Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Android.Triada.308.origin
Сетевая активность:
Подключается к:
- UDP(DNS) <Google DNS>
- TCP(GCM) <Google Host>
- TCP(HTTP/1.1) hm.b####.com:80
- TCP(HTTP/1.1) box.jom####.com:80
- TCP(HTTP/1.1) cpu.b####.com:80
- TCP(HTTP/1.1) g####.bdst####.com:80
- TCP(HTTP/1.1) nb2.sd####.com:10091
- TCP(HTTP/1.1) cac####.b####.com:80
Запросы DNS:
- cac####.b####.com
- cpu.b####.com
- g####.bdst####.com
- g####.bdst####.com
- hm.b####.com
- nb2.sd####.com
- s.bdst####.com
Запросы HTTP GET:
- box.jom####.com/common/openjs/openBox.js?_v=####
- cac####.b####.com/log.gif?entry=####&ctid=####&log_type=####&req_id=####...
- cac####.b####.com/log.gif?entry=0&ctid=13E1D1AEF5CB2E2EC39BB7FAACEC00F3&...
- cac####.b####.com/log.gif?site_id=####&event_id=####&session_id=####&rse...
- cpu.b####.com/1001/c5646cac
- cpu.b####.com/1001/c5646cac?chk=####
- cpu.b####.com/1002/c5646cac
- cpu.b####.com/1003/c5646cac
- cpu.b####.com/1005/c5646cac
- cpu.b####.com/1006/c5646cac
- cpu.b####.com/1006/c5646cac/detail/20145202/video?pvid=####&rt=####&logi...
- cpu.b####.com/1006/c5646cac/detail/20272238/video?pvid=####&rt=####&logi...
- cpu.b####.com/1006/c5646cac/profile/e98791e89e8de88194e79b9fe680bbe983a8...
- cpu.b####.com/1007/c5646cac
- cpu.b####.com/1009/c5646cac
- cpu.b####.com/1021/c5646cac
- cpu.b####.com/1021/c5646cac?chk=####
- cpu.b####.com/img/icons.png
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/01b501f5-c605-4457...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/03a3e877-6991-499b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0515f8f2-7647-4288...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/05fd3651-58c4-486c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/06d085a8-0570-4215...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/074498df-ef20-45cb...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/095c29f4-d0db-4dea...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0973f1ae-c503-4170...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0a226215-6525-4935...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0a852880-3e1b-4229...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0c1a7ba8-ccba-4c60...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0c9d7c67-faa7-4f90...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0d4f01f5-9c8f-4b32...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0dff8e52-3a5d-41ce...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/0ffd05d9-f231-4104...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/12da5be8-ea72-4674...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1373db5e-2860-4e14...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/13a970fa-eef8-4ab4...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/13b117e8-5d5e-4e70...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/15c19d80-1d77-4337...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/16c9c380-e7d6-4be2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/173c8791-a19d-4db8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/17946151-4c43-44e1...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/18d3655a-d646-45b5...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/193988c2-e1d3-4789...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1b3da28a-ef4d-4e24...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1bbee1d5-8be6-4eb3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1c6a1324-54b8-4b4f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1cc6bde0-ae8d-49a6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/1ff6f3bb-d<SMS Add...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/230e5f6e-baa1-4e82...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/23d679dd-1b03-4600...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/25507d50-45f6-440a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/2d889670-63f7-4c49...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/30cf8928-73cf-4854...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3187ca6c-a2f3-4386...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/31d7a709-4705-4f4a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/35214528-2938-4625...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/388292fd-5ebb-4bf6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/39830046-7363-4882...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3b24cda6-efe3-48c9...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3bd7f0bc-c486-4e69...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3da17e83-7d87-4861...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/3e0fbc2b-04e3-4e57...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/40a09891-001a-4919...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/40f846dd-a8f7-410b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/428e4957-f989-49ac...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4312b9d9-bef6-4d15...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/43472cce-f9b0-4019...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/44bb1ff2-7a39-4d9c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/48997ec7-fb6a-4d9b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/492a78cd-7c7f-4cdc...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4c4b753f-9c00-48a9...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4c7875c4-5aaa-47af...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4e9cfc3a-9a91-416e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/4fc755f5-72e0-4de6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/51f885d8-a490-4387...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/51faff12-82ee-4ffd...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/554499cf-bbc0-416e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/55ea0f29-5659-43fe...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/564f8181-9a17-4d70...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/57888c4a-edb7-4440...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/57aef2a8-3eb7-4769...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/58568aad-e13c-4bdc...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/5c144719-3368-4a72...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/5cf4ebf8-b1be-4945...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/5fdae35f-65f5-49df...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/609ffb2b-cb64-4f7c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/64ee6731-8acc-4283...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/66a8a170-a941-4e62...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/67926f88-2ae5-4cb6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/67e49d76-7298-4c3c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6bb1bbaa-1283-440a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6bf6fa0a-159e-45a0...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6c9c9ae5-1a26-4182...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6cfc6f7b-b4ee-4f1c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6dc7551d-3afd-4a8e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6f1d4804-bf99-4ed5...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6f348823-9114-4734...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/6f514963-e3d5-4fb7...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7024ff6e-5b2e-4c7f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7151feb7-e7a7-45c6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/72801c60-dc9d-4316...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/72c22f3b-9c6e-4d51...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/74560124-f16c-492a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/747f9d0b-7fa0-4862...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/748ab4d7-7838-4317...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/755126d8-5f27-4efa...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7557a146-cd5d-4e75...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/755f02a4-3782-4628...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/76fdb9c6-cab8-4cda...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/78a213bb-7dd9-4861...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7c77a7e8-5241-4d5b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7ce4e404-f7ec-47ed...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7dfa1087-2ca2-45d1...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7e3a0614-f8ac-48e9...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7f749e23-3b07-4abd...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/7fcbc5c8-8e75-4ffb...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/80791bf0-2612-4d09...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/81551a70-9138-4c49...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/82c76ff5-35cc-48e1...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/83042c4d-3510-4c95...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/83fe97b1-a1eb-44b0...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8442beb9-1d91-43f4...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8478b311-2a2d-4cd4...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/84a4cde2-ed1f-4bfe...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/84b868cc-6610-468a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/84e4866e-c9be-4a43...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/87865a37-5d35-4182...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8a13cd61-6c0e-4f92...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8b11d46a-6d6b-49a8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8be3b40b-c3d9-4a44...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8c60e9f7-ae2b-4483...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8ca21723-e8f7-4a51...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8cffac45-0f7d-4267...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8d470b57-14af-40cf...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8d92a96b-a63a-4905...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8ddc8d6b-0f42-4712...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8e514ba9-891b-4fd2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/8fbb18ff-4296-4fc0...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9014d628-e34c-4c37...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9065c210-fb1b-41ea...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/91b5ab79-a0a0-4f7f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/92747f12-2363-4a55...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/933cf344-cbc0-4fa6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/93c45073-29c4-4757...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/94233e73-796e-4e6b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/962857e2-6520-4b95...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/964a20b3-1a8b-450e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/96a75913-d97e-4975...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9844e4cb-08e4-4657...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/98a219f8-430e-4963...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/99e01b46-e119-4a8e...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9a982511-df78-4be6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9abf23a8-9814-4510...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9c2fb212-712f-4140...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9cc6ba80-175b-4120...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9cd6064b-9c38-4909...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9d3ee475-47e0-4024...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9dcc2b37-bd4d-4eb9...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/9e34f784-fdd7-40a2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a260a8e8-d4c4-4766...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a27c4e40-f505-485a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a303be50-e1a3-4b71...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a5f65094-3ff1-4793...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/a8e410de-402e-41c1...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/aa9af92c-19f5-423a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/acb853e1-673b-4f79...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ad7fc0a8-e69a-49eb...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ad95107f-02d4-4011...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/adb6291e-202d-466d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/add48ada-a339-4956...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/aee8232c-e035-4179...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/af597cc7-5e61-4b34...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b0341840-2092-4090...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b09f769b-f17f-4860...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b1764d6b-bbdd-410f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b29a0855-169a-4339...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b3eabe98-89d9-4859...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b405ae78-1150-412c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b52799b7-4385-4ffd...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b59a2f16-3b3c-4279...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b714baa2-7d84-41d8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b7a59b20-2523-463b...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b871043f-f13f-439a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/b8aea16b-bb4a-4647...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/bc051071-bec7-4a78...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/be106503-6772-4a0c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/bf3f5772-b0fb-4bde...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/bf8c1a22-febc-4e37...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c0276fe3-d041-4ed9...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c0336702-5c41-45fe...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c07e0543-a295-461f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c110f0bc-9d46-4ad2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c130624a-34aa-43c1...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c379462c-36b0-4f8d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c3986adb-fcc3-4b3c...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c43b296f-d06c-4f37...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c4cad459-535a-44b6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c556568e-90b6-4859...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c749dbae-b286-4319...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c8163abb-498b-4e11...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/c9b2b47f-ab95-4a73...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ca7989e3-c643-42de...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ce28f671-b7e2-41f2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/cec65e1f-fac5-4564...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/cfb6787a-8358-4ce9...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d1d7bde3-72a1-4f02...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d23b07bf-2ecd-43e2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d3aa9808-44a5-403f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d43307e3-7281-4994...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/d9a957bf-e843-4ca1...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dab29c2f-ff68-4bc3...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/db0252df-22bf-4ae1...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dbe7a029-503d-428a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dcd96594-5cc9-4040...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/dda7a3fb-bcb3-4475...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ddbf353d-c4f8-4b59...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/de5d6e62-9e11-4f05...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/df37de70-f8f3-4a7f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e062dcfe-054c-4f14...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e134e0d3-ffcd-43bb...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e46d3c29-cf25-44b8...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e505069e-6ba4-4b0f...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e50c1eb3-4f5a-4737...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e66e15b1-9b30-41fb...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e6711836-fa23-4b02...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e673d335-39bb-4671...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e7ccf2e1-b291-4b3a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e80f840f-8d51-4ba4...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/e9540217-965c-4fa9...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ea9e46e4-25fb-4970...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/eb78110e-eb42-424a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ed9ade23-cc10-448d...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/ee10d546-a9bd-4fff...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/eecd298a-ec86-45d2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/efaea6e1-001f-45f5...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f23f458e-ebbd-4940...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f4418c43-f470-4584...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f4b23703-40ae-4306...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f56b4a89-efdd-46dc...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f743e114-525a-45b2...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f83f8be2-746f-4a45...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f87bfa1a-9aa0-40b6...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/f89e4b5f-1287-43bc...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/fab5df69-17ac-41fd...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/faf7f93f-e5b0-47b1...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/fda20f76-35bd-4dfb...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/fde4f83f-d35e-4294...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/fec74a65-de0e-4953...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/14bdffa7...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/22633ffc...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/48647172...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/496e2514...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/4cd87dea...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/5d70ddac...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/9a73a116...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/9aeec02a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/b715b92a...
- g####.bdst####.com/5K1IcD3801kUm2zgoZyCKT6zgBYnreHg-_/image/cms/b73bca2e...
- g####.bdst####.com/9aQTbzqaKgQFm2e88IuM_a/static/2017092781538/img/autho...
- g####.bdst####.com/9aQTbzqaKgQFm2e88IuM_a/static/2017092781538/img/icons...
- g####.bdst####.com/9aQTbzqaKgQFm2e88IuM_a/static/2017092781538/js/author...
- g####.bdst####.com/9aQTbzqaKgQFm2e88IuM_a/static/2017092781538/js/common...
- g####.bdst####.com/9aQTbzqaKgQFm2e88IuM_a/static/2017092781538/js/defaul...
- hm.b####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&ep=####&et=####&ja=#...
- hm.b####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&et=####&ja=####&ln=#...
- hm.b####.com/hm.gif?cc=0&ck=1&cl=16-bit&ds=800x600&ep=1730,1730&et=3&ja=...
- hm.b####.com/hm.gif?cc=0&ck=1&cl=16-bit&ds=800x600&ep=17665,8532&et=3&ja...
- hm.b####.com/hm.gif?cc=0&ck=1&cl=16-bit&ds=800x600&ep={"netAll":0,"netDn...
- hm.b####.com/hm.gif?cc=0&ck=1&cl=16-bit&ds=800x600&et=0&ja=0&ln=en-us&lo...
- hm.b####.com/hm.js?7e45c71####
Запросы HTTP POST:
- cpu.b####.com/1003/c5646cac
- cpu.b####.com/dig/get
- nb2.sd####.com:10091/opaService/link
Изменения в файловой системе:
Создает следующие файлы:
- <Package Folder>/.shell_ass/####/libopalink.so_32
- <Package Folder>/.shell_ass/####/libopalink.so_64
- <Package Folder>/.shell_ass/libopalink.so
- <Package Folder>/.shell_ass/opa_link.jar
- <Package Folder>/.shell_ass/stupid
- <Package Folder>/.shell_ass/stupid.zip
- <Package Folder>/cache/####/data_0
- <Package Folder>/cache/####/data_1
- <Package Folder>/cache/####/data_2
- <Package Folder>/cache/####/data_3
- <Package Folder>/cache/####/f_000001
- <Package Folder>/cache/####/f_000002
- <Package Folder>/cache/####/f_000003
- <Package Folder>/cache/####/f_000004
- <Package Folder>/cache/####/f_000005
- <Package Folder>/cache/####/f_000006
- <Package Folder>/cache/####/f_000007
- <Package Folder>/cache/####/f_000008
- <Package Folder>/cache/####/f_000009
- <Package Folder>/cache/####/f_00000a
- <Package Folder>/cache/####/f_00000b
- <Package Folder>/cache/####/f_00000c
- <Package Folder>/cache/####/f_00000d
- <Package Folder>/cache/####/f_00000e
- <Package Folder>/cache/####/f_00000f
- <Package Folder>/cache/####/f_000010
- <Package Folder>/cache/####/f_000011
- <Package Folder>/cache/####/f_000012
- <Package Folder>/cache/####/f_000013
- <Package Folder>/cache/####/f_000014
- <Package Folder>/cache/####/f_000015
- <Package Folder>/cache/####/f_000016
- <Package Folder>/cache/####/f_000017
- <Package Folder>/cache/####/f_000018
- <Package Folder>/cache/####/f_000019
- <Package Folder>/cache/####/f_00001a
- <Package Folder>/cache/####/f_00001b
- <Package Folder>/cache/####/f_00001c
- <Package Folder>/cache/####/f_00001d
- <Package Folder>/cache/####/f_00001e
- <Package Folder>/cache/####/f_00001f
- <Package Folder>/cache/####/f_000020
- <Package Folder>/cache/####/f_000021
- <Package Folder>/cache/####/f_000022
- <Package Folder>/cache/####/f_000023
- <Package Folder>/cache/####/f_000024
- <Package Folder>/cache/####/f_000025
- <Package Folder>/cache/####/f_000026
- <Package Folder>/cache/####/f_000027
- <Package Folder>/cache/####/f_000028
- <Package Folder>/cache/####/f_000029
- <Package Folder>/cache/####/f_00002a
- <Package Folder>/cache/####/f_00002b
- <Package Folder>/cache/####/f_00002c
- <Package Folder>/cache/####/f_00002d
- <Package Folder>/cache/####/f_00002e
- <Package Folder>/cache/####/f_00002f
- <Package Folder>/cache/####/f_000030
- <Package Folder>/cache/####/f_000031
- <Package Folder>/cache/####/f_000032
- <Package Folder>/cache/####/f_000033
- <Package Folder>/cache/####/f_000034
- <Package Folder>/cache/####/f_000035
- <Package Folder>/cache/####/f_000036
- <Package Folder>/cache/####/f_000037
- <Package Folder>/cache/####/f_000038
- <Package Folder>/cache/####/f_000039
- <Package Folder>/cache/####/f_00003a
- <Package Folder>/cache/####/f_00003b
- <Package Folder>/cache/####/f_00003c
- <Package Folder>/cache/####/f_00003d
- <Package Folder>/cache/####/f_00003e
- <Package Folder>/cache/####/f_00003f
- <Package Folder>/cache/####/f_000040
- <Package Folder>/cache/####/f_000041
- <Package Folder>/cache/####/f_000042
- <Package Folder>/cache/####/f_000043
- <Package Folder>/cache/####/f_000044
- <Package Folder>/cache/####/f_000045
- <Package Folder>/cache/####/f_000046
- <Package Folder>/cache/####/f_000047
- <Package Folder>/cache/####/f_000048
- <Package Folder>/cache/####/f_000049
- <Package Folder>/cache/####/f_00004a
- <Package Folder>/cache/####/f_00004b
- <Package Folder>/cache/####/f_00004c
- <Package Folder>/cache/####/f_00004d
- <Package Folder>/cache/####/f_00004e
- <Package Folder>/cache/####/f_00004f
- <Package Folder>/cache/####/f_000050
- <Package Folder>/cache/####/f_000051
- <Package Folder>/cache/####/f_000052
- <Package Folder>/cache/####/f_000053
- <Package Folder>/cache/####/f_000054
- <Package Folder>/cache/####/f_000055
- <Package Folder>/cache/####/f_000056
- <Package Folder>/cache/####/f_000057
- <Package Folder>/cache/####/f_000058
- <Package Folder>/cache/####/f_000059
- <Package Folder>/cache/####/f_00005a
- <Package Folder>/cache/####/f_00005b
- <Package Folder>/cache/####/f_00005c
- <Package Folder>/cache/####/f_00005d
- <Package Folder>/cache/####/f_00005e
- <Package Folder>/cache/####/f_00005f
- <Package Folder>/cache/####/f_000060
- <Package Folder>/cache/####/f_000061
- <Package Folder>/cache/####/f_000062
- <Package Folder>/cache/####/f_000063
- <Package Folder>/cache/####/f_000064
- <Package Folder>/cache/####/index
- <Package Folder>/databases/####/cc.db
- <Package Folder>/databases/####/cc.db-journal
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/databases/webviewCookiesChromium.db-journal
- <Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
- <Package Folder>/files/bltf.png
- <Package Folder>/shared_prefs/cuf_config.xml
- <Package Folder>/shared_prefs/umeng_general_config.xml
Другие:
Запускает следующие shell-скрипты:
- cat /proc/version
- cat /sys/class/net/wlan0/address
- getprop
- getprop ro.board.platform
- getprop ro.product.cpu.abi
Загружает динамические библиотеки:
- libopalink
Использует следующие алгоритмы для шифрования данных:
- DES
Использует следующие алгоритмы для расшифровки данных:
- DES
Осуществляет доступ к информации о сети.
Осуществляет доступ к информации о телефоне (номер, imei и тд.).
Добавляет задания в системный планировщик.
Отрисовывает собственные окна поверх других приложений.
