системный планировщик.
Отрисовывает собственные окна поверх других приложений.
